knop-project / knop

Web application framework for Lasso 8 and 9
18 stars 46 forks source link

record locking is broken #131

Closed stevepiercy closed 7 years ago

stevepiercy commented 7 years ago

Record locking fails with error messages, depending on whether one is trying to edit:

Keyfield or keyvalue missing 7006

or delete:

Record locked by another user 7010

a record in the Knop 9 demo under Customer Advanced > Edit.

In addition, an anonymous user can delete any record with a record lock through the Customers Simple interface.

stevepiercy commented 7 years ago

I have no idea why this does not work, but I isolated it to an issue with knop_seed and blowfish_decrypt using an instance variable set to the value of knop_seed.

To replicate

Potential fix

Test code used in a failed attempt to replicate the issue

https://gist.github.com/stevepiercy/5b8dd3d67edf7aa61671395d3ea167ab

stevepiercy commented 7 years ago

Fixed in 6e1b0547985cc78ed69861391fedea0635ee1441