Uploaded image for project: 'OFBiz'
  1. OFBiz
  2. OFBIZ-431

Editting Order goes recursive with promotions...

    XMLWordPrintableJSON

Details

    • Bug
    • Status: Closed
    • Critical
    • Resolution: Fixed
    • Trunk
    • None
    • order
    • None
    • N/A - clean default

    Description

      With the standard demo data raise an order for admin with 1 GZ-1000 and 1 GZ-7000, 3 promotional products will be added to the order which is fine.

      Find and view the newly created order in the order application. Click on the edit link and then try to increase the order quantity of the GZ-1000 from 1 to 2, the system will thrash away for a while and then fail with a transaction error, timed out.

      Once the dust has settled you can see that the party has also been sent 100 +/-5 email notification changes, which is were I'm getting the feeling that recursion is the problem!

      Trying to cancel a line item can also cause the same effect, in general editting orders with promotions seems to cause lots of problems at the moment.

      PS: I'd advise this only gets tested on local development machines as the impact is quite an intense load on the server and can result in DoS style problems. That said I did execute this once on the "demo.dejc.com" server (sorry David) just to check it wasn't anything I'd changed, the admin account now has a lot of order change notifications (at least until the next reload of the site!).

      PPS: This can also be triggered via the customer facing site, when cancelling a line item from the order history page, bit of an exposure for live sites to DoS from malicious users.

      Attachments

        1. 431-1.patch
          9 kB
          David Shere

        Issue Links

          Activity

            People

              jacopoc Jacopo Cappellato
              raybarlow Ray Barlow
              Votes:
              1 Vote for this issue
              Watchers:
              2 Start watching this issue

              Dates

                Created:
                Updated:
                Resolved: