Custom Query (73 matches)
Results (67 - 69 of 73)
Ticket | Resolution | Summary | Owner | Reporter |
---|---|---|---|---|
#96 | fixed | Remove unused fields from InventoryItem | ||
Description |
All the manufacturer*, averageDeliveryTime and alternateItems fields are hardly used and can be removed. The alternateItems may be removed as the inventory text search is now very good. Data and fields can simply be dropped. The spareFor will be retained for now. |
|||
#97 | fixed | Drop the entire Manufacturer domain concept | ||
Description |
Following on from ticket #96, the entire Manufacturer domain class is hardly used and can be removed. |
|||
#98 | fixed | Annotation based security is easy to bypass by adding ".html' to the URL | ||
Description |
Upstream security issue, see: http://jira.grails.org/browse/GPACEGI-41 Recommended fix is to set Config.groovy: grails.mime.file.extensions = false This did not leave gnuMims completely open to the world since gnuMims was configured with pessimistic security. However a logged in user may access urls that they are not authorised to. |