Cross tenant error when a parenthesis is forgotten in the Info Window where clause

Description

When configuring an Info Window, if you forget to set the parenthesis in the where clause using an OR clause.

The results are wrong (which is normal since it was the implementors fault) but it also shows records from other tenants. So if you set the where clause wrong in Business Partner info and use it in Tenant x, you will see all business partners from Garden World and other tenants.

This happens because in InfoWindow line 2166, when adding the Fully qualified SQL the wrong OR clause, makes the following conditions useless. The access SQL should be surrounded always in parenthesis probably

Environment

None

Activity

Fixed

Details

Assignee

Reporter

Components

Fix versions

Affects versions

Priority

Created June 19, 2023 at 11:47 AM
Updated December 2, 2023 at 1:23 PM
Resolved October 17, 2023 at 7:20 AM