Cross tenant error when a parenthesis is forgotten in the Info Window where clause
Description
When configuring an Info Window, if you forget to set the parenthesis in the where clause using an OR clause.
The results are wrong (which is normal since it was the implementors fault) but it also shows records from other tenants. So if you set the where clause wrong in Business Partner info and use it in Tenant x, you will see all business partners from Garden World and other tenants.
This happens because in InfoWindow line 2166, when adding the Fully qualified SQL the wrong OR clause, makes the following conditions useless. The access SQL should be surrounded always in parenthesis probably
When configuring an Info Window, if you forget to set the parenthesis in the where clause using an OR clause.
The results are wrong (which is normal since it was the implementors fault) but it also shows records from other tenants. So if you set the where clause wrong in Business Partner info and use it in Tenant x, you will see all business partners from Garden World and other tenants.
This happens because in InfoWindow line 2166, when adding the Fully qualified SQL the wrong OR clause, makes the following conditions useless. The access SQL should be surrounded always in parenthesis probably