Skip to content
Snippets Groups Projects
New look: Off

Edit mode: Creating new Records should specify the parent by ID, not by Name

    • Open Issue created by Henrik tom Wörden @henrik

    Created by: Quazgar

    Currently, the edit mode specifies the parent by name, not by ID. See for example this POST payload created by the edit mode:

    <Request><Record name="c"><Parent name="A"/></Record></Request>

    If there is already a Record named a (lower-case), it will not be possible any more to create a new Record of Type A with the edit mode. Instead, if instead of name="A", the request specified id=101, this would be a legal request.

    Security implications

    Note that this would probably allow any user which can create records to make the edit mode unusable for creating Records.

    DoD

    • Edit mode uses ID of parent RecordType internally.
    • Name of parent is still being used for display.
    • Test tests:
      • Create RT A
      • Create R a(A)
      • Create R b(A)

    Imported comments:

    By Timm Fitschen on 2021-02-11T20:05:38.224Z

    assigned to @timm.fitschen

    1 of 3 checklist items completed · Edited
    To upload designs, you'll need to enable LFS and have an admin enable hashed storage. More information

    Child items 0

    • No child items are currently assigned. Use child items to break down this issue into smaller parts.

    Activity

    Please register or sign in to reply