NF9 Improve Form SQL Process

From iDempiere en

Feature: Improve Form SQL Process

Goal: Technical

Developer: Carlos Ruiz

Description:

The form SQL Process has been improved to allow executing a configurable set of commands.

The configuration is defined in the SysConfig key FORM_SQL_PROCESS_ALLOWED_KEYWORDS, by default the form is enabled to execute the following commands:

  • ALTER
  • ANALYZE
  • COMMENT
  • CREATE
  • DELETE
  • DROP
  • GRANT
  • INSERT
  • REINDEX
  • REVOKE
  • SET
  • UPDATE
  • TRUNCATE
  • VACUUM

Restricting one of those commands to be executed can be simply done by removing it from this SysConfig whitelist.

The form also supports multiple SQL statements separated by semicolon (;)

For example:

01 SQLProcess.png

As part of the improvements the SQL statements executed are now logged in the AD_Issue table as shown here:

02 AuditIssue.png


Technical Info: IDEMPIERE-5450

Cookies help us deliver our services. By using our services, you agree to our use of cookies.