diff options
| author | Yannick Tivisse <yti@odoo.com> | 2019-11-22 13:40:20 +0000 |
|---|---|---|
| committer | Yannick Tivisse <yti@odoo.com> | 2019-11-22 14:45:22 +0000 |
| commit | 26e32dac34cd2fdd59d3cebbfc2a8a4cb7f25fea (patch) | |
| tree | 41ec5d2f7c64900134afcc8900d1bb87f4dbf8f6 | |
| parent | 368fde4704013fdbb7ac16dfa1e67a227dc813f5 (diff) | |
[IMP] portal: Partial revert of #37312
Purpose
=======
This fix makes no sense because it exposes some private data to
portal users. Fortunately it was only introduced in the master branch.
closes odoo/odoo#40710
Signed-off-by: Yannick Tivisse (yti) <yti@odoo.com>
| -rw-r--r-- | addons/account/controllers/portal.py | 3 | ||||
| -rw-r--r-- | addons/purchase/controllers/portal.py | 2 | ||||
| -rw-r--r-- | addons/sale/controllers/portal.py | 4 |
3 files changed, 4 insertions, 5 deletions
diff --git a/addons/account/controllers/portal.py b/addons/account/controllers/portal.py index 005f1997af4..b72d3415bcf 100644 --- a/addons/account/controllers/portal.py +++ b/addons/account/controllers/portal.py @@ -11,8 +11,7 @@ class PortalAccount(CustomerPortal): def _prepare_portal_layout_values(self): values = super(PortalAccount, self)._prepare_portal_layout_values() - # An internal user could not have access to the account.move model - invoice_count = request.env['account.move'].sudo().search_count([ + invoice_count = request.env['account.move'].search_count([ ('type', 'in', ('out_invoice', 'in_invoice', 'out_refund', 'in_refund', 'out_receipt', 'in_receipt')), ]) values['invoice_count'] = invoice_count diff --git a/addons/purchase/controllers/portal.py b/addons/purchase/controllers/portal.py index 73e2b2bbb3a..171373bbec5 100644 --- a/addons/purchase/controllers/portal.py +++ b/addons/purchase/controllers/portal.py @@ -18,7 +18,7 @@ class CustomerPortal(CustomerPortal): def _prepare_portal_layout_values(self): values = super(CustomerPortal, self)._prepare_portal_layout_values() - values['purchase_count'] = request.env['purchase.order'].sudo().search_count([ + values['purchase_count'] = request.env['purchase.order'].search_count([ ('state', 'in', ['purchase', 'done', 'cancel']) ]) return values diff --git a/addons/sale/controllers/portal.py b/addons/sale/controllers/portal.py index 9ba8451c8f2..52495a93316 100644 --- a/addons/sale/controllers/portal.py +++ b/addons/sale/controllers/portal.py @@ -19,11 +19,11 @@ class CustomerPortal(CustomerPortal): partner = request.env.user.partner_id SaleOrder = request.env['sale.order'] - quotation_count = SaleOrder.sudo().search_count([ + quotation_count = SaleOrder.search_count([ ('message_partner_ids', 'child_of', [partner.commercial_partner_id.id]), ('state', 'in', ['sent', 'cancel']) ]) - order_count = SaleOrder.sudo().search_count([ + order_count = SaleOrder.search_count([ ('message_partner_ids', 'child_of', [partner.commercial_partner_id.id]), ('state', 'in', ['sale', 'done']) ]) |