diff options
| author | Laurent Smet <las@openerp.com> | 2018-07-23 12:21:06 +0200 |
|---|---|---|
| committer | qdp-odoo <qdp@odoo.com> | 2018-07-23 12:21:06 +0200 |
| commit | 93cacd5e598ee5be8697301b1cf6fd7bf8b8e24c (patch) | |
| tree | fb399cdc6b625d5d96c4f51c036e6d81dd3fcda2 /addons/account_test | |
| parent | 6ea300498f78eaaee8c986e6302596448dc1339d (diff) | |
[FIX] account: improve security in reports and in account's query_get()
* privatize the get_report_values() method
* check read access rights and ir.rules in _query_get() from account module
Was task 36590
Was PR #25822
Diffstat (limited to 'addons/account_test')
| -rw-r--r-- | addons/account_test/report/report_account_test.py | 2 |
1 files changed, 1 insertions, 1 deletions
diff --git a/addons/account_test/report/report_account_test.py b/addons/account_test/report/report_account_test.py index ac64c1faea0..1420f647cf8 100644 --- a/addons/account_test/report/report_account_test.py +++ b/addons/account_test/report/report_account_test.py @@ -61,7 +61,7 @@ class ReportAssertAccount(models.AbstractModel): return result @api.model - def get_report_values(self, docids, data=None): + def _get_report_values(self, docids, data=None): report = self.env['ir.actions.report']._get_report_from_name('account_test.report_accounttest') records = self.env['accounting.assert.test'].browse(self.ids) return { |