summaryrefslogtreecommitdiff
path: root/addons/analytic_user_function
diff options
context:
space:
mode:
authorMartin Trigaux <mat@openerp.com>2013-10-29 18:14:20 +0100
committerMartin Trigaux <mat@openerp.com>2013-10-29 18:14:20 +0100
commit15905e78c5ad38ffdc039ade20f272fcba9ccbfe (patch)
tree7cad4d9bbb2a6170996d5a7040dc050fdc52a497 /addons/analytic_user_function
parent23e6b81833a4fa2c6e521ccb29b538262f10f4b5 (diff)
[FIX] ir_attachment: fix security issues on ir_attachment
check: verify the permissions even when no ids are passed (skipped permission checking for create) create: verify has the write access on the related model (instead of create, was not checked anyway) function field: execute the write in fnct_inv as superuser (was impossible to have creation without write access) bzr revid: mat@openerp.com-20131029171420-x87wu7ph8ej7mtro
Diffstat (limited to 'addons/analytic_user_function')
0 files changed, 0 insertions, 0 deletions