diff options
| author | Martin Trigaux <mat@openerp.com> | 2013-10-30 09:44:08 +0100 |
|---|---|---|
| committer | Martin Trigaux <mat@openerp.com> | 2013-10-30 09:44:08 +0100 |
| commit | e2d6786bc151cf53c06147ea958c22065e87b568 (patch) | |
| tree | 6e667fa0a4acae4ff5ba4339784553e0c354241d /addons/analytic_user_function | |
| parent | 40c309024c166bda40256d768108dca1748108c2 (diff) | |
| parent | 15905e78c5ad38ffdc039ade20f272fcba9ccbfe (diff) | |
[FIX] ir_attachment: fix security issues on ir_attachment
check: verify the permissions even when no ids are passed (skipped permission checking for create)
create: verify has the write access on the related model (instead of create, was not checked anyway)
function field: execute the write in fnct_inv as superuser (was impossible to have creation without write access)
bzr revid: mat@openerp.com-20131030084408-t857gl7d4lkbrj5p
Diffstat (limited to 'addons/analytic_user_function')
0 files changed, 0 insertions, 0 deletions