diff options
| author | uso-odoo <uso@odoo.com> | 2020-07-15 07:34:40 +0000 |
|---|---|---|
| committer | Barad Mahendra <mba@openerp.com> | 2020-10-20 10:17:30 +0000 |
| commit | 81098122c574ab701dfad610a26cfad1bb1b9b84 (patch) | |
| tree | a7ea305aeb7818f70eddc55cb0b313bfb07f21c7 /addons/fleet/models | |
| parent | ecb56a6893dd7b76402c2262fb93f8dea079fde0 (diff) | |
[FIX] fleet: Fix access error on assign driver linked to internal user
Currently, Failing at base/models/res_partner.py#L535
We write on the partner because of the related `plan_to_change_car`
When Assign driver linked to internal user without admin rights
it gives an error in security rules due to write on partner.
So while creating the vehicle when driver is assigned pop the value
for related field plan_to_change_car and rewrite the same with sudo.
closes odoo/odoo#60353
Issue: #54199
Taskid: 2309192
X-original-commit: af21dba516de688743f75e6ffb3bc3341578e37a
Signed-off-by: Yannick Tivisse (yti) <yti@odoo.com>
Co-authored-by: LucasLefevre <lul@odoo.com>
Diffstat (limited to 'addons/fleet/models')
| -rw-r--r-- | addons/fleet/models/fleet_vehicle.py | 5 |
1 files changed, 5 insertions, 0 deletions
diff --git a/addons/fleet/models/fleet_vehicle.py b/addons/fleet/models/fleet_vehicle.py index a74add5e386..34798e8e725 100644 --- a/addons/fleet/models/fleet_vehicle.py +++ b/addons/fleet/models/fleet_vehicle.py @@ -200,7 +200,12 @@ class FleetVehicle(models.Model): @api.model def create(self, vals): + # Fleet administrator may not have rights to create the plan_to_change_car value when the driver_id is a res.user + # This trick is used to prevent access right error. + ptc_value = 'plan_to_change_car' in vals.keys() and {'plan_to_change_car': vals.pop('plan_to_change_car')} res = super(FleetVehicle, self).create(vals) + if ptc_value: + res.sudo().write(ptc_value) if 'driver_id' in vals and vals['driver_id']: res.create_driver_history(vals['driver_id']) if 'future_driver_id' in vals and vals['future_driver_id']: |