diff options
| author | Martin Trigaux <mat@odoo.com> | 2020-06-19 13:02:34 +0000 |
|---|---|---|
| committer | Martin Trigaux <mat@odoo.com> | 2020-08-17 09:08:23 +0000 |
| commit | d5c16492397047ceb97a0879aa61f068a0eeeca8 (patch) | |
| tree | ea2de631dcabee0a59c22b927ce0b5cbd8d6af12 /addons/link_tracker | |
| parent | e6e0eafccd483e2b002b45b514181c8ce4238b0d (diff) | |
[IMP] base,web: _for_xml_id as a safe access point
/web/action/load is the public controller that Should be used by the
webclient to fetch actions
_for_xml_id is the default access method on actions that implements
fields filtering to avoid leaking server action code or other
information not needed by the webclient
Implementing whitelist of fields that can be access per model
Diffstat (limited to 'addons/link_tracker')
| -rw-r--r-- | addons/link_tracker/models/link_tracker.py | 2 |
1 files changed, 1 insertions, 1 deletions
diff --git a/addons/link_tracker/models/link_tracker.py b/addons/link_tracker/models/link_tracker.py index 2ee2fad31ab..50b00b9011f 100644 --- a/addons/link_tracker/models/link_tracker.py +++ b/addons/link_tracker/models/link_tracker.py @@ -145,7 +145,7 @@ class LinkTracker(models.Model): raise NotImplementedError('Moved on mail.render.mixin') def action_view_statistics(self): - action = self.env['ir.actions.act_window'].for_xml_id('link_tracker', 'link_tracker_click_action_statistics') + action = self.env['ir.actions.act_window']._for_xml_id('link_tracker.link_tracker_click_action_statistics') action['domain'] = [('link_id', '=', self.id)] action['context'] = dict(self._context, create=False) return action |