diff options
| author | Thibault Delavallée <tde@openerp.com> | 2012-12-12 13:55:18 +0100 |
|---|---|---|
| committer | Thibault Delavallée <tde@openerp.com> | 2012-12-12 13:55:18 +0100 |
| commit | 347d0e5b468cf042cb6ea431c367bbbd54bdb39b (patch) | |
| tree | 61a784d734c2f43707cf0ddffc3a91dbe4284d81 /addons/mail | |
| parent | 6f1f3b325d17b057c7cd6aba2d4a1b29c481f4c3 (diff) | |
[IMP] portal removed access rights of portal user on res_partner and derived tables. Updated several accesses to bypass the security issues. Updated portal tests to have a more complete test scenario.
bzr revid: tde@openerp.com-20121212125518-k0s07niojr8a1xtu
Diffstat (limited to 'addons/mail')
| -rw-r--r-- | addons/mail/mail_thread.py | 5 | ||||
| -rw-r--r-- | addons/mail/wizard/mail_compose_message_view.xml | 2 |
2 files changed, 5 insertions, 2 deletions
diff --git a/addons/mail/mail_thread.py b/addons/mail/mail_thread.py index bb5d94843fc..ac2b0efb670 100644 --- a/addons/mail/mail_thread.py +++ b/addons/mail/mail_thread.py @@ -213,8 +213,11 @@ class mail_thread(osv.AbstractModel): def create(self, cr, uid, vals, context=None): """ Override to subscribe the current user. """ + if context is None: + context = {} thread_id = super(mail_thread, self).create(cr, uid, vals, context=context) - self.message_subscribe_users(cr, uid, [thread_id], [uid], context=context) + if not context.get('mail_nosubscribe'): + self.message_subscribe_users(cr, uid, [thread_id], [uid], context=context) return thread_id def unlink(self, cr, uid, ids, context=None): diff --git a/addons/mail/wizard/mail_compose_message_view.xml b/addons/mail/wizard/mail_compose_message_view.xml index c0b329690e3..3b8e51f35d6 100644 --- a/addons/mail/wizard/mail_compose_message_view.xml +++ b/addons/mail/wizard/mail_compose_message_view.xml @@ -14,7 +14,7 @@ <field name="parent_id" invisible="1"/> <!-- visible wizard --> <label for="partner_ids" string="Recipients"/> - <div> + <div groups="base.group_user"> <span attrs="{'invisible':['|', ('model', '=', False), ('composition_mode', '!=', 'mass_mail')]}"> Followers of selected items and </span> |