diff options
| author | Olivier Dony <odo@openerp.com> | 2017-03-06 10:33:58 +0100 |
|---|---|---|
| committer | Olivier Dony <odo@openerp.com> | 2017-03-06 10:56:23 +0100 |
| commit | 944def6932ac73a05e7db33dbefc92a885bc9744 (patch) | |
| tree | 9bdfa6ce3abea4c69cdc3aba2355ad6aad610084 /addons/note/security/note_security.xml | |
| parent | d569142ec8a3354349aec0582ea7c58e09f1d57a (diff) | |
[FIX] ir.actions.server: allow execution by portal/public requesests
When an automated action triggers for an action of a public/portal
user session, the server action is executed with the session
credentials. As of 4a18d5744e0a36cb2f120bfad00b52ad22f4d01d
only employees can access model fields, including the model name,
so a temporary sudo() elevation is necessary to find the model name.
The `model` and `record` action context parameters are however still
provided with the credentials of the session, not the super-user.
Diffstat (limited to 'addons/note/security/note_security.xml')
0 files changed, 0 insertions, 0 deletions