summaryrefslogtreecommitdiff
path: root/addons/project/security/project_security.xml
diff options
context:
space:
mode:
authorRaphael Collet <rco@odoo.com>2019-06-27 15:00:41 +0000
committerRaphael Collet <rco@odoo.com>2019-07-04 11:32:22 +0000
commitcaf900e89ea292c56ed773232792a2aab19de8d5 (patch)
treed2d4b59e10a00fe514e3a38ea0966b1fd8389a6d /addons/project/security/project_security.xml
parent6230f72d2be58069dfd264623944a45c84c99ba4 (diff)
[FIX] *: use `auth='public'` in controllers that use `request.env`
The following trick used to work, because `sudo()` was actually making an environment for the superuser to operate upon: request.env[...].sudo().method(...) It no longer works in general, since `sudo()` now makes an environment in superuser mode but with `uid=None`! It may still work by accident for operations that never use `env.uid`, but is broken in general. Using `auth='public'` fixes the problem by using the public user when no user is available. closes odoo/odoo#34297 Signed-off-by: Olivier Dony (odo) <odo@openerp.com>
Diffstat (limited to 'addons/project/security/project_security.xml')
0 files changed, 0 insertions, 0 deletions