diff options
| author | Martin Trigaux <mat@odoo.com> | 2020-06-19 13:02:34 +0000 |
|---|---|---|
| committer | Martin Trigaux <mat@odoo.com> | 2020-08-17 09:08:23 +0000 |
| commit | d5c16492397047ceb97a0879aa61f068a0eeeca8 (patch) | |
| tree | ea2de631dcabee0a59c22b927ce0b5cbd8d6af12 /addons/project | |
| parent | e6e0eafccd483e2b002b45b514181c8ce4238b0d (diff) | |
[IMP] base,web: _for_xml_id as a safe access point
/web/action/load is the public controller that Should be used by the
webclient to fetch actions
_for_xml_id is the default access method on actions that implements
fields filtering to avoid leaking server action code or other
information not needed by the webclient
Implementing whitelist of fields that can be access per model
Diffstat (limited to 'addons/project')
| -rw-r--r-- | addons/project/models/project.py | 2 |
1 files changed, 1 insertions, 1 deletions
diff --git a/addons/project/models/project.py b/addons/project/models/project.py index 325c446ae59..374e5dcda48 100644 --- a/addons/project/models/project.py +++ b/addons/project/models/project.py @@ -442,7 +442,7 @@ class Project(models.Model): def action_view_all_rating(self): """ return the action to see all the rating of the project and activate default filters""" - action = self.env['ir.actions.act_window'].for_xml_id('project', 'rating_rating_action_view_project_rating') + action = self.env['ir.actions.act_window']._for_xml_id('project.rating_rating_action_view_project_rating') action['name'] = _('Ratings of %s') % (self.name,) action_context = ast.literal_eval(action['context']) if action['context'] else {} action_context.update(self._context) |