diff options
| author | Yannick Tivisse <yti@odoo.com> | 2019-11-22 13:40:20 +0000 |
|---|---|---|
| committer | Yannick Tivisse <yti@odoo.com> | 2019-11-22 14:45:22 +0000 |
| commit | 26e32dac34cd2fdd59d3cebbfc2a8a4cb7f25fea (patch) | |
| tree | 41ec5d2f7c64900134afcc8900d1bb87f4dbf8f6 /addons/purchase/controllers | |
| parent | 368fde4704013fdbb7ac16dfa1e67a227dc813f5 (diff) | |
[IMP] portal: Partial revert of #37312
Purpose
=======
This fix makes no sense because it exposes some private data to
portal users. Fortunately it was only introduced in the master branch.
closes odoo/odoo#40710
Signed-off-by: Yannick Tivisse (yti) <yti@odoo.com>
Diffstat (limited to 'addons/purchase/controllers')
| -rw-r--r-- | addons/purchase/controllers/portal.py | 2 |
1 files changed, 1 insertions, 1 deletions
diff --git a/addons/purchase/controllers/portal.py b/addons/purchase/controllers/portal.py index 73e2b2bbb3a..171373bbec5 100644 --- a/addons/purchase/controllers/portal.py +++ b/addons/purchase/controllers/portal.py @@ -18,7 +18,7 @@ class CustomerPortal(CustomerPortal): def _prepare_portal_layout_values(self): values = super(CustomerPortal, self)._prepare_portal_layout_values() - values['purchase_count'] = request.env['purchase.order'].sudo().search_count([ + values['purchase_count'] = request.env['purchase.order'].search_count([ ('state', 'in', ['purchase', 'done', 'cancel']) ]) return values |