diff options
| author | Martin Trigaux <mat@odoo.com> | 2021-02-04 14:25:07 +0000 |
|---|---|---|
| committer | Martin Trigaux <mat@odoo.com> | 2021-02-05 09:36:36 +0000 |
| commit | 33868b4e14124800035ea99df111b35b4199ae60 (patch) | |
| tree | a5760061c130d2dedcfc7d570968a03780300233 /addons/web/static/lib/jquery.mjs.nestedSortable/jquery.mjs.nestedSortable.js | |
| parent | f8cecfcc95fb46b0ea1c265e18c49769cb785784 (diff) | |
[FIX] base: query company dependant as superuser
When retrieving company dependant values, the computed domain called
search_multi method of ir.property as normal user.
Since odoo/odoo@8f578637076d4b65 ir.property records are no longer
readable by a normal classical user.
To reproduce:
Add a domain using a company_dependant field
e.g. on res.partner, with purchase installed, modify the parent_id
field in form view to
<field name="parent_id" ... domain="[('property_purchase_currency_id','=',property_purchase_currency_id)]" />
When clicking on the parent_id with a low priviledge user, an
access-right error is raised, as the user doesn't have access to
ir.property records
Fixes odoo/odoo#65450
closes odoo/odoo#65552
Signed-off-by: Martin Trigaux (mat) <mat@odoo.com>
Diffstat (limited to 'addons/web/static/lib/jquery.mjs.nestedSortable/jquery.mjs.nestedSortable.js')
0 files changed, 0 insertions, 0 deletions
