diff options
| author | jem-odoo <jem@openerp.com> | 2019-07-26 13:42:53 +0000 |
|---|---|---|
| committer | jem-odoo <jem@openerp.com> | 2019-07-26 14:11:47 +0000 |
| commit | 44123897329c13fc41801f626616c43a24ca13f5 (patch) | |
| tree | 5460237b1f51dfe3406171e4a5df8d2068fdb4b8 /addons/web/static/lib/jquery.mjs.nestedSortable/jquery.mjs.nestedSortable.js | |
| parent | 4909e87cd463c3bedcf096e0535ec90d829aa491 (diff) | |
[FIX] project: useless field fetched
Since f98470e6cff9a6d77958128a8f6ea94e18dc8c71, the 'user_email' field on project.task is
'related_sudo=False', checking access rights when fetching the field. For performance issue,
we need to keep this fix (as badly explain in commit above).
But, this causes multi company problem. Here are the steps to reproduce:
1/ User 1 (in company A) creates a task in a project (all in company A)
2/ user 1 switches to company B
3/ user 2 (in company A) tries to access the task and get an error, as it tries to access
a field 'email' of 'res.users' as himself (not 'sudo'), but the user is in a company that
user B can not access, hence the error.
The fix is quite simple here, as the problematic field is not used in the kanban view. It
does not solve the source problem, but the user is not blocked anymore.
opw-2041982
closes odoo/odoo#35243
Signed-off-by: Jérome Maes (jem) <jem@openerp.com>
Diffstat (limited to 'addons/web/static/lib/jquery.mjs.nestedSortable/jquery.mjs.nestedSortable.js')
0 files changed, 0 insertions, 0 deletions