diff options
| author | Aaron Bohy <aab@odoo.com> | 2016-01-08 08:29:53 +0100 |
|---|---|---|
| committer | Aaron Bohy <aab@odoo.com> | 2016-01-08 14:32:51 +0100 |
| commit | dfdd38e3b214ebc2e621c92add6d2adea2b909ce (patch) | |
| tree | 63a9a424193896fc2729cd8f427fd5bce6d4f317 /addons/web/static/lib/jquery.mjs.nestedSortable | |
| parent | 0fbc128033466d5c0af3ee468e35e00bad036c04 (diff) | |
[FIX] mail: Discuss: don't suggest to join private channels
Problem was that administrators have access to every channels, even private
channels they are not registered to, because when trying to join an existing
channel, the autocomplete proposed every channels accessible for the user, but
didn't filter private ones.
This rev. makes sure to only suggest non-private channels.
Also prevent '|' domain injection to disable filters (odoo/odoo@44e65e72d3a362dedf2e7084ae193b5d8d4be3ad)
by using expression.py to build domain.
Diffstat (limited to 'addons/web/static/lib/jquery.mjs.nestedSortable')
0 files changed, 0 insertions, 0 deletions