[FIX] hr_holidays: wrong inheritance and security issue

Commit 565ab7a2e49c92678378d80a95fadaee2b9db3e7 added a bypass to message subscription because some auto
subscription is done without the right to edit the record. However there
are two issues with this commit

 * message_subscribe API changed and code tried to pass now removed parameters;
 * sudo-ing without checking any access rights before is a security issue;

This commit fixes the call and add an access right on read. As few people
(mostly HR officers and managers) can read a leave request it solves the
issue of auto subscription while a better solution is found.

0 files changed, 0 insertions, 0 deletions