[FIX] ir_attachment: upload of attachment for non-employees

This rev. is related to eb9113c04d66627fbe04b473b9010e5de973c6aa

if a model or a resource id is not defined on an attachment
restrict access to employees only if the creator
of this attachment is not the current user.

So non-employees can access their attachments without
models/resource id, which includes attachment of
discussions threads.

Fixes #4309
Closes #4310

0 files changed, 0 insertions, 0 deletions