diff options
| author | Nicolas Martinelli <nim@odoo.com> | 2016-03-30 13:16:14 +0200 |
|---|---|---|
| committer | Nicolas Martinelli <nim@odoo.com> | 2016-03-30 13:33:33 +0200 |
| commit | fd8570770ddc6546a07a1b9876acf58510d31679 (patch) | |
| tree | a9b2956be77d7e6a4eed232fc82057a951b85ab3 /addons/web/static/src/js/framework/session_instance.js | |
| parent | 4b6218874a176ea244d4f2f7cd038cf110b600fb (diff) | |
[FIX] website_portal_sale, website_sale_(*): access to orders
When a user tries to access one of his orders, the order is shown empty.
This is due to the domain which is applied as an "access check" attempt
and might filter out the order.
The fix directly checks the access rights of the user regarding the
sales order, and return a '403' code if necessary.
opw-671107
Diffstat (limited to 'addons/web/static/src/js/framework/session_instance.js')
0 files changed, 0 insertions, 0 deletions