diff options
| author | Romain Derie <rde@odoo.com> | 2019-07-25 16:05:40 +0000 |
|---|---|---|
| committer | Jeremy Kersten <jke@odoo.com> | 2019-08-03 09:51:22 +0000 |
| commit | 4086f344d8717700782b86bf927d9c7dc4f1df51 (patch) | |
| tree | 4bcc41359f578c55b4b6fef3c553515d10249bc7 /addons/web/static/src/js/views/basic/basic_controller.js | |
| parent | 7a90dedd25755c2d0a6091b13a5cec7de7b52009 (diff) | |
[FIX] website: correctly check security of publish mixin
Commit 916968058db0 introduced a mechanism to check rights when writing or
creating on `website_published` field.
Problem is, `website_published` is just kind of a related to `is_published`
which really stores the value.
Thus, the checks would not work when writing/creating on `is_published`.
That would leave a loophole to bypass the expected behavior.
Diffstat (limited to 'addons/web/static/src/js/views/basic/basic_controller.js')
0 files changed, 0 insertions, 0 deletions