diff options
| author | Thibault Delavallée <tde@odoo.com> | 2019-12-24 09:43:21 +0000 |
|---|---|---|
| committer | Thibault Delavallée <tde@odoo.com> | 2019-12-24 11:02:33 +0000 |
| commit | 9a0267ee366c98902b0059af79c03ca56488df88 (patch) | |
| tree | 8415e25177eff6bb4e21f4a91f7ba3baa406dd15 /addons/web/static/src/js/views/basic/basic_controller.js | |
| parent | 7511f34c2b164d7e4087bc61b0f5992fc7ec051c (diff) | |
[FIX] website_slides: do not display links to unviewable slides
Channel allow to browse slides and a list of available slide is displayed
as a left panel in the eLearning frontend. Even slides current user
cannot see are displayed in order to give some information about course
content. Accessible slides are clickable, other slides should be
displayed as strings. However due to some sudo when computing slide
informations all links are set as clickable.
There is no security issue as when being redirected to a slide the
user cannot access there is an acl error. However he should not have
the links displayed, just strings. This commit fixes that behavior.
closes odoo/odoo#42338
X-original-commit: 04a957bb18665957faf87b6c47996643adbd4558
Signed-off-by: Thibault Delavallee (tde) <tde@openerp.com>
Diffstat (limited to 'addons/web/static/src/js/views/basic/basic_controller.js')
0 files changed, 0 insertions, 0 deletions