diff options
| author | Odoo's Mergebot <xmo+roboto@odoo.com> | 2020-05-28 07:13:56 +0200 |
|---|---|---|
| committer | GitHub <noreply@github.com> | 2020-05-28 07:13:56 +0200 |
| commit | 41bf013e04db0d03ca3648b70329df2c47087ef2 (patch) | |
| tree | 24fbdd78ed852c2f0b97b54476dea5bd736b3425 /addons/web/static/src/js/views/basic/basic_renderer.js | |
| parent | 7b8d12e6dc47f1d519f9fc077b073e4ea6a24d71 (diff) | |
| parent | 6db2a81ea2578615ccc17199dfc488745b2fc596 (diff) | |
[MERGE] base: make ir.property private
Only system users can access ir.property records.
This PR is part of the long-term task id 8203 that plans to remove all access to
ir.* models
"Official" methods to interact with `ir.property`:
- `_set_default(name, model, value, company=False)`
- `_set_multi(name, model, values, default_value=None)`
- `_get(name, model, res_id=False)`
- `_get_multi(name, model, ids)`
Done in this PR:
- remove ACL on ir.property (only system users can access directly)
- make all getter/setters private with sudo
- use these methods everywhere instead of CRUD calls
- add sudo where needed
closes odoo/odoo#51658
Signed-off-by: Martin Trigaux (mat) <mat@odoo.com>
Diffstat (limited to 'addons/web/static/src/js/views/basic/basic_renderer.js')
0 files changed, 0 insertions, 0 deletions