diff options
| author | jem-odoo <jem@openerp.com> | 2019-02-15 10:42:09 +0000 |
|---|---|---|
| committer | jem-odoo <jem@openerp.com> | 2019-02-15 10:42:40 +0000 |
| commit | 3d607880e6ed0dedc5142e3778bb0bb4ef49c32e (patch) | |
| tree | 6fb012385c11ecc221c6e441fd6cd5eecea97ca8 /addons/web/static/src/js | |
| parent | 400f76979696eecc39a4dc8648cd1d24b5dcd382 (diff) | |
[FIX] portal: posting message without token
This commit e84779749b14c4f9c9309db1b25c251f3734f5e8 factorize the check of
special access to post a message using a token mecanism, but it breaks the
case without token. Indeed, on some models, it is allow to post a message
on a document when having a certain access. This is handle with the
`_mail_post_access` attribute on model inheriting mail.thread.
Using this mecanism, a user that can read (or write) the document can also
post a message. This is used in the eShop to review product and in blog to
comment blogpost.
This commit restore posting a message without token. the normal access rights
will be applied by message post and raise if the user can not post message,
taking `_mail_post_access` into account.
The balance is now restored in the universe.
Task-1902304
Diffstat (limited to 'addons/web/static/src/js')
0 files changed, 0 insertions, 0 deletions
