summaryrefslogtreecommitdiff
path: root/addons/web/static
diff options
context:
space:
mode:
authorjem-odoo <jem@openerp.com>2019-02-15 10:42:09 +0000
committerjem-odoo <jem@openerp.com>2019-02-15 10:42:40 +0000
commit3d607880e6ed0dedc5142e3778bb0bb4ef49c32e (patch)
tree6fb012385c11ecc221c6e441fd6cd5eecea97ca8 /addons/web/static
parent400f76979696eecc39a4dc8648cd1d24b5dcd382 (diff)
[FIX] portal: posting message without token
This commit e84779749b14c4f9c9309db1b25c251f3734f5e8 factorize the check of special access to post a message using a token mecanism, but it breaks the case without token. Indeed, on some models, it is allow to post a message on a document when having a certain access. This is handle with the `_mail_post_access` attribute on model inheriting mail.thread. Using this mecanism, a user that can read (or write) the document can also post a message. This is used in the eShop to review product and in blog to comment blogpost. This commit restore posting a message without token. the normal access rights will be applied by message post and raise if the user can not post message, taking `_mail_post_access` into account. The balance is now restored in the universe. Task-1902304
Diffstat (limited to 'addons/web/static')
0 files changed, 0 insertions, 0 deletions