diff options
| author | Nicolas Lempereur <nle@odoo.com> | 2018-03-08 10:55:34 +0100 |
|---|---|---|
| committer | Nicolas Lempereur <nle@odoo.com> | 2018-03-08 13:41:08 +0100 |
| commit | bd4f09fa72fd12a8c4347c2080b5236ae1023d52 (patch) | |
| tree | e4cfecf8100809c9ec10e8d71d36c28fc5a96de7 /addons/web | |
| parent | bfe88c50e2b4975a23c624cc5b5171158bb9f855 (diff) | |
[FIX] portal: no note in frontend chatter w/ token
When a chatter is displayed and the document is accessed with a valid
access_token, the message related to the document are searched in sudo.
This bypass valid filtering we may down the line.
This change apply the filtering so note type messages are not displayed
for user who are not employees.
note: before 11.0 this logic was in 1b5c2ced. In future version it would
probably be better to have a method eg. _get_domain_based_on_user
that would be called before sudo and if not sudo.
opw-1819702
closes #23544
Diffstat (limited to 'addons/web')
0 files changed, 0 insertions, 0 deletions
