diff options
| author | len-odoo <len@odoo.com> | 2018-08-30 14:52:26 +0200 |
|---|---|---|
| committer | len-odoo <35492570+len-odoo@users.noreply.github.com> | 2018-09-04 12:20:17 +0200 |
| commit | 80156aa919b8d9b78aa52d78718f917049dc01c5 (patch) | |
| tree | 3596f0278b1217ddaa62bfff12b352ca67954ddd /addons/web_editor/static/lib/summernote/src/js/EventHandler.js | |
| parent | eaff0a71bda0e66016cab7f8c48c0f75d0692990 (diff) | |
[FIX] base: allow a user to attach documents to his profile, without administration access rights
The res.users class contains special fields that bypass access rights.
These are designed to allow a user that does not have the possibility to write
on res.users to modify their own fields, such as the mail signature.
Create and write are overriden to make it so, however the check_access_rights
isn't.
Since this method does not work at field level but at model level, there is no
easy way to resolve the incoherence.
Uploadding an image to a signature would add an attachment to the signature;
before being created, an attachment checks if the user has the rights to write
on the target model. The incoherence thus make it fail.
We add a special case when creating an attachment so that a user can write on
itself.
opw 1871243
Diffstat (limited to 'addons/web_editor/static/lib/summernote/src/js/EventHandler.js')
0 files changed, 0 insertions, 0 deletions
