diff options
| author | Martin Trigaux <mat@openerp.com> | 2014-07-25 10:57:30 +0200 |
|---|---|---|
| committer | Martin Trigaux <mat@openerp.com> | 2014-07-25 10:57:30 +0200 |
| commit | 10fce02eb0ee8c9eb9fa19c9ab0af8ef19b3ab2e (patch) | |
| tree | bc94c07c567b01f6d1bb6563047f942cf77b2552 /addons/website/static/src/css | |
| parent | de34d66860a4f586f456819974d0b38c81505cc2 (diff) | |
[FIX] website_membership: access rules fixes
When searching on memberships, we use domain clauses in the format 'partner.x = y' where partner is a many2one to res.partner. The object res.partner has strict security rules for public users and this search will return zero result if not done with SUPERUSER_ID.
In addition, we need to access the list of products (membership_ids) in the domain to be sure we will retrieve only published membership (otherwise it would crash in the sort below).
Diffstat (limited to 'addons/website/static/src/css')
0 files changed, 0 insertions, 0 deletions