diff options
| author | Raphael Collet <rco@openerp.com> | 2017-01-03 16:53:49 +0100 |
|---|---|---|
| committer | Raphael Collet <rco@openerp.com> | 2017-01-03 16:53:49 +0100 |
| commit | 80c46ee4fc273f59823821dcdc98bcc6b7fdeeaf (patch) | |
| tree | 76d10b363ff68240236249ba42756e77a2ee13d5 /addons/website_form/controllers/main.py | |
| parent | 19fce206ac420e03465316b8d8db1bd54ea4c013 (diff) | |
| parent | 172a767e5f7add9c5e806e00e0146dc5f09e806b (diff) | |
[MERGE] base: tighten access rights of ir.* models
Diffstat (limited to 'addons/website_form/controllers/main.py')
| -rw-r--r-- | addons/website_form/controllers/main.py | 2 |
1 files changed, 1 insertions, 1 deletions
diff --git a/addons/website_form/controllers/main.py b/addons/website_form/controllers/main.py index 742a8eeb0b7..2f5f7ec2292 100644 --- a/addons/website_form/controllers/main.py +++ b/addons/website_form/controllers/main.py @@ -21,7 +21,7 @@ class WebsiteForm(http.Controller): # Check and insert values from the form on the model <model> @http.route('/website_form/<string:model_name>', type='http', auth="public", methods=['POST'], website=True) def website_form(self, model_name, **kwargs): - model_record = request.env['ir.model'].search([('model', '=', model_name), ('website_form_access', '=', True)]) + model_record = request.env['ir.model'].sudo().search([('model', '=', model_name), ('website_form_access', '=', True)]) if not model_record: return json.dumps(False) |