diff options
| author | Xavier Morel <xmo@odoo.com> | 2015-11-25 09:40:34 +0100 |
|---|---|---|
| committer | Christophe Simonis <chs@odoo.com> | 2015-11-30 16:39:13 +0100 |
| commit | 2afb5b43ef0c7aa69b63145052a8d183d3d9d14b (patch) | |
| tree | 106228e7191b04819576cf070b450d27d7bc2f61 /addons/website_issue/data | |
| parent | 2769029eefd9456259c664ea846156fc9bd26a91 (diff) | |
[IMP] form builder fields blacklisting
* blacklist all fields by default
* don't use blacklist in get_authorized_fields which is called to see if
a field can be added to a form, instead only use it afterwards to see
if the field can be written to by the formbuilder. That way
formbuilder can whitelist fields which are actually added to forms
on-demand resulting in a more secure interaction
Diffstat (limited to 'addons/website_issue/data')
| -rw-r--r-- | addons/website_issue/data/website_issue_data.xml | 5 |
1 files changed, 0 insertions, 5 deletions
diff --git a/addons/website_issue/data/website_issue_data.xml b/addons/website_issue/data/website_issue_data.xml index 8b043ee10e7..83f65b516e1 100644 --- a/addons/website_issue/data/website_issue_data.xml +++ b/addons/website_issue/data/website_issue_data.xml @@ -6,10 +6,5 @@ <field name="website_form_access">True</field> <field name="website_form_label">Create an issue</field> </record> -<!-- Template to blacklist field - <record id="project_issue.field_project_issue_{field_name}" model="ir.model.fields"> - <field name="website_form_blacklisted">True</field> - </record> ---> </data> </openerp> |