diff options
| author | Christophe Matthieu <chm@openerp.com> | 2013-08-06 17:29:51 +0200 |
|---|---|---|
| committer | Christophe Matthieu <chm@openerp.com> | 2013-08-06 17:29:51 +0200 |
| commit | bbe972173238afa3eaf77d1321b999e14ce0ffbd (patch) | |
| tree | ee358c9a7f9d207dfe35728ececf051178dc9bed /addons/website_mail/controllers/main.py | |
| parent | 892e38decf475b3f6876c3b07eb7b404c0dc6584 (diff) | |
[IMP] website_mail: check_access_rule to follow
bzr revid: chm@openerp.com-20130806152951-0ur49vxwnxfexzq7
Diffstat (limited to 'addons/website_mail/controllers/main.py')
| -rw-r--r-- | addons/website_mail/controllers/main.py | 6 |
1 files changed, 4 insertions, 2 deletions
diff --git a/addons/website_mail/controllers/main.py b/addons/website_mail/controllers/main.py index bb2191c3c98..f3f99bb9aed 100644 --- a/addons/website_mail/controllers/main.py +++ b/addons/website_mail/controllers/main.py @@ -129,7 +129,8 @@ class website_mail(http.Controller): partner_ids = [partner_obj.create(request.cr, SUPERUSER_ID, {"email": post.get('email'), "name": "Subscribe: %s" % post.get('email')})] else: partner_ids = [user_obj.browse(request.cr, request.uid, request.uid).partner_id.id] - group_obj.message_subscribe(request.cr, request.uid, [mail_group_id], partner_ids) + group_obj.check_access_rule(request.cr, request.uid, [mail_group_id], 'read') + group_obj.message_subscribe(request.cr, SUPERUSER_ID, [mail_group_id], partner_ids) return self.blog(mail_group_id=mail_group_id, blog_id=blog_id, subscribe=post.get('email')) @@ -145,7 +146,8 @@ class website_mail(http.Controller): partner_ids = partner_obj.search(request.cr, SUPERUSER_ID, [("email", "=", post.get('email'))]) else: partner_ids = [user_obj.browse(request.cr, request.uid, request.uid).partner_id.id] - group_obj.message_unsubscribe(request.cr, request.uid, [mail_group_id], partner_ids) + group_obj.check_access_rule(request.cr, request.uid, [mail_group_id], 'read') + group_obj.message_unsubscribe(request.cr, SUPERUSER_ID, [mail_group_id], partner_ids) return self.blog(mail_group_id=mail_group_id, blog_id=blog_id, subscribe=None) |