diff options
| author | Ravi Gohil <rgo@odoo.com> | 2016-09-06 11:11:36 +0200 |
|---|---|---|
| committer | Thibault Delavallee (Gooroodoo) tde@odoo.com <tde@odoo.com> | 2016-09-06 12:39:33 +0200 |
| commit | 5bd4218454f353d1c766f06b47c104e366dbc8d5 (patch) | |
| tree | 5627b0d1541a65d61e290ca51589139b63f57f3b /addons/website_payment | |
| parent | 9374892bb97035c5e0dd1d681bf0cb07c4371b13 (diff) | |
[IMP] payment_payumoney, payment_stripe: set private fields accessible to employees only
In 8.0 private fields have been recently set as visible only to employees
at commit b2265108406e0dc1d1e1250fdbad5bc2cee2006d.
However between v9 and v10 two new payment acquirers have been implemented
payumoney and stripe. Those addons now have their credential set as private.
Methods using the acquirers have been sudoed accordingly to avoid access
issues when rendering the buttons. Other payment modules will be updated when
the forward port from 8 to 9 and pre-10-master will be done.
Diffstat (limited to 'addons/website_payment')
| -rw-r--r-- | addons/website_payment/controllers/main.py | 2 |
1 files changed, 1 insertions, 1 deletions
diff --git a/addons/website_payment/controllers/main.py b/addons/website_payment/controllers/main.py index ed7c0ade11d..dd4ef720e16 100644 --- a/addons/website_payment/controllers/main.py +++ b/addons/website_payment/controllers/main.py @@ -48,7 +48,7 @@ class WebsitePayment(http.Controller): partner_id = user.partner_id.id if user.partner_id.id != request.website.partner_id.id else False - payment_form = acquirer.render(reference, float(amount), currency.id, values={'return_url': '/website_payment/confirm', 'partner_id': partner_id}) + payment_form = acquirer.sudo().render(reference, float(amount), currency.id, values={'return_url': '/website_payment/confirm', 'partner_id': partner_id}) values = { 'reference': reference, 'acquirer': acquirer, |