diff options
| author | Martin Trigaux <mat@odoo.com> | 2020-01-14 10:47:08 +0100 |
|---|---|---|
| committer | Martin Trigaux <mat@odoo.com> | 2020-02-04 17:53:48 +0100 |
| commit | c6f24da3f27cd715cc1e8fec9070db71ce5885c5 (patch) | |
| tree | baf466d03acb3d6c134548fafcd2735b9211e2bf /addons/website_slides/security | |
| parent | 6d8688bb124df311648f65f6d43608ee22d5f63b (diff) | |
[IMP] base: do not load actions when can not read target models
As neither fields_view_get, nor default_get actually verify you have
access to a specific model (this is likely to be changed in the
future), it was possible to execute an action to a model, even if the
user does not have access to the corresponding model.
Before this commit, launching an action to a wizard with no access was
opening a new record view with all fields in readonly and clicking on
any button raised an access error.
To avoid the frustrating of seeing an action but getting an unusable
screen when clicking on it, just hide the action in the first place.
Diffstat (limited to 'addons/website_slides/security')
0 files changed, 0 insertions, 0 deletions
