diff options
| author | Goffin Simon <sig@odoo.com> | 2016-06-22 14:27:36 +0200 |
|---|---|---|
| committer | Goffin Simon <sig@odoo.com> | 2016-06-23 09:40:51 +0200 |
| commit | 55bdf0e8ffaa068734d5a0b9dcec0a3ce9f8aebf (patch) | |
| tree | 98e03952201d66774f734b76d954e75e0ad80b18 /addons | |
| parent | d14efd562b4c6d8868662b104d9dcdce90456737 (diff) | |
[FIX] website_project_issue: Only portal issues must be visible
When going to routes ['/my', '/my/home'], only the project issues in
portal privacy visibility must be displayed.
Inpired from 56c5d0a
The field privacy_visibility is not accessible in portal due to access
rights.
opw:676447
Diffstat (limited to 'addons')
| -rw-r--r-- | addons/website_project_issue/controllers/main.py | 10 |
1 files changed, 9 insertions, 1 deletions
diff --git a/addons/website_project_issue/controllers/main.py b/addons/website_project_issue/controllers/main.py index 98f06c0c281..4c15b60761b 100644 --- a/addons/website_project_issue/controllers/main.py +++ b/addons/website_project_issue/controllers/main.py @@ -10,7 +10,15 @@ class WebsiteAccount(website_account): def account(self): response = super(WebsiteAccount, self).account() user = request.env.user - project_issues = request.env['project.issue'].search([]) + # TDE FIXME: shouldn't that be mnaged by the access rule itself ? + # portal projects where you or someone from your company are a follower + project_issues = request.env['project.issue'].sudo().search([ + '&', + ('project_id.privacy_visibility', '=', 'portal'), + '|', + ('message_partner_ids', 'child_of', [user.partner_id.commercial_partner_id.id]), + ('message_partner_ids', 'child_of', [user.partner_id.id]) + ]) response.qcontext.update({'issues': project_issues}) return response |