diff options
| author | std-odoo <std@odoo.com> | 2020-06-02 05:16:53 +0000 |
|---|---|---|
| committer | std-odoo <std@odoo.com> | 2020-08-26 09:11:20 +0000 |
| commit | b64ed47be08a396cd47d3ccc24ceab3402f724db (patch) | |
| tree | a37e91cd0502b8e6974cf08ba4e44460feea8b03 /addons | |
| parent | 474fcb5035794bf2f5dbe1c2019216b1c6399a27 (diff) | |
[FIX] auth_signup: check user group in "signup_get_auth_param"
Task-2250264
closes odoo/odoo#56563
X-original-commit: 63d21db477e5b29c4c5173f18208348d6df617e0
Signed-off-by: Thibault Delavallee (tde) <tde@openerp.com>
Diffstat (limited to 'addons')
| -rw-r--r-- | addons/auth_signup/models/res_partner.py | 3 |
1 files changed, 3 insertions, 0 deletions
diff --git a/addons/auth_signup/models/res_partner.py b/addons/auth_signup/models/res_partner.py index fe68ae5380d..edd7ce10203 100644 --- a/addons/auth_signup/models/res_partner.py +++ b/addons/auth_signup/models/res_partner.py @@ -105,6 +105,9 @@ class ResPartner(models.Model): """ Get a signup token related to the partner if signup is enabled. If the partner already has a user, get the login parameter. """ + if not self.env.user.has_group('base.group_user') and not self.env.is_admin(): + raise exceptions.AccessDenied() + res = defaultdict(dict) allow_signup = self.env['res.users']._get_signup_invitation_scope() == 'b2c' |