diff options
| author | Odoo's Mergebot <xmo+roboto@odoo.com> | 2020-05-28 07:13:56 +0200 |
|---|---|---|
| committer | GitHub <noreply@github.com> | 2020-05-28 07:13:56 +0200 |
| commit | 41bf013e04db0d03ca3648b70329df2c47087ef2 (patch) | |
| tree | 24fbdd78ed852c2f0b97b54476dea5bd736b3425 /odoo/addons/test_new_api | |
| parent | 7b8d12e6dc47f1d519f9fc077b073e4ea6a24d71 (diff) | |
| parent | 6db2a81ea2578615ccc17199dfc488745b2fc596 (diff) | |
[MERGE] base: make ir.property private
Only system users can access ir.property records.
This PR is part of the long-term task id 8203 that plans to remove all access to
ir.* models
"Official" methods to interact with `ir.property`:
- `_set_default(name, model, value, company=False)`
- `_set_multi(name, model, values, default_value=None)`
- `_get(name, model, res_id=False)`
- `_get_multi(name, model, ids)`
Done in this PR:
- remove ACL on ir.property (only system users can access directly)
- make all getter/setters private with sudo
- use these methods everywhere instead of CRUD calls
- add sudo where needed
closes odoo/odoo#51658
Signed-off-by: Martin Trigaux (mat) <mat@odoo.com>
Diffstat (limited to 'odoo/addons/test_new_api')
| -rw-r--r-- | odoo/addons/test_new_api/tests/test_new_fields.py | 6 |
1 files changed, 3 insertions, 3 deletions
diff --git a/odoo/addons/test_new_api/tests/test_new_fields.py b/odoo/addons/test_new_api/tests/test_new_fields.py index 6df342aaf94..44a1fe695bf 100644 --- a/odoo/addons/test_new_api/tests/test_new_fields.py +++ b/odoo/addons/test_new_api/tests/test_new_fields.py @@ -1071,9 +1071,9 @@ class TestFields(TransactionCaseWithUserDemo): tag2 = self.env['test_new_api.multi.tag'].create({'name': 'Quuz'}) # create default values for the company-dependent fields - self.env['ir.property'].set_default('foo', 'test_new_api.company', 'default') - self.env['ir.property'].set_default('foo', 'test_new_api.company', 'default1', company1) - self.env['ir.property'].set_default('tag_id', 'test_new_api.company', tag0) + self.env['ir.property']._set_default('foo', 'test_new_api.company', 'default') + self.env['ir.property']._set_default('foo', 'test_new_api.company', 'default1', company1) + self.env['ir.property']._set_default('tag_id', 'test_new_api.company', tag0) # assumption: users don't have access to 'ir.property' accesses = self.env['ir.model.access'].search([('model_id.model', '=', 'ir.property')]) |
