diff options
| author | Martin Trigaux <mat@odoo.com> | 2018-06-05 14:23:29 +0200 |
|---|---|---|
| committer | Goffin Simon <sig@odoo.com> | 2018-07-05 15:29:34 +0200 |
| commit | a978a3647a8ed8a08311f56dcf2f3e04056052b8 (patch) | |
| tree | 6d271b4d7f85fd090641b4ea461b2963e3a1073b /odoo/modules/loading.py | |
| parent | 7764db7a34f05b55b56c2301f9c0b2a0098c2939 (diff) | |
[FIX] mail: multi-company access to TZ
- Create 2 Companies A & B
- Set User B in Company B
- Record some `mail.activity` for User B on a lead belonging to Company
B.
- With a manager user in Company A, go to Kanban view of leads and
remove filters => all leads, including leads in Company B, are
displayed
An access error occurs.
`read_progress_bar` method, tries to access the field `activity_state`
which is: `states = record.activity_ids.mapped('state')`. The state of
a `mail.activity` is using the tz of the partner. To read the
`activity_state` of a lead, one needs to access
`record.activity_ids.user_id.partner_id.tz`
=> multi-company security rules raised
opw: 1850984, 1859470
Diffstat (limited to 'odoo/modules/loading.py')
0 files changed, 0 insertions, 0 deletions
