summaryrefslogtreecommitdiff
path: root/odoo/sql_db.py
diff options
context:
space:
mode:
authorOlivier Laurent <olivier.laurent@logicasoft.eu>2020-08-04 11:19:54 +0000
committerOlivier Laurent <olivier.laurent@logicasoft.eu>2020-10-20 08:16:28 +0000
commit436a94c0335120c2e6f0a91b5c8247e0a787e3a8 (patch)
tree6da02bb21a46cc1c29745a43c71d96c03778d754 /odoo/sql_db.py
parentf88a5bad7602b07ec5d40d6539ef1080b679095a (diff)
[FIX] pad: permission issue on securized etherpad servers
If you want to prevent pad creation without the API key, you configure the etherpad server with the 'editOnly' parameter set to 'true'. In this case (copy/pasting the settings.json): * users may edit pads but not create new ones * pad creation is only via the API But if you secure your etherpad server like this, you won't be able to create pads in odoo in certain circonstances. This use case does not work (using 'pad_project'): * secure your etherpad server ("editOnly": true) * open the Project app and choose a project * open an already existing task (or create one) * from this task, click on the "Create" button to create a new task * the 'description' field displays: "You do not have permission to access this pad" * if you save, you'll get a traceback: "ValueError: padID does not exist" The same issue arise if you create a task from the list (not kanban) view. If you create a task directly from the kanban view, there is no problem because there is an 'object_id' in the context dict. closes odoo/odoo#60324 X-original-commit: 8ffc00fb2a88dbf2c340b6e7fc48ae137464e59d Signed-off-by: Martin Trigaux (mat) <mat@odoo.com>
Diffstat (limited to 'odoo/sql_db.py')
0 files changed, 0 insertions, 0 deletions