Odoo - The current checkout of upstream Odoo

Age	Commit message (Collapse)	Author
2019-08-12	[IMP] payment: UI/flow	Victor Feyens

2019-07-04	[FIX] *: use `auth='public'` in controllers that use `request.env`	Raphael Collet
	The following trick used to work, because `sudo()` was actually making an environment for the superuser to operate upon: request.env[...].sudo().method(...) It no longer works in general, since `sudo()` now makes an environment in superuser mode but with `uid=None`! It may still work by accident for operations that never use `env.uid`, but is broken in general. Using `auth='public'` fixes the problem by using the public user when no user is available. closes odoo/odoo#34297 Signed-off-by: Olivier Dony (odo) <odo@openerp.com>
2018-09-19	[IMP] payment_*: payment acquirers error handling	Toufik Benjaa
	This commit aims to improve the user experience when using payment acquirers. There currently are no error feedback with some acquirers, which leaves the user wondering what is going on and what is the real status of its payment. In some cases, the user is currently being redirected to the home page even though the payment has failed. We want to make it more obvious to the user that something unexpected has happened by redirecting to an intermediate page that will provide good feedback on payments status. Another goal of this commit is to order acquirers by sequence instead of by flow and to select the first acquirer by default. This feature was already implmented in commit fe294fd43e521bd2d339e962f43acf46c3d4cb97, some UI adaptations were needed though. Related to task #36680 Closes #26958
2017-04-28	[FIX] Various P3-related import changes	xmo-odoo
	* LDAP import: python-ldap is not python3-compatible, pyldap is Warning: only supported from debian Stretch (current testing)? https://packages.debian.org/search?searchon=names&keywords=pyldap * implicitly relative imports * imports of moved or removed stdlib modules issue #8530
2016-07-06	[MIG] payment_transfer	Thibault Delavallée
	No functional change.
2015-10-01	[ADD] *: CSRF protection in forms and routes	Christophe Simonis
	* make CSRF protection the default on all non-SAFE methods note: there currently is no way to call a CSRF-protected endpoint without a form-encoded entity-body as that's the only place we get the CSRF token from. * simple CSRF token generation: just use the HMAC'd session id, no generating a new random token per session then HMAC it * use constant-time equal function to avoid timing attacks * assert that a database secret is configured before hashing/validating the CSRF token * opt-out database manager from CSRF: The super-admin password serves the purpose of a CSRF token in the database manager screens. There is no request database to obtain the secret and generate a CSRF token.
2014-01-30	[REM] remove disable_db and ensure_db() from addons	Fabien Meghazi
	bzr revid: fme@openerp.com-20140130092308-s24a7h2mhzuaasf1
2014-01-29	[REM] Removed auth='admin' from modules	Fabien Meghazi
	bzr revid: fme@openerp.com-20140129171520-wkz8ot4pa63utoi3
2014-01-24	[FIX] payment_transfer: fixed controler, request.redirect -> werkzeug.redirect	Thibault Delavallée
	bzr revid: tde@openerp.com-20140124145628-3e9pvz88wyww9kr3
2014-01-23	[IMP] payment_*: routes as admin, remove website parameter in routes	Thibault Delavallée
	bzr revid: tde@openerp.com-20140123154924-r1cylz0fobzav90y
2014-01-22	[RENAME] payment_acquirer_* -> payment_ *	Thibault Delavallée
	bzr revid: tde@openerp.com-20140122175702-1h1e51z4njt4s70w