-
Committer:
trp-bzr-bot
-
Author(s):
Martin Trigaux
-
Date:
2013-10-30 08:44:08 UTC
-
mfrom:
(4825.1.287 trunk)
-
Revision ID:
mat@openerp.com-20131030084408-e4klubcmf4tbe7ae
[FIX] ir_attachment: fix security issues on ir_attachment
check: verify the permissions even when no ids are passed (skipped permission checking for create)
create: verify has the write access on the related model (instead of create, was not checked anyway)
function field: execute the write in fnct_inv as superuser (was impossible to have creation without write access)