~metacode/ocb-server/ocb-server-7.0

Viewing all changes in revision 5131.

  • Committer: trp-bzr-bot
  • Author(s): Martin Trigaux
  • Date: 2013-10-30 08:44:08 UTC
  • mfrom: (4825.1.287 trunk)
  • Revision ID: mat@openerp.com-20131030084408-e4klubcmf4tbe7ae
[FIX] ir_attachment: fix security issues on ir_attachment
check: verify the permissions even when no ids are passed (skipped permission checking for create)
create: verify has the write access on the related model (instead of create, was not checked anyway)
function field: execute the write in fnct_inv as superuser (was impossible to have creation without write access)

expand all expand all

Show diffs side-by-side

added added

removed removed

Lines of Context: