diff --git a/addons/website_hr/controllers/main.py b/addons/website_hr/controllers/main.py index 430c47b5dfa..6874914bf3e 100644 --- a/addons/website_hr/controllers/main.py +++ b/addons/website_hr/controllers/main.py @@ -8,8 +8,10 @@ class website_hr(http.Controller): @http.route(['/page/website.aboutus', '/page/aboutus'], type='http', auth="public", website=True) def blog(self, **post): hr_obj = request.registry['hr.employee'] - employee_ids = hr_obj.search(request.cr, request.uid, [('website_published', '=', True)], - context=request.context) + domain = [] + if not hr_obj.check_access_rights(request.cr, request.uid, 'write', raise_exception=False): + domain.append(('website_published', '=', True)) + employee_ids = hr_obj.search(request.cr, request.uid, domain, context=request.context) values = { 'employee_ids': hr_obj.browse(request.cr, request.uid, employee_ids, request.context)