odoo
/
odoo
2
0
Fork 0
Code Pull Requests Releases Activity

[FIX] fields_get check access aginst write or create access 

bzr revid: christophe@tinyerp.com-20090819151820-rw1x1sorn9qywv2b
This commit is contained in:
Christophe Simonis 2009-08-19 17:18:20 +02:00
parent 89a6e71223
commit 0ae9e1e906
1 changed files with 3 additions and 1 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

4
bin/osv/orm.py
View File

@ -2038,7 +2038,9 @@ class orm(orm_template):
self._inherits_reload_src()
def fields_get(self, cr, user, fields=None, context=None):
read_access = self.pool.get('ir.model.access').check(cr, user, self._name, 'write', raise_exception=False, context=context)
ira = self.pool.get('ir.model.access')
read_access = ira.check(cr, user, self._name, 'write', raise_exception=False, context=context) or \
ira.check(cr, user, self._name, 'create', raise_exception=False, context=context)
return super(orm, self).fields_get(cr, user, fields, context, read_access)
def read(self, cr, user, ids, fields=None, context=None, load='_classic_read'):