odoo
/
odoo
2
0
Fork 0
Code Pull Requests Releases Activity

[IMP]: code and security 

bzr revid: aja@tinyerp.com-20131218072235-fglrt10ln4ela6t3
This commit is contained in:
ajay javiya (OpenERP) 2013-12-18 12:52:35 +05:30
parent 5567caa27d
commit 1b7a51b9b9
2 changed files with 15 additions and 7 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

12
addons/website_sale_quote/models/order.py
View File

@ -40,9 +40,9 @@ class sale_quote_template(osv.osv):
url = "%s/template/%s" % (base_url, quote_id)
return url
def create(self, cr, uid, ids, context=None):
new_id = super(sale_quote_template, self).create(cr, uid, ids, context)
self.write(cr, uid, new_id, {'template_url':self._get_signup_url(cr, uid, new_id, context=context)})
def create(self, cr, uid, vals, context=None):
new_id = super(sale_quote_template, self).create(cr, uid, vals, context)
self.write(cr, uid, new_id, {'template_url': self._get_signup_url(cr, uid, new_id, context=context)})
return new_id
class sale_quote_line(osv.osv):
@ -63,8 +63,7 @@ class sale_quote_line(osv.osv):
def on_change_product_id(self, cr, uid, ids, product, context=None):
vals = {}
product_obj = self.pool.get('product.product')
product_obj = product_obj.browse(cr, uid, product, context=context)
product_obj = self.pool.get('product.product').browse(cr, uid, product, context=context)
vals.update({
'price_unit': product_obj.list_price,
'website_description': product_obj.website_description,
@ -112,12 +111,11 @@ class sale_order(osv.osv):
url = "%s/quote/%s/%s" % (base_url, id, token)
return url
def action_quotation_send(self, cr, uid, ids, context=None):
self._create_portal_user(cr, uid, ids, context=context)
token = self._get_token(cr, uid, ids, context)
url = self._get_signup_url(cr, uid, ids, token, context)
self.write(cr, uid, ids, {'access_token': token,'quote_url': url})
self.write(cr, uid, ids, {'access_token': token, 'quote_url': url})
res = super(sale_order, self).action_quotation_send(cr, uid, ids, context=context)
return res

10
addons/website_sale_quote/security/website_sale_quote.xml
View File

@ -12,6 +12,16 @@
<field name="perm_create" eval="False"/>
<field name="perm_unlink" eval="False"/>
</record>
<record id="website_sale.sale_order_lines_personal_rule_public" model="ir.rule">
<field name="name">Public Personal Order lines</field>
<field ref="model_sale_order_line" name="model_id"/>
<field name="domain_force">[]</field>
<field name="groups" eval="[(4, ref('base.group_public')), (4, ref('base.group_portal'))]"/>
<field name="perm_read" eval="True"/>
<field name="perm_write" eval="False"/>
<field name="perm_create" eval="False"/>
<field name="perm_unlink" eval="False"/>
</record>
<record model="ir.rule" id="base.res_partner_portal_public_rule">
<field name="name">res_partner: portal/public: read access on my commercial partner</field>
<field name="model_id" ref="base.model_res_partner"/>