odoo
/
odoo
2
0
Fork 0
Code Pull Requests Releases Activity

[IMP] project: avoid access rights issue when reading time_mode (uom) for fields_view_get 

bzr revid: odo@openerp.com-20101025145445-ccgvic2uyqd50hi6
This commit is contained in:
Olivier Dony 2010-10-25 16:54:45 +02:00
parent 3d8cbbdaaf
commit 3572ed909a
1 changed files with 4 additions and 1 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

5
addons/project/project.py
View File

@ -483,7 +483,10 @@ class task(osv.osv):
def fields_view_get(self, cr, uid, view_id=None, view_type='form', context=None, toolbar=False, submenu=False):
users_obj = self.pool.get('res.users')
obj_tm = users_obj.browse(cr, uid, uid, context).company_id.project_time_mode_id
# read uom as admin to avoid access rights issues, e.g. for portal/share users,
# this should be safe (no context passed to avoid side-effects)
obj_tm = users_obj.browse(cr, 1, uid).company_id.project_time_mode_id
tm = obj_tm and obj_tm.name or 'Hours'
res = super(task, self).fields_view_get(cr, uid, view_id, view_type, context, toolbar, submenu=submenu)