odoo
/
odoo
2
0
Fork 0
Code Pull Requests Releases Activity

Ir.attachment: improve SQL for access checks. 

bzr revid: p_christ@hol.gr-20090922093255-f3iljq721pwbn9e0
This commit is contained in:
P. Christeas 2009-09-22 12:32:55 +03:00
parent e3e4be1cfb
commit 6021b6dff3
1 changed files with 1 additions and 1 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

2
bin/addons/base/ir/ir_attachment.py
View File

@ -31,7 +31,7 @@ class ir_attachment(osv.osv):
ima = self.pool.get('ir.model.access')
if isinstance(ids, (int, long)):
ids = [ids]
cr.execute('select distinct res_model from ir_attachment where id in ('+','.join(map(str, ids))+')')
cr.execute('select distinct res_model from ir_attachment where id = ANY (%s)', (ids,))
for obj in cr.fetchall():
if obj[0]:
ima.check(cr, uid, obj[0], mode, context=context)