odoo
/
odoo
2
0
Fork 0
Code Pull Requests Releases Activity

[FIX] res_users: email function field should work even without access rights on res.partner.address - also dropped the context to avoid potential security issues as we run these actions in superuser mode 

bzr revid: odo@openerp.com-20100709071526-brd9serfixj5eems
This commit is contained in:
Olivier Dony 2010-07-09 09:15:26 +02:00
parent 49f91e9175
commit 6164550d1d
1 changed files with 2 additions and 2 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

4
bin/addons/base/res/res_user.py
View File

@ -207,9 +207,9 @@ class users(osv.osv):
address_obj = self.pool.get('res.partner.address')
for user in self.browse(cr, uid, ids, context=context):
if user.address_id:
address_obj.write(cr, uid, user.address_id.id, {'email': value or None}, context=context)
address_obj.write(cr, 1, user.address_id.id, {'email': value or None}) # no context to avoid potential security issues as superuser
else:
address_id = address_obj.create(cr, uid, {'name': user.name, 'email': value or None}, context=context)
address_id = address_obj.create(cr, 1, {'name': user.name, 'email': value or None}) # no context to avoid potential security issues as superuser
self.write(cr, uid, ids, {'address_id': address_id}, context)
return True