odoo
/
odoo
2
0
Fork 0
Code Pull Requests Releases Activity

[IMP] read_group: pass superuser uid to group_by_full methods to avoid access right issues 

This helps avoid access right issues in restricted
contexts, such as embedded web client, or shared
access (via portal or share wizard).

bzr revid: odo@openerp.com-20111123133312-a4ywnivnex97xtk2
This commit is contained in:
Olivier Dony 2011-11-23 14:33:12 +01:00
parent 21e3b1c5db
commit 90041e5d81
1 changed files with 3 additions and 2 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

5
openerp/osv/orm.py
View File

@ -51,7 +51,6 @@ import pickle
import re
import simplejson
import time
import traceback
import types
import warnings
from lxml import etree
@ -2373,7 +2372,9 @@ class BaseModel(object):
# Grab the list of all groups that should be displayed, including all present groups
present_group_ids = [x[groupby][0] for x in read_group_result if x[groupby]]
all_groups = self._group_by_full[groupby](self, cr, uid, present_group_ids, domain,
read_group_order=read_group_order, context=context)
read_group_order=read_group_order,
access_rights_uid=openerp.SUPERUSER_ID,
context=context)
result_template = dict.fromkeys(aggregated_fields, False)
result_template.update({groupby + '_count':0})