From 90041e5d811d1b3687ab79765157f52317b9260d Mon Sep 17 00:00:00 2001 From: Olivier Dony Date: Wed, 23 Nov 2011 14:33:12 +0100 Subject: [PATCH] [IMP] read_group: pass superuser uid to group_by_full methods to avoid access right issues This helps avoid access right issues in restricted contexts, such as embedded web client, or shared access (via portal or share wizard). bzr revid: odo@openerp.com-20111123133312-a4ywnivnex97xtk2 --- openerp/osv/orm.py | 5 +++-- 1 file changed, 3 insertions(+), 2 deletions(-) diff --git a/openerp/osv/orm.py b/openerp/osv/orm.py index 414f4f1fcea..2895fc4cc62 100644 --- a/openerp/osv/orm.py +++ b/openerp/osv/orm.py @@ -51,7 +51,6 @@ import pickle import re import simplejson import time -import traceback import types import warnings from lxml import etree @@ -2373,7 +2372,9 @@ class BaseModel(object): # Grab the list of all groups that should be displayed, including all present groups present_group_ids = [x[groupby][0] for x in read_group_result if x[groupby]] all_groups = self._group_by_full[groupby](self, cr, uid, present_group_ids, domain, - read_group_order=read_group_order, context=context) + read_group_order=read_group_order, + access_rights_uid=openerp.SUPERUSER_ID, + context=context) result_template = dict.fromkeys(aggregated_fields, False) result_template.update({groupby + '_count':0})