odoo
/
odoo
2
0
Fork 0
Code Pull Requests Releases Activity

[FIX] portal: avoid users sharing non-portal groups

This commit is contained in:
Olivier Dony 2016-07-20 22:14:23 +02:00
parent ff31e0381a
commit acc531a9d7
No known key found for this signature in database
GPG Key ID: CD556E25E8A6D0D4
1 changed files with 3 additions and 0 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

3
addons/portal/wizard/portal_wizard.py
View File

@ -131,8 +131,11 @@ class wizard_user(osv.osv_memory):
return id
def action_apply(self, cr, uid, ids, context=None):
self.pool['res.partner'].check_access_rights(cr, uid, 'write')
for wizard_user in self.browse(cr, SUPERUSER_ID, ids, context):
portal = wizard_user.wizard_id.portal_id
if not portal.is_portal:
raise osv.except_osv("Error", "Not a portal: " + portal.name)
user = self._retrieve_user(cr, SUPERUSER_ID, wizard_user, context)
if wizard_user.in_portal:
# create a user if necessary, and make sure it is in the portal group