diff --git a/openerp/addons/base/ir/ir_actions.py b/openerp/addons/base/ir/ir_actions.py index abdd33cbaa9..ddeae3d7a1e 100644 --- a/openerp/addons/base/ir/ir_actions.py +++ b/openerp/addons/base/ir/ir_actions.py @@ -26,6 +26,7 @@ import os import time import datetime import dateutil +import pytz import openerp from openerp import SUPERUSER_ID @@ -944,6 +945,9 @@ class ir_actions_server(osv.osv): 'time': time, 'datetime': datetime, 'dateutil': dateutil, + # NOTE: only `timezone` function. Do not provide the whole `pytz` module as users + # will have access to `pytz.os` and `pytz.sys` to do nasty things... + 'timezone': pytz.timezone, # orm 'env': env, 'model': model,