odoo
/
odoo
2
0
Fork 0
Code Pull Requests Releases Activity

[REV] mail_message: vote_toggle and favorite_toggle back as SUPERUSER_ID, because of access rights issues for people not being able to write on the mail.message. 

bzr revid: tde@openerp.com-20121019120616-pw8yop07fo1i2vu2
This commit is contained in:
Thibault Delavallée 2012-10-19 14:06:16 +02:00
parent 2858b8c73f
commit e46ddc2c21
1 changed files with 8 additions and 6 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

14
addons/mail/mail_message.py
View File

@ -163,13 +163,14 @@ class mail_message(osv.Model):
#------------------------------------------------------
def vote_toggle(self, cr, uid, ids, context=None):
''' Toggles vote. Performed using read to avoid access rights issues. '''
''' Toggles vote. Performed using read to avoid access rights issues.
Done as SUPERUSER_ID because uid may vote for a message he cannot modify. '''
for message in self.read(cr, uid, ids, ['vote_user_ids'], context=context):
new_has_voted = not (uid in message.get('vote_user_ids'))
if new_has_voted:
self.write(cr, uid, message.get('id'), {'vote_user_ids': [(4, uid)]}, context=context)
self.write(cr, SUPERUSER_ID, message.get('id'), {'vote_user_ids': [(4, uid)]}, context=context)
else:
self.write(cr, uid, message.get('id'), {'vote_user_ids': [(3, uid)]}, context=context)
self.write(cr, SUPERUSER_ID, message.get('id'), {'vote_user_ids': [(3, uid)]}, context=context)
return new_has_voted or False
#------------------------------------------------------
@ -177,13 +178,14 @@ class mail_message(osv.Model):
#------------------------------------------------------
def favorite_toggle(self, cr, uid, ids, context=None):
''' Toggles favorite. Performed using read to avoid access rights issues. '''
''' Toggles favorite. Performed using read to avoid access rights issues.
Done as SUPERUSER_ID because uid may star a message he cannot modify. '''
for message in self.read(cr, uid, ids, ['favorite_user_ids'], context=context):
new_is_favorite = not (uid in message.get('favorite_user_ids'))
if new_is_favorite:
self.write(cr, uid, message.get('id'), {'favorite_user_ids': [(4, uid)]}, context=context)
self.write(cr, SUPERUSER_ID, message.get('id'), {'favorite_user_ids': [(4, uid)]}, context=context)
else:
self.write(cr, uid, message.get('id'), {'favorite_user_ids': [(3, uid)]}, context=context)
self.write(cr, SUPERUSER_ID, message.get('id'), {'favorite_user_ids': [(3, uid)]}, context=context)
return new_is_favorite or False
#------------------------------------------------------