The domains in the form ('o2m_field', operator, False) do not use the orm but convert the domain to ('id', 'invert operator', [list of ids]). This means that the orm is not used and implicit filter (active=True) or access rights are not checked. A proper fix in master should be done to use the orm instead of an SQL query. This patch force a search to be made on product.product and then exclude the products where active=False (opw 607602). |
||
---|---|---|
.. | ||
controllers | ||
data | ||
models | ||
security | ||
static | ||
tests | ||
views | ||
__init__.py | ||
__openerp__.py |