From 0ae9e1e9064d66ecbd68afedf54f3b40fa127ede Mon Sep 17 00:00:00 2001 From: Christophe Simonis Date: Wed, 19 Aug 2009 17:18:20 +0200 Subject: [PATCH] [FIX] fields_get check access aginst write or create access bzr revid: christophe@tinyerp.com-20090819151820-rw1x1sorn9qywv2b --- bin/osv/orm.py | 4 +++- 1 file changed, 3 insertions(+), 1 deletion(-) diff --git a/bin/osv/orm.py b/bin/osv/orm.py index 919c7dc6eff..3a6dc8e42d0 100644 --- a/bin/osv/orm.py +++ b/bin/osv/orm.py @@ -2038,7 +2038,9 @@ class orm(orm_template): self._inherits_reload_src() def fields_get(self, cr, user, fields=None, context=None): - read_access = self.pool.get('ir.model.access').check(cr, user, self._name, 'write', raise_exception=False, context=context) + ira = self.pool.get('ir.model.access') + read_access = ira.check(cr, user, self._name, 'write', raise_exception=False, context=context) or \ + ira.check(cr, user, self._name, 'create', raise_exception=False, context=context) return super(orm, self).fields_get(cr, user, fields, context, read_access) def read(self, cr, user, ids, fields=None, context=None, load='_classic_read'):