From 0cda8ce780df1f97e229617a7365ebddd91b504d Mon Sep 17 00:00:00 2001 From: "ajay javiya (OpenERP)" Date: Wed, 5 Mar 2014 14:06:09 +0530 Subject: [PATCH] [IMP]: message_post using uid instead of superuser and add access right to allow public user to post message bzr revid: aja@tinyerp.com-20140305083609-7e3tuoc93pl4bhnn --- addons/website_blog/controllers/main.py | 2 +- addons/website_blog/security/ir.model.access.csv | 4 +++- 2 files changed, 4 insertions(+), 2 deletions(-) diff --git a/addons/website_blog/controllers/main.py b/addons/website_blog/controllers/main.py index 11e6c3fccc7..f825f63ebc4 100644 --- a/addons/website_blog/controllers/main.py +++ b/addons/website_blog/controllers/main.py @@ -243,7 +243,7 @@ class WebsiteBlog(http.Controller): cr, uid, context = request.cr, request.uid, request.context blog_post = request.registry['blog.post'] message_id = blog_post.message_post( - cr, SUPERUSER_ID, int(blog_post_id), + cr, uid, int(blog_post_id), body=post.get('comment'), type='comment', subtype='mt_comment', diff --git a/addons/website_blog/security/ir.model.access.csv b/addons/website_blog/security/ir.model.access.csv index 1ca50fc0c2c..4100d614c22 100644 --- a/addons/website_blog/security/ir.model.access.csv +++ b/addons/website_blog/security/ir.model.access.csv @@ -1,6 +1,8 @@ id,name,model_id:id,group_id:id,perm_read,perm_write,perm_create,perm_unlink blog_blog_all,blog.blog,model_blog_blog,,1,0,0,0 -blog_post_all,blog.post,model_blog_post,,1,0,0,0 +blog_post_all,blog.post,model_blog_post,,1,1,0,0 blog_post,blog.post,model_blog_post,base.group_document_user,1,1,1,1 blog_tag,blog.tag,model_blog_tag,,1,0,0,0 blog_tag_edition,blog.tag,model_blog_tag,base.group_document_user,1,1,1,1 +blog_message_post,mail_message,mail.model_mail_message,base.group_public,1,1,1,0 +blog_mail_notification,mail_notification,mail.model_mail_notification,base.group_public,1,1,1,0