From 0fc3ca389775ae74166f523d1d2069a3a0a287d7 Mon Sep 17 00:00:00 2001 From: sle-odoo Date: Wed, 4 Feb 2015 15:18:49 +0100 Subject: [PATCH] [IMPX] server actions: check access rights before unlinking contextual actions --- openerp/addons/base/ir/ir_actions.py | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/openerp/addons/base/ir/ir_actions.py b/openerp/addons/base/ir/ir_actions.py index b5aea3d34b0..f2f558e65ac 100644 --- a/openerp/addons/base/ir/ir_actions.py +++ b/openerp/addons/base/ir/ir_actions.py @@ -871,11 +871,11 @@ class ir_actions_server(osv.osv): action.write({ 'menu_ir_values_id': ir_values_id, }) - return True def unlink_action(self, cr, uid, ids, context=None): """ Remove the contextual actions created for the server actions. """ + self.check_access_rights(cr , uid, 'write', raise_exception=True) for action in self.browse(cr, uid, ids, context=context): if action.menu_ir_values_id: try: