[IMP] portal: Partial revert of #37312

Purpose
=======

This fix makes no sense because it exposes some private data to
portal users. Fortunately it was only introduced in the master branch.

closes odoo/odoo#40710

Signed-off-by: Yannick Tivisse (yti) <yti@odoo.com>
This commit is contained in:
Yannick Tivisse
2019-11-22 14:45:22 +00:00
parent 368fde4704
commit 26e32dac34
3 changed files with 4 additions and 5 deletions
+1 -2
View File
@@ -11,8 +11,7 @@ class PortalAccount(CustomerPortal):
def _prepare_portal_layout_values(self):
values = super(PortalAccount, self)._prepare_portal_layout_values()
# An internal user could not have access to the account.move model
invoice_count = request.env['account.move'].sudo().search_count([
invoice_count = request.env['account.move'].search_count([
('type', 'in', ('out_invoice', 'in_invoice', 'out_refund', 'in_refund', 'out_receipt', 'in_receipt')),
])
values['invoice_count'] = invoice_count
+1 -1
View File
@@ -18,7 +18,7 @@ class CustomerPortal(CustomerPortal):
def _prepare_portal_layout_values(self):
values = super(CustomerPortal, self)._prepare_portal_layout_values()
values['purchase_count'] = request.env['purchase.order'].sudo().search_count([
values['purchase_count'] = request.env['purchase.order'].search_count([
('state', 'in', ['purchase', 'done', 'cancel'])
])
return values
+2 -2
View File
@@ -19,11 +19,11 @@ class CustomerPortal(CustomerPortal):
partner = request.env.user.partner_id
SaleOrder = request.env['sale.order']
quotation_count = SaleOrder.sudo().search_count([
quotation_count = SaleOrder.search_count([
('message_partner_ids', 'child_of', [partner.commercial_partner_id.id]),
('state', 'in', ['sent', 'cancel'])
])
order_count = SaleOrder.sudo().search_count([
order_count = SaleOrder.search_count([
('message_partner_ids', 'child_of', [partner.commercial_partner_id.id]),
('state', 'in', ['sale', 'done'])
])