From 2bda46ce78b501d7e6a202ba5674ecb7eb6e10de Mon Sep 17 00:00:00 2001 From: Nicolas Lempereur Date: Wed, 28 Jun 2017 09:03:21 +0200 Subject: [PATCH] [FIX] website_sale_digital: check product tmpl sudo For example the portal user has restricted access to product template, this can lead to an issue that should not be in this instance that is checking if the product template correspond to a product sold. opw-748480 closes #17871 --- addons/website_sale_digital/controllers/main.py | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/addons/website_sale_digital/controllers/main.py b/addons/website_sale_digital/controllers/main.py index 089f2b97f35..b633596a0bf 100644 --- a/addons/website_sale_digital/controllers/main.py +++ b/addons/website_sale_digital/controllers/main.py @@ -85,7 +85,7 @@ class WebsiteSaleDigital(website_account): # Also check for attachments in the product templates elif res_model == 'product.template': - P = request.env['product.product'] + P = request.env['product.product'].sudo() template_ids = map(lambda x: P.browse(x).product_tmpl_id.id, purchased_products) if res_id not in template_ids: return redirect(self.orders_page)