From 3572ed909a2294a876fa6329593d976dd94594bb Mon Sep 17 00:00:00 2001 From: Olivier Dony Date: Mon, 25 Oct 2010 16:54:45 +0200 Subject: [PATCH] [IMP] project: avoid access rights issue when reading time_mode (uom) for fields_view_get bzr revid: odo@openerp.com-20101025145445-ccgvic2uyqd50hi6 --- addons/project/project.py | 5 ++++- 1 file changed, 4 insertions(+), 1 deletion(-) diff --git a/addons/project/project.py b/addons/project/project.py index 294c711eaac..6c9f66dd009 100644 --- a/addons/project/project.py +++ b/addons/project/project.py @@ -483,7 +483,10 @@ class task(osv.osv): def fields_view_get(self, cr, uid, view_id=None, view_type='form', context=None, toolbar=False, submenu=False): users_obj = self.pool.get('res.users') - obj_tm = users_obj.browse(cr, uid, uid, context).company_id.project_time_mode_id + + # read uom as admin to avoid access rights issues, e.g. for portal/share users, + # this should be safe (no context passed to avoid side-effects) + obj_tm = users_obj.browse(cr, 1, uid).company_id.project_time_mode_id tm = obj_tm and obj_tm.name or 'Hours' res = super(task, self).fields_view_get(cr, uid, view_id, view_type, context, toolbar, submenu=submenu)