[IMP] ir_qweb: add groups evaluation when a qweb view is rendered

bzr revid: chm@openerp.com-20140107151227-837ecc075be2prp8
2014-01-07 16:12:27 +01:00
parent 51c53cb396
commit 3d618cd6b4
1 changed files with 5 additions and 0 deletions
@@ -289,6 +289,11 @@ class QWeb(orm.AbstractModel):
            t_att = {}
            for (an, av) in e.attributes.items():
                an = str(an)
+                if an == "groups":
+                    can_see = self.user_has_groups(v['request'].cr, v['uid'], groups=av)
+                    if not can_see:
+                        return ''
+                    continue
                if isinstance(av, unicode):
                    av = av.encode("utf8")
                else: