From 3d618cd6b4e214b14ac2da3f525d25b4606a8e49 Mon Sep 17 00:00:00 2001 From: Christophe Matthieu Date: Tue, 7 Jan 2014 16:12:27 +0100 Subject: [PATCH] [IMP] ir_qweb: add groups evaluation when a qweb view is rendered bzr revid: chm@openerp.com-20140107151227-837ecc075be2prp8 --- openerp/addons/base/ir/ir_qweb.py | 5 +++++ 1 file changed, 5 insertions(+) diff --git a/openerp/addons/base/ir/ir_qweb.py b/openerp/addons/base/ir/ir_qweb.py index 88757b89926..6f5989a20c0 100644 --- a/openerp/addons/base/ir/ir_qweb.py +++ b/openerp/addons/base/ir/ir_qweb.py @@ -289,6 +289,11 @@ class QWeb(orm.AbstractModel): t_att = {} for (an, av) in e.attributes.items(): an = str(an) + if an == "groups": + can_see = self.user_has_groups(v['request'].cr, v['uid'], groups=av) + if not can_see: + return '' + continue if isinstance(av, unicode): av = av.encode("utf8") else: