From c3cc2b08f1b563e4e883d95e6cc89c81633218f1 Mon Sep 17 00:00:00 2001 From: Christophe Matthieu Date: Tue, 14 Jan 2014 11:57:44 +0100 Subject: [PATCH 1/9] [IMP] website_sale: demo data for suggested product bzr revid: chm@openerp.com-20140114105744-gz1z4ap9zra33s11 --- addons/website_sale/data/website_sale_demo.xml | 1 + 1 file changed, 1 insertion(+) diff --git a/addons/website_sale/data/website_sale_demo.xml b/addons/website_sale/data/website_sale_demo.xml index c16690f763d..d28a587603d 100644 --- a/addons/website_sale/data/website_sale_demo.xml +++ b/addons/website_sale/data/website_sale_demo.xml @@ -536,6 +536,7 @@ Weight: 1.1 ounces + From fbb74096e3c83449b7a382b1c89799d1f779160c Mon Sep 17 00:00:00 2001 From: Christophe Matthieu Date: Tue, 14 Jan 2014 11:58:02 +0100 Subject: [PATCH 2/9] [FIX] website_blog: employee can't post a comment bzr revid: chm@openerp.com-20140114105802-ztc2d398zuz100z0 --- addons/website_blog/controllers/main.py | 24 ++++++++++++------- .../views/website_blog_templates.xml | 6 ++--- 2 files changed, 19 insertions(+), 11 deletions(-) diff --git a/addons/website_blog/controllers/main.py b/addons/website_blog/controllers/main.py index 00835d133ab..fc48266cc5e 100644 --- a/addons/website_blog/controllers/main.py +++ b/addons/website_blog/controllers/main.py @@ -23,6 +23,7 @@ from openerp.addons.web import http from openerp.addons.web.http import request from openerp.addons.website.models import website from openerp.tools.translate import _ +from openerp import SUPERUSER_ID import werkzeug @@ -218,16 +219,23 @@ class WebsiteBlog(http.Controller): } return request.website.render("website_blog.blog_post_complete", values) - @website.route(['/blogpost//comment'], type='http', auth="public") - def blog_post_comment(self, blog_post_id, **post): + @website.route(['/blogpost/comment'], type='http', auth="public", methods=['POST']) + def blog_post_comment(self, blog_post_id=0, **post): cr, uid, context = request.cr, request.uid, request.context if post.get('comment'): - request.registry['blog.post'].message_post( - cr, uid, blog_post_id, - body=post.get('comment'), - type='comment', - subtype='mt_comment', - context=dict(context, mail_create_nosubcribe=True)) + user = request.registry['res.users'].browse(cr, SUPERUSER_ID, uid, context=context) + group_ids = user.groups_id + group_id = request.registry["ir.model.data"].get_object_reference(cr, uid, 'website_mail', 'group_comment')[1] + if group_id in [group.id for group in group_ids]: + blog_post = request.registry['blog.post'] + blog_post.check_access_rights(cr, uid, 'read') + blog_post.message_post( + cr, SUPERUSER_ID, int(blog_post_id), + body=post.get('comment'), + type='comment', + subtype='mt_comment', + author_id=user.partner_id.id, + context=dict(context, mail_create_nosubcribe=True)) return werkzeug.utils.redirect(request.httprequest.referrer + "#comments") @website.route('/blogpost/new', type='http', auth="public", multilang=True) diff --git a/addons/website_blog/views/website_blog_templates.xml b/addons/website_blog/views/website_blog_templates.xml index 4fe512381a4..a3afdcbfd83 100644 --- a/addons/website_blog/views/website_blog_templates.xml +++ b/addons/website_blog/views/website_blog_templates.xml @@ -218,10 +218,10 @@