From 5e2d675149b8810ce832399c94cdf2b6df35f129 Mon Sep 17 00:00:00 2001
From: Victor Feyens <vfe@odoo.com>
Date: Thu, 16 Jun 2022 15:44:52 +0000
Subject: [PATCH] [IMP] payment: provide the access token to the assign route

to be able to safely check the user is allowed to modify the specified
portal record.

Part-of: odoo/odoo#94020
---
 addons/payment/static/src/js/manage_form.js | 1 +
 1 file changed, 1 insertion(+)

diff --git a/addons/payment/static/src/js/manage_form.js b/addons/payment/static/src/js/manage_form.js
index e6a4e840ffa..eafeb238384 100644
--- a/addons/payment/static/src/js/manage_form.js
+++ b/addons/payment/static/src/js/manage_form.js
@@ -53,6 +53,7 @@ odoo.define('payment.manage_form', require => {
             this._rpc({
                 route: this.txContext.assignTokenRoute,
                 params: {
+                    'access_token': this.txContext.accessToken,
                     'token_id': tokenId,
                     'csrf_token': core.csrf_token,
                 }