[FIX] message_route: removed owner of created documents using aliases taken from the 'from' of the incoming email, because we cannot ensure that this user has any create or write access rights. If no owner is defined on the alias, uid will be used instead.

bzr revid: tde@openerp.com-20130104090317-kzv48yepno4t5dcp
2013-01-04 10:03:17 +01:00
parent e88795ae66 0170f78af9
commit 7967c20af4
1 changed files with 7 additions and 1 deletions
@@ -491,7 +491,13 @@ class mail_thread(osv.AbstractModel):
                for alias in mail_alias.browse(cr, uid, alias_ids, context=context):
                    user_id = alias.alias_user_id.id
                    if not user_id:
-                        user_id = self._message_find_user_id(cr, uid, message, context=context)
+                        # TDE note: this could cause crashes, because no clue that the user
+                        # that send the email has the right to create or modify a new document
+                        # Fallback on user_id = uid
+                        # Note: recognized partners will be added as followers anyway
+                        # user_id = self._message_find_user_id(cr, uid, message, context=context)
+                        user_id = uid
+                        _logger.debug('No matching user_id for the alias %s', alias.alias_name)
                    routes.append((alias.alias_model_id.model, alias.alias_force_thread_id, \
                                   eval(alias.alias_defaults), user_id))
                _logger.debug('Routing mail with Message-Id %s: direct alias match: %r', message_id, routes)