[FIX] auth_signup: inactive password res_partner

This commit prevent the reset of password for de-activated partner

closes odoo/odoo#119114

X-original-commit: 71f4cf2da157d3457885339d116c38d673187b59
Signed-off-by: Vranckx Florian (flvr) <flvr@odoo.com>
This commit is contained in:
flvr-odoo
2023-04-20 10:51:57 +02:00
parent 3864f2cf84
commit 86fd55b8e7
+2 -2
View File
@@ -52,7 +52,7 @@ class ResPartner(models.Model):
def _compute_token(self):
for partner in self:
self.env.cr.execute('SELECT signup_token FROM res_partner WHERE id=%s', (partner.id,))
self.env.cr.execute('SELECT signup_token FROM res_partner WHERE id=%s', (partner._origin.id,))
partner.signup_token = self.env.cr.fetchone()[0]
def _inverse_token(self):
@@ -160,7 +160,7 @@ class ResPartner(models.Model):
:param raise_exception: if True, raise exception instead of returning False
:return: partner (browse record) or False (if raise_exception is False)
"""
self.env.cr.execute("SELECT id FROM res_partner WHERE signup_token = %s", (token,))
self.env.cr.execute("SELECT id FROM res_partner WHERE signup_token = %s AND active", (token,))
partner_id = self.env.cr.fetchone()
partner = self.browse(partner_id[0]) if partner_id else None
if not partner: