pengyuthon/odoo_source
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity

[IMP] website_form_editor: tighten ir.model access rights

Browse Source 
Adapt client code to signature of method `get_authorized_fields`.
This commit is contained in:
Raphael Collet
2017-01-03 19:19:55 +01:00
committed by Christophe Simonis
parent bee86d5aba
commit 8a01fae314
1 changed files with 11 additions and 25 deletions
Download Patch File Download Diff File Expand all files Collapse all files
static/src/js/website_form_editor.js
+11 -25
View File
@@ -64,36 +64,23 @@ odoo.define('website_form_editor', function (require) {
this.fields_deferred = new $.Deferred();
ir_model.call(
"search_read",
"get_authorized_fields",
[
[['model', '=', this.$target.closest('form').attr('data-model_name')]],
['id']
this.$target.closest('form').attr('data-model_name')
],
{
context: base.get_context()
}
).then(function(model) {
var model_id = model[0].id;
).then(function(fields) {
// The get_fields function doesn't return the name
// in the field dict since it uses it has the key
_.map(fields, function(field, field_name){
field.name = field_name;
return field;
});
ir_model.call(
"get_authorized_fields",
[
model_id
],
{
context: base.get_context()
}
).then(function(fields) {
// The get_fields function doesn't return the name
// in the field dict since it uses it has the key
_.map(fields, function(field, field_name){
field.name = field_name;
return field;
});
self.fields_deferred.resolve(fields)
})
})
self.fields_deferred.resolve(fields)
});
return this.fields_deferred;
},
@@ -178,7 +165,6 @@ odoo.define('website_form_editor', function (require) {
if (type !== 'click') return;
var self = this;
var ir_model = new Model("ir.model");
this.fields().then(function(fields) {
// Make a nice array to render the select input