From 9c144ab432eb0782b68a8313d68941c3e73db2ae Mon Sep 17 00:00:00 2001 From: =?UTF-8?q?Thibault=20Delavall=C3=A9e?= Date: Fri, 18 Mar 2022 08:42:41 +0000 Subject: [PATCH] [FIX] portal, website_crm_partner_assign: fix access action from mail Two lines have been inverted in ``_get_access_action`` override, leading to access rights not being correctly checked. This currently leads customers with token to land on portal without token, which is not the expected behavior. Followup of odoo/odoo@a018735 closes odoo/odoo#86646 X-original-commit: dd7d60aca8718763aaa211e138f684d8797f5d8c Signed-off-by: Thibault Delavallee (tde) --- addons/portal/models/portal_mixin.py | 2 +- addons/website_crm_partner_assign/models/crm_lead.py | 2 +- 2 files changed, 2 insertions(+), 2 deletions(-) diff --git a/addons/portal/models/portal_mixin.py b/addons/portal/models/portal_mixin.py index cc963833ee0..e7182239423 100644 --- a/addons/portal/models/portal_mixin.py +++ b/addons/portal/models/portal_mixin.py @@ -112,8 +112,8 @@ class PortalMixin(models.AbstractModel): access_uid=access_uid, force_website=force_website ) user = self.env['res.users'].sudo().browse(access_uid) - if user.share or force_website: record = self.with_user(user) + if user.share or force_website: try: record.check_access_rights('read') record.check_access_rule('read') diff --git a/addons/website_crm_partner_assign/models/crm_lead.py b/addons/website_crm_partner_assign/models/crm_lead.py index a89ee1629d8..09bc5227bdd 100644 --- a/addons/website_crm_partner_assign/models/crm_lead.py +++ b/addons/website_crm_partner_assign/models/crm_lead.py @@ -304,8 +304,8 @@ class CrmLead(models.Model): except AccessError: return super(CrmLead, self)._get_access_action(access_uid=access_uid, force_website=force_website) user = self.env['res.users'].sudo().browse(access_uid) - if user.share or force_website: record = self.with_user(user) + if user.share or force_website: try: record.check_access_rights('read') record.check_access_rule('read')