From a7e99e261f00d014dfd7aa6f182234677d3c2a37 Mon Sep 17 00:00:00 2001
From: Yannick Tivisse <yti@odoo.com>
Date: Mon, 20 Sep 2021 13:01:55 +0200
Subject: [PATCH] [FIX] ir_demo.py: Force admin access to load demo data

Only admin users should be able to load demo data, if needed.

This is only possible from the settings dashboard, and thus,
the method could be decorated.

See: c002e2eb379e8a3db90b45269f8ff2b7e246c8b2
---
 odoo/addons/base/models/ir_demo.py | 5 +++++
 1 file changed, 5 insertions(+)

diff --git a/odoo/addons/base/models/ir_demo.py b/odoo/addons/base/models/ir_demo.py
index 6c8775aee5e..e7ee63874ef 100644
--- a/odoo/addons/base/models/ir_demo.py
+++ b/odoo/addons/base/models/ir_demo.py
@@ -1,5 +1,9 @@
+# -*- coding: utf-8 -*-
+# Part of Odoo. See LICENSE file for full copyright and licensing details.
+
 from odoo import models
 from odoo.modules.loading import force_demo
+from odoo.addons.base.models.ir_module import assert_log_admin_access
 
 
 class IrDemo(models.TransientModel):
@@ -7,6 +11,7 @@ class IrDemo(models.TransientModel):
     _name = 'ir.demo'
     _description = 'Demo'
 
+    @assert_log_admin_access
     def install_demo(self):
         force_demo(self.env.cr)
         return {