From a90653c98f15261d14f9ecfc74df50aae34cf67b Mon Sep 17 00:00:00 2001 From: Stephane Wirtel Date: Wed, 28 Jan 2009 12:20:14 +0100 Subject: [PATCH] [FIX] User can read his own password lp bug: https://launchpad.net/bugs/322221 fixed bzr revid: stephane@tinyerp.com-20090128112014-besest79n8luqe8e --- bin/addons/base/res/res_user.py | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/bin/addons/base/res/res_user.py b/bin/addons/base/res/res_user.py index 96a5d2ec4ff..27810c8ac07 100644 --- a/bin/addons/base/res/res_user.py +++ b/bin/addons/base/res/res_user.py @@ -111,7 +111,7 @@ class users(osv.osv): } def read(self,cr, uid, ids, fields=None, context=None, load='_classic_read'): def override_password(o): - if 'password' in o: + if 'password' in o and ( 'id' not in o or o['id'] != uid ): o['password'] = '********' return o