From b789092ead2926ea5e2611dd6dcd012a7c48e039 Mon Sep 17 00:00:00 2001 From: Toufik Benjaa Date: Mon, 3 Sep 2018 13:14:51 +0200 Subject: [PATCH] [FIX] mail: Access right issues while accessing mail.message - The SQL request to retrieve mail.message information to compute access rights was incorrect. Which triggered false access right issues. --- addons/mail/models/mail_message.py | 4 ++-- 1 file changed, 2 insertions(+), 2 deletions(-) diff --git a/addons/mail/models/mail_message.py b/addons/mail/models/mail_message.py index b1a3fa0cbf2..d9ac037b936 100644 --- a/addons/mail/models/mail_message.py +++ b/addons/mail/models/mail_message.py @@ -687,9 +687,9 @@ class Message(models.Model): if operation == 'read': self._cr.execute(""" - SELECT DISTINCT m.id, m.model, m.res_id, m.author_id, m.parent_id, m.moderation_status, + SELECT DISTINCT m.id, m.model, m.res_id, m.author_id, m.parent_id, COALESCE(partner_rel.res_partner_id, needaction_rel.res_partner_id), - channel_partner.channel_id as channel_id + channel_partner.channel_id as channel_id, m.moderation_status FROM "%s" m LEFT JOIN "mail_message_res_partner_rel" partner_rel ON partner_rel.mail_message_id = m.id AND partner_rel.res_partner_id = %%(pid)s