[FIX] website_quote: fix access rights issue when quotation is viewed by customer
This commit is contained in:
committed by
Thibault Delavallée
parent
097aa24566
commit
ba73069ffe
@@ -27,8 +27,7 @@ class sale_quote(http.Controller):
|
||||
if Order and request.session.get('view_quote') != now and request.env.user.share:
|
||||
request.session['view_quote'] = now
|
||||
body = _('Quotation viewed by customer')
|
||||
_message_post_helper(res_model='sale.order', res_id=Order.id, message=body, token=token, token_field="access_token", message_type='notification', subtype="mail.mt_note", partner_ids=Order.user_id.partner_id.ids)
|
||||
|
||||
_message_post_helper(res_model='sale.order', res_id=Order.id, message=body, token=token, token_field="access_token", message_type='notification', subtype="mail.mt_note", partner_ids=Order.user_id.sudo().partner_id.ids)
|
||||
if not Order:
|
||||
return request.render('website.404')
|
||||
|
||||
|
||||
Reference in New Issue
Block a user