From c0010f86c0c5123346ae6fbbed00987937a8c438 Mon Sep 17 00:00:00 2001 From: jvm-odoo Date: Wed, 8 Apr 2020 08:42:56 +0000 Subject: [PATCH] [FIX] web: fix can export all without access rights Issue - Access rights > archive ir exports & line - Any list view - Select all > action > export Access rights error - Export all (next to import button) Export done Cause Action > export does a search_read which checks access rights Export all is bypassing that check Solution Do a search_read when clicking on export all before doing the export process OPW-2230048 closes odoo/odoo#49203 X-original-commit: 8aa89d4c416bdcf3c7f6543f3d32006f9807c938 Signed-off-by: Jason Van Malder (jvm) --- addons/web/static/src/js/views/list/list_controller.js | 8 +++++++- 1 file changed, 7 insertions(+), 1 deletion(-) diff --git a/addons/web/static/src/js/views/list/list_controller.js b/addons/web/static/src/js/views/list/list_controller.js index 988291fdb1e..5dc5515173e 100644 --- a/addons/web/static/src/js/views/list/list_controller.js +++ b/addons/web/static/src/js/views/list/list_controller.js @@ -728,7 +728,13 @@ var ListController = BasicController.extend({ * @private */ _onDirectExportData() { - this._getExportDialogWidget().export(); + // access rights check before exporting data + return this._rpc({ + model: 'ir.exports', + method: 'search_read', + args: [[], ['id']], + limit: 1, + }).then(() => this._getExportDialogWidget().export()) }, /** * Opens the related form view.