[FIX] mail: sudo on message in link preview controller

closes odoo/odoo#120116

Signed-off-by: Sébastien Theys (seb) <seb@odoo.com>
This commit is contained in:
Maryam Kia
2023-04-28 17:23:03 +02:00
parent 2717c41eb4
commit cd6f3e6373
+2 -2
View File
@@ -7,7 +7,7 @@ from odoo.http import request
class LinkPreviewController(http.Controller):
@http.route("/mail/link_preview", methods=["POST"], type="json", auth="public")
def mail_link_preview(self, message_id, clear=None):
if not request.env["mail.link.preview"].sudo()._is_link_preview_enabled():
if not request.env["mail.link.preview"]._is_link_preview_enabled():
return
guest = request.env["mail.guest"]._get_guest_from_request(request)
message = guest.env["mail.message"].search([("id", "=", int(message_id))])
@@ -16,7 +16,7 @@ class LinkPreviewController(http.Controller):
if not message.is_current_user_or_guest_author and not guest.env.user._is_admin():
return
if clear:
guest.env["mail.link.preview"].sudo()._clear_link_previews(message)
guest.env["mail.link.preview"]._clear_link_previews(message.sudo())
guest.env["mail.link.preview"].sudo()._create_link_previews(message)
@http.route("/mail/link_preview/delete", methods=["POST"], type="json", auth="public")