[FIX] mail: sudo on message in link preview controller
closes odoo/odoo#120116 Signed-off-by: Sébastien Theys (seb) <seb@odoo.com>
This commit is contained in:
@@ -7,7 +7,7 @@ from odoo.http import request
|
||||
class LinkPreviewController(http.Controller):
|
||||
@http.route("/mail/link_preview", methods=["POST"], type="json", auth="public")
|
||||
def mail_link_preview(self, message_id, clear=None):
|
||||
if not request.env["mail.link.preview"].sudo()._is_link_preview_enabled():
|
||||
if not request.env["mail.link.preview"]._is_link_preview_enabled():
|
||||
return
|
||||
guest = request.env["mail.guest"]._get_guest_from_request(request)
|
||||
message = guest.env["mail.message"].search([("id", "=", int(message_id))])
|
||||
@@ -16,7 +16,7 @@ class LinkPreviewController(http.Controller):
|
||||
if not message.is_current_user_or_guest_author and not guest.env.user._is_admin():
|
||||
return
|
||||
if clear:
|
||||
guest.env["mail.link.preview"].sudo()._clear_link_previews(message)
|
||||
guest.env["mail.link.preview"]._clear_link_previews(message.sudo())
|
||||
guest.env["mail.link.preview"].sudo()._create_link_previews(message)
|
||||
|
||||
@http.route("/mail/link_preview/delete", methods=["POST"], type="json", auth="public")
|
||||
|
||||
Reference in New Issue
Block a user