From cd6f3e6373588421d2454468f86bbebb88a9d6bb Mon Sep 17 00:00:00 2001 From: Maryam Kia Date: Fri, 28 Apr 2023 13:16:59 +0000 Subject: [PATCH] [FIX] mail: sudo on message in link preview controller MIME-Version: 1.0 Content-Type: text/plain; charset=UTF-8 Content-Transfer-Encoding: 8bit closes odoo/odoo#120116 Signed-off-by: Sébastien Theys (seb) --- addons/mail/controllers/link_preview.py | 4 ++-- 1 file changed, 2 insertions(+), 2 deletions(-) diff --git a/addons/mail/controllers/link_preview.py b/addons/mail/controllers/link_preview.py index 62a37f54ad9..4ff1555ce66 100644 --- a/addons/mail/controllers/link_preview.py +++ b/addons/mail/controllers/link_preview.py @@ -7,7 +7,7 @@ from odoo.http import request class LinkPreviewController(http.Controller): @http.route("/mail/link_preview", methods=["POST"], type="json", auth="public") def mail_link_preview(self, message_id, clear=None): - if not request.env["mail.link.preview"].sudo()._is_link_preview_enabled(): + if not request.env["mail.link.preview"]._is_link_preview_enabled(): return guest = request.env["mail.guest"]._get_guest_from_request(request) message = guest.env["mail.message"].search([("id", "=", int(message_id))]) @@ -16,7 +16,7 @@ class LinkPreviewController(http.Controller): if not message.is_current_user_or_guest_author and not guest.env.user._is_admin(): return if clear: - guest.env["mail.link.preview"].sudo()._clear_link_previews(message) + guest.env["mail.link.preview"]._clear_link_previews(message.sudo()) guest.env["mail.link.preview"].sudo()._create_link_previews(message) @http.route("/mail/link_preview/delete", methods=["POST"], type="json", auth="public")