From 627f316c92bece63482cfef2bd2b37ef625711a9 Mon Sep 17 00:00:00 2001 From: Fabien Pinckaers Date: Wed, 3 Sep 2008 09:41:34 +0200 Subject: [PATCH 1/3] Security Bugfix bzr revid: fp@tinyerp.com-20080903074134-wa77p8d7teu9e3kl --- bin/addons/base/base.sql | 7 ++++++- 1 file changed, 6 insertions(+), 1 deletion(-) diff --git a/bin/addons/base/base.sql b/bin/addons/base/base.sql index 38e8c154a62..42ee4cd781e 100644 --- a/bin/addons/base/base.sql +++ b/bin/addons/base/base.sql @@ -328,6 +328,11 @@ CREATE TABLE ir_model_data ( --------------------------------- -- Users --------------------------------- -insert into res_users (id,login,password,name,action_id,active) values (1,'admin','admin','Administrator',NULL,True); + +insert into res_users (id,login,password,name,action_id,active) values (1,'admin',False,'Administrator',NULL,True); insert into ir_model_data (name,module,model,noupdate,res_id) values ('user_root','base','res.users',True,1); + +-- Compatibility purpose, to remove V6.0 +insert into ir_model_data (name,module,model,noupdate,res_id) values ('user_admin','base','res.users',True,1); + select setval('res_users_id_seq', 2); From 65ff68746c1520aac7a59031b93ab2854849b1c7 Mon Sep 17 00:00:00 2001 From: Fabien Pinckaers Date: Wed, 3 Sep 2008 09:51:02 +0200 Subject: [PATCH 2/3] Bugfix Login bzr revid: fp@tinyerp.com-20080903075102-9y9ykxsj839jryu1 --- bin/addons/base/base.sql | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/bin/addons/base/base.sql b/bin/addons/base/base.sql index 42ee4cd781e..02f6a6836dd 100644 --- a/bin/addons/base/base.sql +++ b/bin/addons/base/base.sql @@ -329,7 +329,7 @@ CREATE TABLE ir_model_data ( -- Users --------------------------------- -insert into res_users (id,login,password,name,action_id,active) values (1,'admin',False,'Administrator',NULL,True); +insert into res_users (id,login,password,name,action_id,active) values (1,'admin',NULL,'Administrator',NULL,True); insert into ir_model_data (name,module,model,noupdate,res_id) values ('user_root','base','res.users',True,1); -- Compatibility purpose, to remove V6.0 From 118db0735ced3a2c7a28f0c485e3783986756700 Mon Sep 17 00:00:00 2001 From: Fabien Pinckaers Date: Wed, 3 Sep 2008 10:03:39 +0200 Subject: [PATCH 3/3] Bugfix Security bzr revid: fp@tinyerp.com-20080903080339-60qkefv9k8yfdnpq --- bin/service/web_services.py | 1 + 1 file changed, 1 insertion(+) diff --git a/bin/service/web_services.py b/bin/service/web_services.py index 0b7c849faff..f4af4eb626e 100644 --- a/bin/service/web_services.py +++ b/bin/service/web_services.py @@ -98,6 +98,7 @@ class db(netsvc.Service): 'from res_users ' \ 'order by login') serv.actions[id]['users'] = cr.dictfetchall() + cr.commit() cr.close() except Exception, e: serv.actions[id]['clean'] = False