From d5384f8f9d76063f008b8107bb6d945405501ac5 Mon Sep 17 00:00:00 2001 From: Jeremy Kersten Date: Tue, 25 Apr 2017 10:16:35 +0200 Subject: [PATCH] [FIX] website_portal: portal user don't have access to website.company_id Avoid portal user to receive 403 when trying to edit vat code on /my/account There are no risk to read field in sudo in this case. opw-740314 --- addons/website_portal/controllers/main.py | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/addons/website_portal/controllers/main.py b/addons/website_portal/controllers/main.py index a39a7ed6114..117e0f7dba7 100644 --- a/addons/website_portal/controllers/main.py +++ b/addons/website_portal/controllers/main.py @@ -105,7 +105,7 @@ class website_account(http.Controller): # vat validation if data.get("vat") and hasattr(request.env["res.partner"], "check_vat"): - if request.website.company_id.vat_check_vies: + if request.website.company_id.sudo().vat_check_vies: # force full VIES online check check_func = request.env["res.partner"].vies_vat_check else: