[IMP] *: convert to private methods

render, render_template, load, activity_schedule_with_view,
get_website_pages should all be private:
It should not be possible to render an aribtrary template only with
its name or id

Still need to render some qweb views from js so the method
render_template is kept public.
This explains why the website editor still need read access on
ir.ui.view as we want to allow any snippet to be rendered.
This commit is contained in:
Martin Trigaux
2020-05-14 13:59:10 +02:00
parent 56a8c9e431
commit d9287caf94
88 changed files with 207 additions and 196 deletions
@@ -1034,7 +1034,7 @@ var SnippetsMenu = Widget.extend({
}
this._defLoadSnippets = this._rpc({
model: 'ir.ui.view',
method: 'render_template',
method: 'render_public_asset',
args: [this.options.snippets, {}],
kwargs: {
context: this.options.context,