Commit Graph
99161 Commits
Author SHA1 Message Date
Coin Newell 31d817e849 [FIX] web: rotate session identifiers after login/logout
As recommended by OWASP
https://www.owasp.org/index.php/Session_Management_Cheat_Sheet#Renew_the_Session_ID_After_Any_Privilege_Level_Change

Closes #6760
2015-05-19 01:45:46 +02:00
Olivier Dony d5aa22ea5f [FIX] website, website_report: backwards compatibility with outdated templates
* Complements commits a696913364 and
21d4b3fda9 by adding the missing `data-lang`
attribute also in the report layout (in saas-6 a single QWeb
template is used for language links in both reports and website
layouts).

* Fix the "Edit Master" link to work also for outdated templates
where the data-lang attribute is dynamically set to 'default',
and thus cannot be used as URL prefix -> use /website/lang
controller to switch lang instead.
2015-05-18 19:34:11 +02:00
Josse Colpaert baca220bb7 [FIX] invoice onchange: onchange_invoice_line_ids continued 2015-05-18 17:41:58 +02:00
Christophe Simonis 4a0241d6f6 [MERGE] forward port of branch 8.0 up to f722254 2015-05-18 17:35:24 +02:00
Denis Ledoux 235cd2d015 [FIX] mrp: find company bom when MO created from procurement through cron
Manufacturing Orders can be created from procurements,
as SUPERUSER_ID, since the procurements can be processed
through the WH scheduler, which is always ran as SUPERUSER_ID

In such a case, the record rules are ignored, and a BOM
normally not accessible to a user thanks to the multi-company
record rule could be chosen as the BOM of the MO.

This revision forces to find a BOM from a specific company
in such a case.

opw-640120
2015-05-18 17:20:31 +02:00
Christophe Simonis f722254018 [MERGE] forward port of branch saas-3 up to 0f5b6cf 2015-05-18 17:13:50 +02:00
Christophe Simonis 0f5b6cf60b [MERGE] forward port of branch 7.0 up to c435b84 2015-05-18 17:13:18 +02:00
Christophe Simonis 5aee318f16 [FIX] account: use new api in demo yml 2015-05-18 17:07:09 +02:00
David Monjoie 1f02a25bad [FIX] website_slides: wrapped upload js code into if_dom_contains
To avoid loading unnecessary templates on every page.
2015-05-18 16:47:33 +02:00
David Monjoie 179c5a9908 [FIX] website_forum: wrapped sharing js inside if_dom_contains
To avoid loading unnecessary templates on every page
2015-05-18 16:47:06 +02:00
Jamin Shah 0e5b25b48f [IMP] project, web_planner, crm : add planner for project module
- clean the planner style
- add specific class per planner crm (avoiding collisions)
- create .o_planner_white_box class used in all planners
- add planner for project module
2015-05-18 16:43:24 +02:00
Jeremy Kersten 30013c57ba [TYPO] website: add semicolon
Thanks @sle-odoo
2015-05-18 16:18:28 +02:00
Jeremy Kersten 21d4b3fda9 [FIX] website: force default lang for edit master option
Since user is redirected automatically in his preferred language, the button edit_master redirect always to
the current lang and so not the master.
2015-05-18 15:53:34 +02:00
Josse Colpaert d062b8ba43 [FIX] invoice onchange: no api.multi decorator on invoice_line_ids_onchange 2015-05-18 15:53:11 +02:00
Gaurav Panchal f0d4761159 [IMP] stock_account: counter/filter of invoiced pickings search now for pickings that are invoiced AND transferred 2015-05-18 15:07:52 +02:00
Goffin Simon 1c90b9049b [FIX] website_sale_option: update product qty
When there is no user logged in the website, the product id must be written
in the DOM.

opw: 634535
2015-05-18 14:56:56 +02:00
Nicolas Martinelli 335a8afe79 [FIX] stock: remove state modifiers for field note in stock.picking
Remove the state modifiers for field note in stock.picking in order to have a
behavior which is consistent with sales orders or invoices.

opw-639956
2015-05-18 14:52:06 +02:00
Hitesh Trivedi e9b502aec7 [IMP] sale_layout : Make report category translatable 2015-05-18 14:36:49 +02:00
Yannick Tivisse 42c17129c3 [IMP] sale,sale_stock : Uniformize the naming in the reports with model sale.order 2015-05-18 14:33:34 +02:00
Yannick Tivisse 44658a49c6 [IMP] stock: rename Available quantity into Forecasted quantity; hide reordering rules if product type is consumable 2015-05-18 14:29:34 +02:00
Yannick Tivisse 8eba80a1c2 [IMP] hr_recruitment : change availability into date field 2015-05-18 14:24:13 +02:00
Yannick Tivisse 4380b90965 [FIX] point_of_sale: typo 2015-05-18 14:23:40 +02:00
Cedric Snauwaert 5a8a0d252c [FIX] pos: tax computation in point of sale was done wrong
Change method to match the tax computation performed server side

this closes #259, closes #245
2015-05-18 13:50:36 +02:00
Christophe Matthieu 81763ac365 [FIX] website: if the top bar is displayed, in mobile view the layout have a crappy top margin 2015-05-18 13:50:33 +02:00
Nicolas Martinelli f6c65a3d9e [FIX] website_sale: prevents the modification of a SO line if SO is not 'draft'
opw-634681
2015-05-18 13:08:01 +02:00
Nicolas Martinelli 6b7e6f6b90 [ADD] stock: onchange on wizard stock_change_product_qty
The proposed value for the new quantity on hand is calculated for the chosen
warehouse.

opw-639641
2015-05-18 12:54:20 +02:00
Denis Ledoux 439cdb6871 [FIX] report: print time in user timezone
In reports calling the internal headers layout,
e.g. the general ledger,
the print time was displayed in UTC,
while it should be in user tz.

closes #3341
opw-612043
2015-05-18 12:44:36 +02:00
Thibault Delavallée 2f49dd7840 [FIX] mail: who committed commented tests ? Me ? Mmmh ... Sorry. 2015-05-18 12:06:13 +02:00
Denis Ledoux a4c7c564cf [FIX] stock_account: average cost in multi-company environment
When receiving goods with average price set as costing method,
for a move from another company than the SUPERUSER_id company,
the average price updated was the one from the SUPERUSER company
instead of the one of the move.

opw-634167
2015-05-18 11:49:55 +02:00
Antony Lesuisse fffaf40617 [FIX] website: geoip restore city file location
And change the warning message with instruction on how to install the database,
debian geoip-database-contrib has a script to easily install it.
2015-05-18 11:46:42 +02:00
Christophe Matthieu a910d45cab [FIX] website: when open and close html ace editor, the css apply an opacity 0 but the mousedown button hanlder cancel the event and the user can't reopen the html ace editor 2015-05-18 11:43:22 +02:00
Antony Lesuisse 49a5a355c2 [FIX] website: ir.http cache add lang in key 2015-05-18 11:06:34 +02:00
Odoo Online ffd72b7f58 [FIX] website: http cache some handler dont have routing 2015-05-17 17:44:30 +02:00
Antony Lesuisse ceb53fad6d [IMP] website: ir.http route cache for auth public
- remove useless cache clear_prefix
- add a route cache attribute when used it will save the rendered page into the
  ormcache for the specified time, this is only enabled if the user is public
  and reponse code is 200
- enable it on /page controller for 5min
2015-05-17 17:08:13 +02:00
Antony Lesuisse 714aaca03e [FIX] website: ir.http geoip default file
- set the default value to be the debian bundled geoip database.
- split into 2 methods to avoir bloating dispatch
2015-05-17 16:45:22 +02:00
pvy c1cd63fc4e [IMP] account_reports: move footnotes and line folding methods to the common context object, moved the totals to the bottom linesm and some small fixes 2015-05-15 17:33:44 +02:00
Nicolas Lempereur 187ad0a054 [FIX] mail: chatter not shown when should
If the chatter is displayed, display the send message part.

Before it was only displayed if we can edit the record, but we are still
able to post in other case (i.e. if we are in the followers).

closes #6721
opw-631039
2015-05-15 17:08:45 +02:00
Nicolas Lempereur 02fb59fffa [FIX] website: widget share doesn't always work
Depending on the area (in this case a html field), the editor can escape
the url which wasn't taken into account by this widget.

closes #6726
opw-639852
2015-05-15 17:00:26 +02:00
Goffin Simon cab5e3668f [FIX] project: Project Time Unit
The domain set for the field 'project_time_mode_id' must use the xml_id to be
used with every languages.

opw:639603
2015-05-15 16:58:37 +02:00
Aaron Bohy a8a9fe821a [FIX] Web: ControlPanel: hide ControlPanel on breadcrumb click
if the inner widget doesn't use it.
2015-05-15 16:08:18 +02:00
Nicolas Martinelli bb63e9a012 [FIX] website_sale_delivery: display delivery desciption on the website
opw-639617
2015-05-15 14:22:46 +02:00
Denis Ledoux fb23de77a9 [FIX] google_calendar: multiple times the same reminder in an event
Use a set to prevent adding several time
the same calendar.alarm (reminder) in the same event

opw-639918
2015-05-15 14:04:55 +02:00
Darshan Kalola 50a043d979 [IMP] website, website_sale, crm, web_planner : add planner for website modules
This commit impact crm, website, website_sale and web_planner modules because it
- add planner for website and website_sale
- improve planner notebook by setting texterea and input size to 100% and using col-md-* class
- split js code into common part (used in backend and frontend) and backend part (only for backend)
- adapt some tour, since every page will have the planner modal in its DOM, the tour selectors msut be more accurate
- introduce some style fixes and adaptations
- ...
2015-05-15 10:59:42 +02:00
Nicolas Martinelli fefc8e0574 [FIX] mrp_repair: calculation of taxes
- Correct tax management in tab "Operations": use unit_price in tax computation
- Add tax calculation in tab "Invoicing" (Fees).

opw-639660
2015-05-15 10:17:05 +02:00
Aaron Bohy 49fe33a3ba [FIX] Web: ActionManager: on_reverse_breadcrumb 2015-05-15 09:43:06 +02:00
Aaron Bohy e7ff2d2c6a [IMP] Web: ListView: semantics classes for row decoration
based on bootstrap contextual colors, and bold/italic fonts.

Backward compatibility is ensured as the ListView is monkey-patched
to keep interpreting colors and fonts attributes.
2015-05-15 09:17:18 +02:00
Géry Debongnie a9522cb46f [IMP] web: introduces event bubbling in widgets
This commit adds event bubbling in the event dispatcher mixin (which
inherits from parentedmixins).  To do this, it introduces a new small
class 'OdooEvent', which register the target and if the event is stopped.

Also, widgets have a new 'custom_events' dictionary to easily register
callbacks like the event dictionary.
2015-05-15 09:16:34 +02:00
Géry Debongnie 97a5eee0ac [IMP] web: performance improvement with bus
The bus class listen for many mouse/keyboard events and trigger them on
itself.  This was intended for the main bus, but not for custom buses.

This commit should improve the performance when using many buses.
2015-05-15 09:16:34 +02:00
Géry Debongnie cd55968212 [FIX] web: better warning message when missing dependencies 2015-05-15 09:16:34 +02:00
Géry Debongnie ebd68aeb83 [FIX] web: prevent useless rpc in one2many
In some cases (for example, some popup dialogs with a form view), the
one2many field is destroyed but the async code still tries to append
a view manager to itself.  The result is that the start method of the
view manager is run, resulting in at least an useless fieldviewget.
2015-05-15 09:16:34 +02:00