Commit Graph
19 Commits
Author SHA1 Message Date
Denis Ledoux 731a21e5b4 [FIX] rating: security issue to the last_value related field depends
The `rating_last_value` field was a related on the One2many
field `rating_ids`, on which the domain
`[('res_model', '=', self._name)]` is applied.

The problem is that this domain is not taken into account
when retrieving the records for which this value must be recomputed

Therefore, when computing the `rating_last_value` of a record,
if there was a record with the same `res_id` but another
`res_model`, the `rating_last_value` of this other record
is recomputed as well.

And, if you did not have the write access rights on this other
record, it raised a security exception.

There is at the moment no way in the ORM to filter the
depends on a specific subset of records for which
a computed field must be recomputed. Therefore,
we have no other choices to make the recomputation
of the records value as sudo. It will
recompute the value of other records which have nothing
to do with the one on which this value must be recomputed
(nothing to do except the id of the records which is common),
but at least it will succeed.

opw-709349
2017-02-23 13:57:31 +01:00
Goffin Simon f63fb28579 [FIX] rating: Typo error
When record.id was not in the dictionary result, it raised a error.

opw:709072
2017-02-20 11:40:19 +01:00
Christophe Simonis 298e2032ea [MERGE] forward port branch saas-12 up to 9f28139 2016-09-09 18:13:31 +02:00
Damien Bouvy 259cc9a708 [FIX] rating: fetch the rated partner when applying the rating
A function named rating_get_rated_partner_id is there, let's use it.
2016-09-07 11:44:42 +02:00
Denis Vermylen (dve) fb0cb41912 [FIX] rating: comparing record to id 2016-09-02 13:31:15 +02:00
Thibault Delavallée c8a313d51e [IMP] various: use odoo for imports instead of openerp and update class names 2016-08-10 15:48:07 +02:00
Fabien Pinckaers 9bf9eb863b [FIX] rating: correct list view (list --> tree)
[FIX] livechat_rating: ratings from livechat should be consumed
(otherwise invisible)
[IMP] usability: better views and tooltips
2016-07-15 15:13:17 +02:00
Fabien Pinckaers fb289e0b5d [SEC] rating: escape feedback, text2html to avoid js injection
[IMP] rating: website rating page: reviewed design, rate on click, update on submit
[IMP] rating_project: rating_status: 'no' instead of False
[IMP] rating_project/issue: smileys insteaf of thumbs for consistency in kanban
[IMP] rating: allow to update an existing rating (feedback + rate)
[IMP] rating: consistency on rating names (statisfied, not satisfied, higly dissatisfed)
[IMP] rating: avoid deadend after rating, button to go to Odoo
[IMP] rating: res_config better sentence
2016-07-02 18:33:55 +02:00
jat-odoo 0b1a27a3c7 [REF,IMP] project,project_issue,rating: Handle ratings more efficiently
Purpose:

For our internal project management, we would like to track the customer
satisfaction on the open projects. We send them an email every one or 2
weeks allowing them to give a feedback by clicking on one of 3
smileys: Happy, Average, Angry. They can also put a additional explanation.

We already have something similar which is working on livechat with a
unusable reporting, and on issues but unusable. Our project are managed by tasks.

Specification:
- On the project : Selection fields : (Periodical Rating or Rating on Stage)
  + Fields to choose the period if periodical
- On the stage : email_template_id field.
- IF :
---> Periodical : Send an email to all the customers for the tasks on this stage periodically
---> On Stage : Send an email to the customer's tasks when the task reaches the stage
- That way, it's impossible to send a satisfaction request both periodically and sequentially.
  FP request
- Who is the customer : The customer on the task OR the customer on the related sales order
  OR the customer on the projet OR nobody
- The last feedback is displayed on the task kanban card (Thumb up, down, or neutral)
- On the project kanban card, the customer satisfaction is displayed. This is the simple
  mean of all the previous ratings.
2016-07-01 14:05:03 +02:00
Christophe Simonis 1e404b7b69 [MERGE] forward port of branch 9.0 up to de11d84 2016-04-01 18:43:35 +02:00
Christophe Simonis 94af66fe8b [MERGE] forward port of branch saas-6 up to df45a31 2016-04-01 18:31:04 +02:00
Denis Ledoux 8bb6704b4b [FIX] rating: rating as public
If the user is not connected with his portal account,
but has the right token to rate,
he should be able to.

opw-673231
2016-03-30 12:06:18 +02:00
Martin Trigaux c298cf3250 [MERGE] Forward port of 9.0 up to 7892d99f 2015-12-18 16:15:08 +01:00
Thibault Delavallée 7a3ad6ba4c [FIX] rating: reuse ratings from the same customer
Otherwise Micheline ratings will be overridden by Raoul ones.
2015-12-14 17:10:49 +01:00
Martin Trigaux b776d66d85 [FIX] all: ressource -> resource
Courtesy of Kris Krnacs
2015-10-01 10:54:04 +02:00
Jérome Maes a960eb9ff5 [IMP] rating : add generic star widget
- star widget and rating card to post and display rating
- Linked rating.rating to mail.message
- method to extract more statistics about the rating of an object.
2015-08-27 09:36:35 +02:00
Jérome Maes 63e5341081 [FIX] im_livechat, rating : add a cron in im_livechat to delete empty anonymous sessions. And change the res_name of a rating record for im_chat.session : keep the same notation as in reporting instead of uuid. 2015-03-05 16:31:18 +01:00
Jérome Maes 283868bc5f [IMP] rating, rating_project, rating_project_issue : add 'auto validation kanban state' option. This will modify the kanban state according customer feedback. Require some change : notify by mail the follower when rating, and better sudo usage. Also update wrong code comments. 2015-02-12 13:29:14 +01:00
Jérome Maes b11e24c726 [ADD] rating : base rating module contains a mixin and the meta model rating with graph and kanban views 2015-01-08 12:28:22 +01:00