Raphael Collet
a7445b4053
The API of `Registry` has been modified as follows: - `Registry(name)` returns the registry of the given database - `Registry.new(name)` forces the creation of a new `Registry` object - `Registry.delete(name)` discards the given registry - `Registry.delete_all()` discards all registries - `registry.setup_signaling()` initializes the signaling for `registry` - `registry.check_signaling()` returns an up-to-date `registry` - `registry.signal_registry_change()` notifies that `registry` has changed - `registry.signal_caches_change()` notifies potential cache invalidation
37 lines
1.3 KiB
Python
37 lines
1.3 KiB
Python
# -*- coding: utf-8 -*-
|
|
# Part of Odoo. See LICENSE file for full copyright and licensing details.
|
|
|
|
import odoo
|
|
from odoo import models, SUPERUSER_ID
|
|
from odoo.http import request
|
|
from odoo.api import Environment
|
|
|
|
from werkzeug.exceptions import BadRequest
|
|
|
|
|
|
class IrHttp(models.AbstractModel):
|
|
_inherit = 'ir.http'
|
|
|
|
@classmethod
|
|
def _auth_method_calendar(cls):
|
|
token = request.params['token']
|
|
dbname = request.params['db']
|
|
|
|
registry = odoo.registry(dbname)
|
|
error_message = False
|
|
with registry.cursor() as cr:
|
|
env = Environment(cr, SUPERUSER_ID, {})
|
|
|
|
attendee = env['calendar.attendee'].sudo().search([('access_token', '=', token)], limit=1)
|
|
if not attendee:
|
|
error_message = """Invalid Invitation Token."""
|
|
elif request.session.uid and request.session.login != 'anonymous':
|
|
# if valid session but user is not match
|
|
user = env['res.users'].sudo().browse(request.session.uid)
|
|
if attendee.partner_id != user.partner_id:
|
|
error_message = """Invitation cannot be forwarded via email. This event/meeting belongs to %s and you are logged in as %s. Please ask organizer to add you.""" % (attendee.email, user.email)
|
|
if error_message:
|
|
raise BadRequest(error_message)
|
|
|
|
return True
|