Xavier Morel
2afb5b43ef
* blacklist all fields by default * don't use blacklist in get_authorized_fields which is called to see if a field can be added to a form, instead only use it afterwards to see if the field can be written to by the formbuilder. That way formbuilder can whitelist fields which are actually added to forms on-demand resulting in a more secure interaction
11 lines
422 B
XML
11 lines
422 B
XML
<?xml version="1.0" encoding="utf-8"?>
|
|
<openerp>
|
|
<data>
|
|
<record id="project_issue.model_project_issue" model="ir.model">
|
|
<field name="website_form_default_field_id" ref="project_issue.field_project_issue_description" />
|
|
<field name="website_form_access">True</field>
|
|
<field name="website_form_label">Create an issue</field>
|
|
</record>
|
|
</data>
|
|
</openerp>
|