Jeremy Kersten
3eaca8ba16
Missing sudo for portal user on Invoice list. When portal user go to his portal, to display the list of the invoices we compute the url via get_portal_url that will call this method `is_purchase_document` and got a traceback due to missing permission. Now we call it with sudo to bypass the Access Right error without leaking any extra information since it is casted as boolean later. `get_portal_url` -> `record.access_url `-> `_compute_access_url` account:account.move `def _compute_access_url` -> `filter(is_invoice)` account:account.move `def is_invoice` -> `is_sale_document or is_purchase_document` hr_expense:account.move `def is_purchase_document` -> `return bool(self.expense_sheet_id) or super()` closes odoo/odoo#114424 X-original-commit: 01a91419f906bd8d9248e6376a0246b667218ca2 Signed-off-by: Jérémy Kersten <jke@odoo.com>
Odoo
Odoo is a suite of web based open source business apps.
The main Odoo Apps include an Open Source CRM, Website Builder, eCommerce, Warehouse Management, Project Management, Billing & Accounting, Point of Sale, Human Resources, Marketing, Manufacturing, ...
Odoo Apps can be used as stand-alone applications, but they also integrate seamlessly so you get a full-featured Open Source ERP when you install several Apps.
Getting started with Odoo
For a standard installation please follow the Setup instructions from the documentation.
To learn the software, we recommend the Odoo eLearning, or Scale-up, the business game. Developers can start with the developer tutorials