Christophe Matthieu
4d79a1ff58
[FIX] payment: prevent access error for manual payments
...
Rev. cf1df16aea introduced new callback
fields with restricted access. The lazy hash generation in create() was
however causing access errors for manual transactions created by users
who are not administrators (e.g. Accountants).
Those manual transactions do not typically need a callback, but checking
the presence of the callback requires a limited sudo() context.
Similarly, the execute_callback() method may be called for a manual,
non-admin transaction, and should not do anything if there is no
callback, instead of crashing with an AccessError.
The generation of the hash and execution of the callback should be done
with a normal environment, though, as these must only be used for
transactions run by the system.
opw-747536
2017-06-26 15:09:13 +02:00
..
2017-06-26 14:04:04 +02:00
2017-06-25 07:07:03 +02:00
2017-06-26 10:13:25 +02:00
2017-06-26 10:49:30 +02:00
2017-06-26 10:13:25 +02:00
2017-06-26 10:13:25 +02:00
2017-06-26 10:13:25 +02:00
2017-06-26 10:49:30 +02:00
2017-06-26 10:13:25 +02:00
2017-06-26 10:13:25 +02:00
2017-06-26 10:49:30 +02:00
2017-06-26 10:49:30 +02:00
2017-06-26 10:49:30 +02:00
2017-06-18 04:27:20 +02:00
2017-06-26 10:13:25 +02:00
2017-06-26 10:13:25 +02:00
2017-06-26 10:49:30 +02:00
2017-06-26 10:13:25 +02:00
2017-06-26 14:04:04 +02:00
2017-06-25 07:07:03 +02:00
2017-06-18 07:07:11 +02:00
2017-06-26 10:13:25 +02:00
2017-06-26 10:13:25 +02:00
2017-06-18 04:27:20 +02:00
2017-06-26 10:49:30 +02:00
2017-06-26 10:13:25 +02:00
2017-06-26 10:13:25 +02:00
2017-06-26 10:13:25 +02:00
2017-06-26 10:13:25 +02:00
2017-06-26 10:13:25 +02:00
2017-06-26 10:49:30 +02:00
2017-06-25 04:27:29 +02:00
2017-06-26 14:04:04 +02:00
2017-06-26 10:13:25 +02:00
2017-06-26 10:13:25 +02:00
2017-06-26 10:49:30 +02:00
2017-06-26 10:13:25 +02:00
2017-06-26 13:00:18 +02:00
2017-06-26 10:49:30 +02:00
2017-06-26 10:13:25 +02:00
2017-06-26 10:49:30 +02:00
2017-06-26 10:49:30 +02:00
2017-06-26 10:13:25 +02:00
2017-06-26 10:13:25 +02:00
2017-06-26 10:49:30 +02:00
2017-06-26 10:13:25 +02:00
2017-06-26 10:13:25 +02:00
2017-06-26 10:49:30 +02:00
2017-06-26 10:13:25 +02:00
2017-06-26 10:49:30 +02:00
2017-06-26 10:49:30 +02:00
2017-06-25 04:27:29 +02:00
2017-06-26 10:13:25 +02:00
2017-06-26 12:43:31 +02:00
2017-06-25 07:07:03 +02:00
2017-06-26 12:43:31 +02:00
2017-06-26 10:13:25 +02:00
2017-06-26 10:49:30 +02:00
2017-06-18 07:07:11 +02:00
2017-06-26 10:13:25 +02:00
2017-06-25 04:27:29 +02:00
2017-06-26 10:49:30 +02:00
2017-06-26 10:13:25 +02:00
2017-06-26 10:13:25 +02:00
2017-06-26 10:13:25 +02:00
2017-06-26 10:13:25 +02:00
2017-06-26 10:13:25 +02:00
2017-06-26 10:13:25 +02:00
2017-06-26 10:13:25 +02:00
2017-06-26 10:13:25 +02:00
2017-06-26 10:13:25 +02:00
2017-06-26 10:13:25 +02:00
2017-06-26 10:13:25 +02:00
2017-06-26 14:04:04 +02:00
2017-06-26 10:13:25 +02:00
2017-06-26 10:13:25 +02:00
2017-06-26 10:13:25 +02:00
2017-06-26 10:13:25 +02:00
2017-06-26 10:13:25 +02:00
2017-06-26 10:13:25 +02:00
2017-06-26 10:13:25 +02:00
2017-06-26 13:00:18 +02:00
2017-06-15 17:52:49 +02:00
2017-06-26 10:13:25 +02:00
2017-06-26 10:13:25 +02:00
2017-06-26 10:13:25 +02:00
2017-06-26 10:13:25 +02:00
2017-06-26 10:13:25 +02:00
2017-06-26 12:43:31 +02:00
2017-06-26 10:13:25 +02:00
2017-06-26 10:13:25 +02:00
2017-06-26 10:13:25 +02:00
2017-06-26 10:13:25 +02:00
2017-06-26 10:13:25 +02:00
2017-06-26 10:13:25 +02:00
2017-06-26 10:13:25 +02:00
2017-06-26 10:13:25 +02:00
2017-06-26 10:13:25 +02:00
2017-06-26 10:13:25 +02:00
2017-06-26 10:13:25 +02:00
2017-06-26 10:13:25 +02:00
2017-06-26 10:13:25 +02:00
2017-06-26 10:13:25 +02:00
2017-06-26 10:13:25 +02:00
2017-06-26 10:13:25 +02:00
2017-06-26 10:13:25 +02:00
2017-06-26 10:13:25 +02:00
2017-06-26 10:13:25 +02:00
2017-06-26 10:13:25 +02:00
2017-06-26 10:13:25 +02:00
2017-06-26 10:13:25 +02:00
2017-06-26 10:13:25 +02:00
2017-06-26 10:13:25 +02:00
2017-06-26 14:04:04 +02:00
2017-06-26 10:49:30 +02:00
2017-06-26 10:49:30 +02:00
2017-06-26 10:13:25 +02:00
2017-06-26 14:04:04 +02:00
2017-06-26 10:13:25 +02:00
2017-06-26 14:04:04 +02:00
2017-06-26 10:13:25 +02:00
2017-06-26 10:49:30 +02:00
2017-06-26 10:13:25 +02:00
2017-06-26 10:13:25 +02:00
2017-06-26 10:13:25 +02:00
2017-06-26 10:13:25 +02:00
2017-06-26 15:09:13 +02:00
2017-06-26 10:13:25 +02:00
2017-06-26 14:04:04 +02:00
2017-06-26 10:13:25 +02:00
2017-06-26 11:19:46 +02:00
2017-06-26 10:13:25 +02:00
2017-06-18 04:27:20 +02:00
2017-06-26 10:13:25 +02:00
2017-06-26 11:19:46 +02:00
2017-06-26 10:13:25 +02:00
2017-06-26 14:04:04 +02:00
2017-06-26 10:49:30 +02:00
2017-06-26 10:13:25 +02:00
2017-06-25 04:27:29 +02:00
2017-06-26 10:13:25 +02:00
2017-06-26 10:49:30 +02:00
2017-06-26 10:13:25 +02:00
2017-06-26 10:13:25 +02:00
2017-06-26 10:49:30 +02:00
2017-06-26 10:49:30 +02:00
2017-06-26 14:04:04 +02:00
2017-06-26 10:13:25 +02:00
2017-06-26 10:13:25 +02:00
2017-06-26 10:13:25 +02:00
2017-06-26 10:13:25 +02:00
2017-06-26 10:49:30 +02:00
2017-06-26 10:13:25 +02:00
2017-06-26 10:13:25 +02:00
2017-06-26 14:04:04 +02:00
2017-06-18 04:27:20 +02:00
2017-06-26 14:04:04 +02:00
2017-06-26 14:04:04 +02:00
2017-06-26 10:13:25 +02:00
2017-06-26 10:13:25 +02:00
2017-06-26 14:04:04 +02:00
2017-06-26 10:13:25 +02:00
2017-06-26 13:00:18 +02:00
2017-06-26 14:04:04 +02:00
2017-06-26 10:13:25 +02:00
2017-06-26 13:00:18 +02:00
2017-06-26 10:49:30 +02:00
2017-06-26 10:13:25 +02:00
2017-06-18 04:27:20 +02:00
2017-06-26 10:49:30 +02:00
2017-06-26 10:49:30 +02:00
2017-06-26 10:13:25 +02:00
2017-06-26 14:04:04 +02:00
2017-06-26 10:49:30 +02:00
2017-06-26 10:13:25 +02:00
2017-06-26 10:13:25 +02:00
2017-06-26 10:13:25 +02:00
2017-06-26 10:13:25 +02:00
2017-06-26 10:49:30 +02:00
2017-06-18 04:27:20 +02:00
2017-06-26 10:13:25 +02:00
2017-06-26 10:13:25 +02:00
2017-06-26 10:13:25 +02:00
2017-06-26 14:04:04 +02:00
2017-06-26 10:13:25 +02:00
2017-06-26 10:13:25 +02:00
2017-06-26 14:04:04 +02:00
2017-06-26 11:25:54 +02:00
2017-06-26 11:25:54 +02:00
2017-06-26 11:25:54 +02:00
2017-06-26 11:25:54 +02:00
2017-06-26 11:25:54 +02:00
2017-06-26 14:04:04 +02:00
2017-06-26 11:25:54 +02:00
2017-06-26 11:25:54 +02:00
2017-06-26 11:25:54 +02:00
2017-06-26 11:25:54 +02:00
2017-06-26 11:25:54 +02:00
2017-06-26 11:25:54 +02:00
2017-06-26 14:04:04 +02:00
2017-06-26 11:25:54 +02:00
2017-06-26 11:25:54 +02:00
2017-06-26 11:25:54 +02:00
2017-06-26 11:25:54 +02:00
2017-06-26 11:25:54 +02:00
2017-06-26 11:25:54 +02:00
2017-06-26 11:25:54 +02:00
2017-06-26 11:25:54 +02:00
2017-06-26 11:25:54 +02:00
2017-06-26 11:25:54 +02:00
2017-06-26 11:25:54 +02:00
2017-06-26 11:25:54 +02:00
2017-06-26 11:25:54 +02:00
2017-06-26 11:25:54 +02:00
2017-06-26 11:25:54 +02:00
2017-06-26 11:25:54 +02:00
2017-06-26 14:04:04 +02:00
2017-06-26 11:25:54 +02:00
2017-06-26 11:25:54 +02:00
2017-06-26 11:25:54 +02:00
2017-06-26 11:25:54 +02:00
2017-06-26 13:00:18 +02:00
2017-06-26 11:25:54 +02:00
2017-06-26 11:25:54 +02:00
2017-06-26 11:25:54 +02:00
2017-06-26 11:25:54 +02:00
2017-06-26 11:25:54 +02:00
2017-06-26 11:25:54 +02:00
2017-06-26 11:25:54 +02:00
2017-06-26 11:25:54 +02:00
2017-06-26 11:25:54 +02:00