Thibault Delavallée
84e2d6ea55
'alias_user_id' field allows to set a user when creating records through the
mail gateway. This is however quite wrong and eases spoofing. The alias owner
is not the creator of any record, nor responsible.
Current possible ways of being owner / responsible of records created through
the mailgateway
* when you send an email to an alias: if you are recognized you are already
set as creating user and logged message author;
* it is possible to use alias_defaults notably to set fields like 'user_id'
if you want to be notified / responsible of records created through this
specific alias;
Those usages are therefore sufficient, no need to have another way to spoof
users. Moreover it is hidden in technical view of aliases, no model allows
to configure it by default. Moreover since odoo/odoo@3edf181 no default
value is given to alias_user_id as it adds more (ACLs / creator) issues than
really helping setting up mail gateway flows.
Task-3453482
Prepares Task-36879 (Mail: Multi-Domain Aliases)
closes odoo/odoo#138213
Related: odoo/upgrade#5259
Related: odoo/enterprise#48692
Signed-off-by: Thibault Delavallee (tde) <tde@openerp.com>
115 lines
5.9 KiB
XML
115 lines
5.9 KiB
XML
<?xml version="1.0"?>
|
|
<odoo>
|
|
<data>
|
|
|
|
<!-- Alias Form View -->
|
|
<record model="ir.ui.view" id="mail_alias_view_form">
|
|
<field name="name">mail.alias.view.form</field>
|
|
<field name="model">mail.alias</field>
|
|
<field name="arch" type="xml">
|
|
<form string="Alias">
|
|
<field name="alias_status" invisible="1"/>
|
|
<div invisible="alias_status != 'invalid'"
|
|
class="alert alert-danger text-center" role="alert">
|
|
The last message received on this alias has caused an error.
|
|
</div>
|
|
<sheet>
|
|
<div class="oe_button_box" name="button_box">
|
|
<button name="open_document" string="Open Document"
|
|
type="object" class="oe_link" icon="fa-sitemap"
|
|
invisible="not alias_model_id or alias_force_thread_id == 0"/>
|
|
<button name="open_parent_document"
|
|
type="object" class="oe_link" icon="fa-sitemap"
|
|
invisible="not alias_parent_model_id or alias_parent_thread_id == 0">
|
|
<div class="o_field_widget o_stat_info">
|
|
<span class="o_stat_text">Open Parent Document</span>
|
|
</div>
|
|
</button>
|
|
</div>
|
|
<div class="d-flex">
|
|
<h2 class="flex-grow-1"><field name="alias_name" class="oe_inline"/>@<field name="alias_domain" class="oe_inline"/></h2>
|
|
<field name="alias_status" widget="badge"
|
|
decoration-success="alias_status == 'valid'"
|
|
decoration-warning="alias_status == 'not_tested'"
|
|
decoration-danger="alias_status == 'invalid'"/>
|
|
</div>
|
|
<group>
|
|
<field name="alias_model_id"/>
|
|
<field name="alias_force_thread_id"/>
|
|
<field name="alias_defaults"/>
|
|
<field name="alias_contact"/>
|
|
<field name="alias_parent_model_id"/>
|
|
<field name="alias_parent_thread_id"/>
|
|
</group>
|
|
<label for="alias_bounced_content" invisible="alias_contact == 'everyone'"/>
|
|
<field name="alias_bounced_content" invisible="alias_contact == 'everyone'"/>
|
|
</sheet>
|
|
</form>
|
|
</field>
|
|
</record>
|
|
|
|
<!-- Alias List View -->
|
|
<record model="ir.ui.view" id="mail_alias_view_tree">
|
|
<field name="name">mail.alias.view.tree</field>
|
|
<field name="model">mail.alias</field>
|
|
<field name="arch" type="xml">
|
|
<tree string="Alias">
|
|
<field name="alias_name"/>
|
|
<field name="alias_model_id"/>
|
|
<field name="alias_force_thread_id" optional="hide"/>
|
|
<field name="alias_parent_model_id"/>
|
|
<field name="alias_parent_thread_id" optional="hide"/>
|
|
<field name="alias_defaults" optional="hide"/>
|
|
<field name="alias_contact"/>
|
|
<field name="alias_status" widget="badge"
|
|
decoration-success="alias_status == 'valid'"
|
|
decoration-warning="alias_status == 'not_tested'"
|
|
decoration-danger="alias_status == 'invalid'"/>
|
|
<button name="open_document" type="object"
|
|
string="Open Document" icon="fa-sitemap"
|
|
invisible="not alias_model_id or alias_force_thread_id == 0"/>
|
|
<button name="open_parent_document" type="object"
|
|
string="Open Owner" icon="fa-sitemap"
|
|
invisible="not alias_parent_model_id or alias_parent_thread_id == 0"/>
|
|
</tree>
|
|
</field>
|
|
</record>
|
|
|
|
<!-- Alias Search View -->
|
|
<record model="ir.ui.view" id="mail_alias_view_search">
|
|
<field name="name">mail.alias.view.search</field>
|
|
<field name="model">mail.alias</field>
|
|
<field name="arch" type="xml">
|
|
<search string="Search Alias">
|
|
<field name="alias_name"/>
|
|
<field name="alias_model_id"/>
|
|
<field name="create_uid"/>
|
|
<field name="alias_force_thread_id"/>
|
|
<field name="alias_parent_model_id"/>
|
|
<field name="alias_parent_thread_id"/>
|
|
<separator/>
|
|
<filter string="Active" name="active" domain="[('alias_name', '!=', False)]"/>
|
|
<group expand="0" string="Group By">
|
|
<filter string="Creator" name="groupby_create_uid"
|
|
context="{'group_by': 'create_uid'}"/>
|
|
<filter string="Document Model" name="groupby_alias_model_id"
|
|
context="{'group_by': 'alias_model_id'}"/>
|
|
<filter string="Container Model" name="groupby_alias_model_id"
|
|
context="{'group_by': 'alias_parent_model_id'}"/>
|
|
</group>
|
|
</search>
|
|
</field>
|
|
</record>
|
|
|
|
<record id="mail_alias_action" model="ir.actions.act_window">
|
|
<field name="name">Aliases</field>
|
|
<field name="res_model">mail.alias</field>
|
|
<field name="context">{
|
|
'search_default_active': True,
|
|
}
|
|
</field>
|
|
</record>
|
|
|
|
</data>
|
|
</odoo>
|