Julien (juc) Castiaux
e65446fe42
To reproduce: 1) Enable multi-company 2) Create two companies: c1, c2 3) Create two users: bob in c1 and alice in c2 4) Install subscription 5) Remove the ir.rule that forbid users from accessing subscriptions made in other companies: "Subscription multi-company" 6) Using u1, create a new subscription in c1 7) Using u2, follow the chatter of the newly created subscription allowing the user to post messages/log notes. 8) Using u2, send a message with an attachment. Access Error. The problem raises only for the **first** attachment. That attchement is written on the record as the main attachment thus raises an error if the user doesn't have write access. There is no problem to add attachment to any following record or when the user has write access on the model. If the user doesn't have access to the chatter, he is blocked before accessing the write thus it is safe to sudo it. opw-1915606 closes odoo/odoo#30659
Odoo
Odoo is a suite of web based open source business apps.
The main Odoo Apps include an Open Source CRM, Website Builder, eCommerce, Warehouse Management, Project Management, Billing & Accounting, Point of Sale, Human Resources, Marketing, Manufacturing, Purchase Management, ...
Odoo Apps can be used as stand-alone applications, but they also integrate seamlessly so you get a full-featured Open Source ERP when you install several Apps.
Getting started with Odoo
For a standard installation please follow the Setup instructions from the documentation.
Then follow the developer tutorials