Skip to content
Snippets Groups Projects
Commit 04c2bb02 authored by bve-odoo's avatar bve-odoo
Browse files

[FIX] account_edi_ubl_cii: allow none-admin to create xml


Steps to reproduce on fresh 15.0:
Connected as Admin:
1. Install l10n_lu_peppol_id,
2. Modify the field 'edi_format_ids'
on a journal (here will be on customer invoices)
to the value 'Peppol BIS Billing 3.0'
3. Invoice a product using this journal and confirm it.
> The XML will be generated and attached to the move.
The mimetype of this attachement will be application/xml

If you do the same step 3 with a user that does not have
the write access right to the model ir_ui_view
(see _check_contents in base), the attachment will be
of type text/plain.

The issue that this trigger, is that the email going out
will have the wrong Content-Type for the attachments.
Which will lead to incorrect management on other provider.

We can bypass the security here as the XML is generated
by Odoo.

opw-3263542

closes odoo/odoo#124709

X-original-commit: 9ae7fdb8
Signed-off-by: default avatarWilliam André (wan) <wan@odoo.com>
parent b54b34e6
Branches
Tags
Loading
Loading
0% Loading or .
You are about to add 0 people to the discussion. Proceed with caution.
Please register or to comment