-
- Downloads
[FIX] mail: prevent use of private addresses for followers, recipients,...
- Connect with Admin
- Go to Contacts, edit himself by adding a Private Address
- Create an Internal User without "Access to Private Addresses" right (i.e. User X)
- Go to any app implementing chatter (i.e. Sales)
- Create a SO
- Add the created Private Address as follower
- Make sure User X can access the record (i.e. Sales: Administrator)
- Connect with User X and open the SO
An Access Error is raised while trying to fetch data about the followers.
This commit prevents to:
- add a private address as follower of a record
- add a private address as Recipient in full composer
- propose private addresses when adding a mention to a partner
opw-2428936
closes odoo/odoo#65933
Task-id: 2463622
Signed-off-by:
Thibault Delavallee (tde) <tde@openerp.com>
Showing
- addons/mail/models/mail_followers.py 1 addition, 1 deletionaddons/mail/models/mail_followers.py
- addons/mail/models/mail_thread.py 2 additions, 2 deletionsaddons/mail/models/mail_thread.py
- addons/mail/models/res_partner.py 1 addition, 1 deletionaddons/mail/models/res_partner.py
- addons/mail/wizard/invite.py 2 additions, 1 deletionaddons/mail/wizard/invite.py
- addons/mail/wizard/mail_compose_message.py 2 additions, 1 deletionaddons/mail/wizard/mail_compose_message.py
- addons/test_mail/tests/test_mail_followers.py 15 additions, 0 deletionsaddons/test_mail/tests/test_mail_followers.py
Loading