Skip to content
Snippets Groups Projects
Commit 6164550d authored by Olivier Dony's avatar Olivier Dony
Browse files

[FIX] res_users: email function field should work even without access rights...

[FIX] res_users: email function field should work even without access rights on res.partner.address - also dropped the context to avoid potential security issues as we run these actions in superuser mode

bzr revid: odo@openerp.com-20100709071526-brd9serfixj5eems
parent 49f91e91
Branches
Tags
No related merge requests found
......@@ -207,9 +207,9 @@ class users(osv.osv):
address_obj = self.pool.get('res.partner.address')
for user in self.browse(cr, uid, ids, context=context):
if user.address_id:
address_obj.write(cr, uid, user.address_id.id, {'email': value or None}, context=context)
address_obj.write(cr, 1, user.address_id.id, {'email': value or None}) # no context to avoid potential security issues as superuser
else:
address_id = address_obj.create(cr, uid, {'name': user.name, 'email': value or None}, context=context)
address_id = address_obj.create(cr, 1, {'name': user.name, 'email': value or None}) # no context to avoid potential security issues as superuser
self.write(cr, uid, ids, {'address_id': address_id}, context)
return True
......
0% Loading or .
You are about to add 0 people to the discussion. Proceed with caution.
Please register or to comment