-
- Downloads
[FIX] payment,sale: fix access error when using the capture or void buttons
Before this commit, users may saw the capture and void buttons but couldn't use them. As capture or void actions need to access acquirer-related fields, these actions are now sudoed to allow any users that see the button to use it. The access rules and rights are also checked before executing the action to avoid abusive RPC calls. task-2785144 closes odoo/odoo#91923 X-original-commit: 2e351d6ff9b7f72b486e83c827ff6e15a05c3331 Signed-off-by:Valentin Chevalier <vcr@odoo.com> Signed-off-by:
Antoine Vandevenne (anv) <anv@odoo.com>
Showing
- addons/payment/models/account_move.py 10 additions, 2 deletionsaddons/payment/models/account_move.py
- addons/payment/models/payment_transaction.py 6 additions, 2 deletionsaddons/payment/models/payment_transaction.py
- addons/payment/utils.py 13 additions, 0 deletionsaddons/payment/utils.py
- addons/sale/models/sale_order.py 10 additions, 2 deletionsaddons/sale/models/sale_order.py
Loading
Please register or sign in to comment