From 4b700070adec70883d88c433b84f5395260aa3c9 Mon Sep 17 00:00:00 2001 From: David Beal Date: Fri, 5 Apr 2019 16:37:34 +0200 Subject: [PATCH 1/2] FIX security issue --- agreement/security/ir.model.access.csv | 1 + 1 file changed, 1 insertion(+) diff --git a/agreement/security/ir.model.access.csv b/agreement/security/ir.model.access.csv index d3d9063c..54dd4f50 100644 --- a/agreement/security/ir.model.access.csv +++ b/agreement/security/ir.model.access.csv @@ -1,2 +1,3 @@ id,name,model_id:id,group_id:id,perm_read,perm_write,perm_create,perm_unlink access_agreement_read,Read access on agreement to Employees,model_agreement,base.group_user,1,0,0,0 +access_agreement_full,Full access on agreement grp,model_agreement,base.group_no_one,1,1,1,1 \ No newline at end of file From d9b69a253cac29056fc2e67cb470da79f590e658 Mon Sep 17 00:00:00 2001 From: David Beal Date: Fri, 5 Apr 2019 17:36:18 +0200 Subject: [PATCH 2/2] FIX details --- agreement/models/agreement.py | 5 ++--- 1 file changed, 2 insertions(+), 3 deletions(-) diff --git a/agreement/models/agreement.py b/agreement/models/agreement.py index dc975526..b09b4dbc 100644 --- a/agreement/models/agreement.py +++ b/agreement/models/agreement.py @@ -16,8 +16,7 @@ class Agreement(models.Model): domain=[('parent_id', '=', False)]) company_id = fields.Many2one( 'res.company', string='Company', - default=lambda self: self.env['res.company']._company_default_get( - 'agreement')) + default=lambda self: self.env['res.company']._company_default_get()) active = fields.Boolean(default=True) signature_date = fields.Date() start_date = fields.Date() @@ -28,7 +27,7 @@ class Agreement(models.Model): for agr in self: name = agr.name if agr.code: - name = u'[%s] %s' % (agr.code, agr.name) + name = '[%s] %s' % (agr.code, agr.name) res.append((agr.id, name)) return res