From b45987991686aa9684e79213a6a61f7d062eada0 Mon Sep 17 00:00:00 2001 From: =?UTF-8?q?R=C3=A9my=20Taymans?= Date: Sun, 10 Jun 2018 16:58:20 +0200 Subject: [PATCH] [FIX] emc_document: Explicit usage of sudo Always use sudo before each query. --- .../controllers/main.py | 16 ++++++++-------- 1 file changed, 8 insertions(+), 8 deletions(-) diff --git a/easy_my_coop_website_document/controllers/main.py b/easy_my_coop_website_document/controllers/main.py index 7c27e19..2d6a6c4 100644 --- a/easy_my_coop_website_document/controllers/main.py +++ b/easy_my_coop_website_document/controllers/main.py @@ -18,10 +18,10 @@ class DocumentWebsite(http.Controller): @http.route('/documents/', auth='public', website=True) def get_document(self, oid=-1): """Render a http response for a document""" - document_mgr = request.env['easy_my_coop.document'].sudo() - doc = document_mgr.browse(oid) - ir_http_mgr = request.env['ir.http'].sudo() - status, headers, content = ir_http_mgr.binary_content( + document_mgr = request.env['easy_my_coop.document'] + doc = document_mgr.sudo().browse(oid) + ir_http_mgr = request.env['ir.http'] + status, headers, content = ir_http_mgr.sudo().binary_content( model=doc._name, id=oid, field='document', @@ -120,19 +120,19 @@ class DocumentWebsite(http.Controller): def _data_tree(self, category=None): """Return a tree with categories and documents in it""" - category_mgr = request.env['easy_my_coop.document.category'].sudo() - document_mgr = request.env['easy_my_coop.document'].sudo() + category_mgr = request.env['easy_my_coop.document.category'] + document_mgr = request.env['easy_my_coop.document'] if category: categories = category.child_ids.sorted( key=lambda r: r.name ) documents = category.document_ids else: - categories = category_mgr.search( + categories = category_mgr.sudo().search( [('parent_id', '=', False)], order="name" ) - documents = document_mgr.search( + documents = document_mgr.sudo().search( [('category', '=', False)] ) if categories.ids: