Remove sql injection problem
[odoo/odoo.git] / bin / addons / base / res / res_company.py
1 # -*- coding: utf-8 -*-
2 ##############################################################################
3 #    
4 #    OpenERP, Open Source Management Solution
5 #    Copyright (C) 2004-2009 Tiny SPRL (<http://tiny.be>).
6 #
7 #    This program is free software: you can redistribute it and/or modify
8 #    it under the terms of the GNU Affero General Public License as
9 #    published by the Free Software Foundation, either version 3 of the
10 #    License, or (at your option) any later version.
11 #
12 #    This program is distributed in the hope that it will be useful,
13 #    but WITHOUT ANY WARRANTY; without even the implied warranty of
14 #    MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.  See the
15 #    GNU Affero General Public License for more details.
16 #
17 #    You should have received a copy of the GNU Affero General Public License
18 #    along with this program.  If not, see <http://www.gnu.org/licenses/>.     
19 #
20 ##############################################################################
21
22 from osv import fields,osv
23 import os
24 import tools
25
26 class res_company(osv.osv):
27     _name = "res.company"
28
29     _columns = {
30         'name': fields.char('Company Name', size=64, required=True),
31         'parent_id': fields.many2one('res.company', 'Parent Company', select=True),
32         'child_ids': fields.one2many('res.company', 'parent_id', 'Child Companies'),
33         'partner_id': fields.many2one('res.partner', 'Partner', required=True),
34         'rml_header1': fields.char('Report Header', size=200),
35         'rml_footer1': fields.char('Report Footer 1', size=200),
36         'rml_footer2': fields.char('Report Footer 2', size=200),
37         'rml_header' : fields.text('RML Header'),
38         'rml_header2' : fields.text('RML Internal Header'),
39         'logo' : fields.binary('Logo'),
40         'currency_id': fields.many2one('res.currency', 'Currency', required=True),
41     }
42     
43     def _get_child_ids(self, cr, uid, uid2, context={}):
44         company = self.pool.get('res.users').company_get(cr, uid, uid2)
45         ids = self._get_company_children(cr, uid, company)
46         return ids
47
48     def _get_company_children(self, cr, uid=None, company=None):
49         if not company:
50             return []
51         ids =  self.search(cr, uid, [('parent_id','child_of',[company])])
52         return ids
53     _get_company_children = tools.cache()(_get_company_children)
54
55     def _get_partner_hierarchy(self, cr, uid, company_id, context={}):
56         if company_id:
57             parent_id = self.browse(cr, uid, company_id)['parent_id']
58             if parent_id:
59                 return self._get_partner_hierarchy(cr, uid, parent_id.id, context)
60             else:
61                 return self._get_partner_descendance(cr, uid, company_id, [], context)
62         return []
63
64     def _get_partner_descendance(self, cr, uid, company_id, descendance, context={}):
65         descendance.append(self.browse(cr, uid, company_id).partner_id.id)
66         for child_id in self._get_company_children(cr, uid, company_id):
67             if child_id != company_id:
68                 descendance = self._get_partner_descendance(cr, uid, child_id, descendance)
69         return descendance
70
71     #
72     # This function restart the cache on the _get_company_children method
73     #
74     def cache_restart(self, cr):
75         self._get_company_children.clear_cache(cr.dbname)
76
77     def create(self, cr, *args, **argv):
78         self.cache_restart(cr)
79         return super(res_company, self).create(cr, *args, **argv)
80
81     def write(self, cr, *args, **argv):
82         self.cache_restart(cr)
83         # Restart the cache on the company_get method
84         self.pool.get('ir.rule').domain_get.clear_cache(cr.dbname)
85         return super(res_company, self).write(cr, *args, **argv)
86
87     def _get_euro(self, cr, uid, context={}):
88         try:
89             return self.pool.get('res.currency').search(cr, uid, [])[0]
90         except:
91             return False
92     
93     def _check_recursion(self, cr, uid, ids):
94         level = 100
95         while len(ids):
96             cr.execute('select distinct parent_id from res_company where id in ('+','.join(map(str, ids))+')')
97             ids = filter(None, map(lambda x:x[0], cr.fetchall()))
98             if not level:
99                 return False
100             level -= 1
101         return True
102     
103     def _get_header2(self,cr,uid,ids):
104         return """
105         <header>
106         <pageTemplate>
107         <frame id="first" x1="1.3cm" y1="1.5cm" width="18.4cm" height="26.5cm"/>
108         <pageGraphics>
109         <fill color="black"/>
110         <stroke color="black"/>
111         <setFont name="Helvetica" size="8"/>
112         <drawString x="1.3cm" y="28.3cm"> [[ formatLang(time.strftime("%Y-%m-%d"), date=True) ]]  [[ time.strftime("%H:%M") ]]</drawString>
113         <setFont name="Helvetica-Bold" size="10"/>
114         <drawString x="9.8cm" y="28.3cm">[[ company.partner_id.name ]]</drawString>
115         <setFont name="Helvetica" size="8"/>
116         <drawRightString x="19.7cm" y="28.3cm"><pageNumber/> /  </drawRightString>
117         <drawString x="19.8cm" y="28.3cm"><pageCount/></drawString>
118         <stroke color="#000000"/>
119         <lines>1.3cm 28.1cm 20cm 28.1cm</lines>
120         </pageGraphics>
121         </pageTemplate>
122 </header>"""
123     def _get_header(self,cr,uid,ids):
124         try :
125             return tools.file_open(os.path.join('base', 'report', 'corporate_rml_header.rml')).read()
126         except:
127             return """
128     <header>
129     <pageTemplate>
130         <frame id="first" x1="1.3cm" y1="2.5cm" height="23.0cm" width="19cm"/>
131         <pageGraphics>
132             <!-- You Logo - Change X,Y,Width and Height -->
133         <image x="1.3cm" y="27.6cm" height="40.0" >[[company.logo]]</image>
134             <setFont name="Helvetica" size="8"/>
135             <fill color="black"/>
136             <stroke color="black"/>
137             <lines>1.3cm 27.7cm 20cm 27.7cm</lines>
138
139             <drawRightString x="20cm" y="27.8cm">[[ company.rml_header1 ]]</drawRightString>
140
141
142             <drawString x="1.3cm" y="27.2cm">[[ company.partner_id.name ]]</drawString>
143             <drawString x="1.3cm" y="26.8cm">[[ company.partner_id.address and company.partner_id.address[0].street or  '' ]]</drawString>
144             <drawString x="1.3cm" y="26.4cm">[[ company.partner_id.address and company.partner_id.address[0].zip or '' ]] [[ company.partner_id.address and company.partner_id.address[0].city or '' ]] - [[ company.partner_id.address and company.partner_id.address[0].country_id and company.partner_id.address[0].country_id.name  or '']]</drawString>
145             <drawString x="1.3cm" y="26.0cm">Phone:</drawString>
146             <drawRightString x="7cm" y="26.0cm">[[ company.partner_id.address and company.partner_id.address[0].phone or '' ]]</drawRightString>
147             <drawString x="1.3cm" y="25.6cm">Mail:</drawString>
148             <drawRightString x="7cm" y="25.6cm">[[ company.partner_id.address and company.partner_id.address[0].email or '' ]]</drawRightString>
149             <lines>1.3cm 25.5cm 7cm 25.5cm</lines>
150
151             <!--page bottom-->
152
153             <lines>1.2cm 2.15cm 19.9cm 2.15cm</lines>
154
155             <drawCentredString x="10.5cm" y="1.7cm">[[ company.rml_footer1 ]]</drawCentredString>
156             <drawCentredString x="10.5cm" y="1.25cm">[[ company.rml_footer2 ]]</drawCentredString>
157             <drawCentredString x="10.5cm" y="0.8cm">Contact : [[ user.name ]] - Page: <pageNumber/></drawCentredString>
158         </pageGraphics>
159     </pageTemplate>
160 </header>"""
161     _defaults = {
162         'currency_id': _get_euro,
163         'rml_header':_get_header,
164         'rml_header2': _get_header2
165     }
166
167     _constraints = [
168         (_check_recursion, 'Error! You can not create recursive companies.', ['parent_id'])
169     ]
170
171 res_company()
172
173
174 # vim:expandtab:smartindent:tabstop=4:softtabstop=4:shiftwidth=4:
175