projects / odoo / odoo.git / commit
? search:
summary | shortlog | log | commit | commitdiff | tree
(parent: bd78042) | patch
[FIX] website_sale: Do not search and associate a company to the partner when an...
authorDenis Ledoux <dle@openerp.com>
Thu, 10 Apr 2014 10:58:04 +0000 (12:58 +0200)
committerDenis Ledoux <dle@openerp.com>
Thu, 10 Apr 2014 10:58:04 +0000 (12:58 +0200)
commit9c074a67a52b535261aefd199eb58ee1389069e1
treef195afc4c9eaa3fc2a99f399d25af28dcfabe909tree | snapshot
parentbd7804272b5b161b1e523570b750df619795766ccommit | diff
[FIX] website_sale: Do not search and associate a company to the partner when an order is validated
This can be regarded as a security leak: You can associate your partner to an existing company, which you maybe do not really belong, and therefore potentially access data which you are not authorized to see

Use street for the company name, street2 for the actual street, meanwhile

bzr revid: dle@openerp.com-20140410105804-am2xjmr09u3jk36r
addons/website_sale/controllers/main.py diff | blob | history
Unnamed repository; edit this file 'description' to name the repository.