[IMP] project: avoid access rights issue when reading time_mode (uom) for fields_view_get
authorOlivier Dony <odo@openerp.com>
Mon, 25 Oct 2010 14:54:45 +0000 (16:54 +0200)
committerOlivier Dony <odo@openerp.com>
Mon, 25 Oct 2010 14:54:45 +0000 (16:54 +0200)
bzr revid: odo@openerp.com-20101025145445-ccgvic2uyqd50hi6

addons/project/project.py

index 294c711..6c9f66d 100644 (file)
@@ -483,7 +483,10 @@ class task(osv.osv):
 
     def fields_view_get(self, cr, uid, view_id=None, view_type='form', context=None, toolbar=False, submenu=False):
         users_obj = self.pool.get('res.users')
-        obj_tm = users_obj.browse(cr, uid, uid, context).company_id.project_time_mode_id
+
+        # read uom as admin to avoid access rights issues, e.g. for portal/share users,
+        # this should be safe (no context passed to avoid side-effects)
+        obj_tm = users_obj.browse(cr, 1, uid).company_id.project_time_mode_id
         tm = obj_tm and obj_tm.name or 'Hours'
 
         res = super(task, self).fields_view_get(cr, uid, view_id, view_type, context, toolbar, submenu=submenu)