[FIX] mail: res_users: browse -> read to have partner_id, to avoid access rights...
authorThibault Delavallée <tde@openerp.com>
Wed, 17 Oct 2012 14:19:58 +0000 (16:19 +0200)
committerThibault Delavallée <tde@openerp.com>
Wed, 17 Oct 2012 14:19:58 +0000 (16:19 +0200)
bzr revid: tde@openerp.com-20121017141958-kvo8q82rltfhsfl8

addons/mail/res_users.py

index f870604..51d5e92 100644 (file)
@@ -116,7 +116,7 @@ class res_users(osv.Model):
             context['thread_model'] = 'res.partner'
         if isinstance(thread_id, (list, tuple)):
             thread_id = thread_id[0]
-        partner_id = self.pool.get('res.users').browse(cr, uid, thread_id).partner_id.id
+        partner_id = self.pool.get('res.users').read(cr, uid, thread_id, ['partner_id'], context=context)['partner_id'][0]
         return self.pool.get('res.partner').message_post(cr, uid, partner_id, context=context, **kwargs)
 
     def message_update(self, cr, uid, ids, msg_dict, update_vals=None, context=None):