From: Olivier Dony <odo@openerp.com>
Date: Mon, 25 Oct 2010 14:54:45 +0000 (+0200)
Subject: [IMP] project: avoid access rights issue when reading time_mode (uom) for fields_view_get
X-Git-Tag: 6.0.0-rc2-addons~159^2~47
X-Git-Url: http://git.inspyration.org/?a=commitdiff_plain;h=3572ed909a2294a876fa6329593d976dd94594bb;p=odoo%2Fodoo.git

[IMP] project: avoid access rights issue when reading time_mode (uom) for fields_view_get

bzr revid: odo@openerp.com-20101025145445-ccgvic2uyqd50hi6
---

diff --git a/addons/project/project.py b/addons/project/project.py
index 294c711..6c9f66d 100644
--- a/addons/project/project.py
+++ b/addons/project/project.py
@@ -483,7 +483,10 @@ class task(osv.osv):
 
     def fields_view_get(self, cr, uid, view_id=None, view_type='form', context=None, toolbar=False, submenu=False):
         users_obj = self.pool.get('res.users')
-        obj_tm = users_obj.browse(cr, uid, uid, context).company_id.project_time_mode_id
+
+        # read uom as admin to avoid access rights issues, e.g. for portal/share users,
+        # this should be safe (no context passed to avoid side-effects)
+        obj_tm = users_obj.browse(cr, 1, uid).company_id.project_time_mode_id
         tm = obj_tm and obj_tm.name or 'Hours'
 
         res = super(task, self).fields_view_get(cr, uid, view_id, view_type, context, toolbar, submenu=submenu)