NeoAnd/knowledge
1
0
Fork 0
mirror of https://github.com/OCA/knowledge.git synced 2025-07-26 18:38:41 -06:00
Code Issues Actions Packages Projects Releases Wiki Activity

[document_page_approval] FIX BUG: am_i_approver was being run as sudo(), hence always giving the user Approving rights.

Browse Source
This commit is contained in:
Iván Todorovich 2018-04-24 20:51:03 -03:00
parent 4f76b1a19f
commit 3fe48174ee
2 changed files with 10 additions and 6 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

13
document_page_approval/models/document_page.py
View File

@ -106,14 +106,17 @@ class DocumentPage(models.Model):
# if it's not required, anyone can approve
if not self.is_approval_required:
return True
# to approve, you must have approver rights
approver_group_id = self.env.ref(
'document_page_approval.group_document_approver_user')
if approver_group_id not in user.groups_id:
# if user belongs to 'Knowledge / Manager', he can approve anything
if user.has_group('document_page.group_document_manager'):
return True
# to approve, user must have approver rights
if not user.has_group(
'document_page_approval.group_document_approver_user'):
return False
# and belong to at least one of the approver_groups (if any is set)
# if there aren't any approver_groups_defined, user can approve
if not self.approver_group_ids:
return True
# to approve, user must belong to any of the approver groups
return len(user.groups_id & self.approver_group_ids) > 0
@api.multi

3
document_page_approval/models/document_page_history.py
View File

@ -42,7 +42,8 @@ class DocumentPageHistory(models.Model):
)
am_i_approver = fields.Boolean(
related='page_id.am_i_approver'
related='page_id.am_i_approver',
related_sudo=False,
)
page_url = fields.Text(