mirror of
https://github.com/OCA/knowledge.git
synced 2025-12-23 05:42:13 -06:00
3d5a695527
The previous code allowed any authenticated to retreive any attachment present
on odoo filesystem. So a WMS user could technically spoken download a zip with
accounting documents.
This implementation is calling attachemnt.check("read") to ensure access
right and use attachemnt.raw attribute to retreive file to archive which
(not test) should works with attachment saved somewhere else than the
local filesystem (s3 storage, pgsql large object storage...).
attachment_zipped_download 16.0.1.0.2
16 lines
460 B
Python
16 lines
460 B
Python
# Copyright 2022 Tecnativa - Víctor Martínez
|
|
# License AGPL-3.0 or later (https://www.gnu.org/licenses/agpl).
|
|
{
|
|
"name": "Attachment Zipped Download",
|
|
"version": "16.0.1.0.2",
|
|
"category": "Tools",
|
|
"website": "https://github.com/OCA/knowledge",
|
|
"author": "Tecnativa, Odoo Community Association (OCA)",
|
|
"license": "AGPL-3",
|
|
"depends": ["base"],
|
|
"data": [
|
|
"views/ir_attachment_view.xml",
|
|
],
|
|
"installable": True,
|
|
}
|