Pierre Verkest b24ac7ba31 [FIX] attachment_zipped_download: zip allowed document only
The previous code allowed any authenticated to retreive any attachment present
on odoo filesystem. So a WMS user could technically spoken download a zip with
accounting documents.

This implementation is calling attachemnt.check("read") to ensure access
right and use attachemnt.raw attribute to retreive file to archive which
(not test) should works with attachment saved somewhere else than the
local filesystem (s3 storage, pgsql large object storage...).

attachment_zipped_download 14.0.1.0.2
2024-04-02 13:55:14 +02:00
2023-10-27 22:38:21 +02:00
2023-09-03 13:19:56 +00:00
2023-09-03 13:19:56 +00:00
2023-09-03 13:19:56 +00:00
2024-03-28 21:30:18 +00:00
2023-10-27 22:38:21 +02:00
2021-10-17 16:46:08 +02:00
2023-10-27 22:38:21 +02:00
2021-10-17 16:46:08 +02:00
2021-10-17 16:46:08 +02:00
2023-10-27 22:38:21 +02:00
2021-10-17 16:46:08 +02:00
2021-10-17 16:46:08 +02:00
2021-10-17 16:46:08 +02:00
2021-10-17 16:46:08 +02:00
2024-03-28 21:30:18 +00:00

Runboat Pre-commit Status Build Status codecov Translation Status

knowledge

TODO: add repo description.

Available addons

addon version maintainers summary
attachment_preview 15.0.1.0.0 Preview attachments supported by Viewer.js
document_page 15.0.1.5.0 Document Page
document_page_access_group 15.0.1.0.0 Choose groups to access document pages
document_page_approval 15.0.1.1.0 Document Page Approval
document_page_group 15.0.1.0.1 Define access groups on documents
document_page_project 15.0.1.0.0 This module links document pages to projects
document_page_reference 15.0.1.1.0 etobella Include references on document pages
document_page_tag 15.0.1.2.0 Allows you to assign tags or keywords to pages and search for them afterwards
document_url 15.0.1.2.0 URL attachment
knowledge 15.0.1.0.2 Knowledge

Licenses

This repository is licensed under AGPL-3.0.

However, each module can have a totally different license, as long as they adhere to Odoo Community Association (OCA) policy. Consult each module's __manifest__.py file, which contains a license key that explains its license.


OCA, or the Odoo Community Association, is a nonprofit organization whose mission is to support the collaborative development of Odoo features and promote its widespread use.

Description
Odoo Document & Knowledge Management
Readme AGPL-3.0 52 MiB
Languages
HTML 62.8%
Python 32.4%
JavaScript 4.3%
SCSS 0.5%