Do not check access when retrieving action ID
The ID does not contain any security data. If the user does not have access to the action, an access error will be raised later when actual values are read. Closes #12803
This commit is contained in:
1 parent
37997a6329
commit
3d3ffc5c7c
1 file changed
+3
-1
@@ -18,7 +18,8 @@ from trytond.pool import Pool
|
||||
from trytond.pyson import PYSON, Eval, PYSONDecoder, PYSONEncoder
|
||||
from trytond.rpc import RPC
|
||||
from trytond.tools import file_open
|
||||
from trytond.transaction import Transaction, inactive_records
|
||||
from trytond.transaction import (
|
||||
Transaction, inactive_records, without_check_access)
|
||||
|
||||
if not config.get('html', 'plugins-ir.action.report-report_content_html'):
|
||||
config.set(
|
||||
@@ -99,6 +100,7 @@ class Action(DeactivableMixin, ModelSQL, ModelView):
|
||||
|
||||
@classmethod
|
||||
@inactive_records
|
||||
@without_check_access
|
||||
def get_action_id(cls, action_id):
|
||||
pool = Pool()
|
||||
if cls.search([
|
||||
|
||||
Reference in new issue
Block a user