tryton-do/tryton
2
0
Fork 0
Code Issues Pull Requests 1 Actions Packages Projects Releases Wiki Activity

Do not enforce access rights when performing action on delete

Browse Source 
Closes #15050
This commit is contained in:
Cédric Krier
2026-08-31 13:43:41 +02:00
parent 91f27f64fd
commit 422c99bd7b
1 changed files with 18 additions and 17 deletions
Download Patch File Download Diff File Expand all files Collapse all files
trytond/trytond/model/modelsql.py
+18 -17
View File
@@ -1676,7 +1676,7 @@ class ModelSQL(ModelStorage):
where=foreign_red_sql))
related_records = Model.browse([x[0] for x in cursor])
else:
with without_check_access(), inactive_records():
with inactive_records():
related_records = Model.search(
[(field_name, 'in', ids)],
order=[])
@@ -1684,24 +1684,25 @@ class ModelSQL(ModelStorage):
related_records = list(set(related_records) - set(records))
return related_records
for Model, field_name in foreign_keys_toupdate:
related_records = get_related_records(Model, field_name, ids)
if related_records:
Model.write(related_records, {
field_name: None,
})
with without_check_access():
for Model, field_name in foreign_keys_toupdate:
related_records = get_related_records(Model, field_name, ids)
if related_records:
Model.write(related_records, {
field_name: None,
})
for Model, field_name in foreign_keys_todelete:
related_records = get_related_records(Model, field_name, ids)
if related_records:
Model.delete(related_records)
for Model, field_name in foreign_keys_todelete:
related_records = get_related_records(Model, field_name, ids)
if related_records:
Model.delete(related_records)
for Model, field_name in foreign_keys_tocheck:
if get_related_records(Model, field_name, ids):
error_args = Model.__names__(field_name)
raise ForeignKeyError(
gettext('ir.msg_foreign_model_exist',
**error_args))
for Model, field_name in foreign_keys_tocheck:
if get_related_records(Model, field_name, ids):
error_args = Model.__names__(field_name)
raise ForeignKeyError(
gettext('ir.msg_foreign_model_exist',
**error_args))
try:
cursor.execute(*table.delete(