Convert domain without checking access

The searcher of Function field may execute code for which the user has no access. Closes #14077
2025-06-16 19:42:12 +02:00
parent 98f6f4b037
commit c3a9faea42
1 changed files with 2 additions and 1 deletions
@@ -1703,7 +1703,8 @@ class ModelSQL(ModelStorage):
            else:
                return [convert(d) for d in domain]

-        domain = simplify(convert(domain))
+        with without_check_access():
+            domain = simplify(convert(domain))
        rule_domain = Rule.domain_get(cls.__name__, mode='read')
        joined_domains = None
        if domain and domain[0] == 'OR':