From c3a9faea42d9b1ccfdc4e8889e9fca5cdefec451 Mon Sep 17 00:00:00 2001
From: =?UTF-8?q?C=C3=A9dric=20Krier?= <ced@b2ck.com>
Date: Mon, 16 Jun 2025 19:42:12 +0200
Subject: [PATCH] Convert domain without checking access

The searcher of Function field may execute code for which the user has no
access.

Closes #14077
---
 trytond/trytond/model/modelsql.py | 3 ++-
 1 file changed, 2 insertions(+), 1 deletion(-)

diff --git a/trytond/trytond/model/modelsql.py b/trytond/trytond/model/modelsql.py
index ea0e883c5d..bbdaf9a85c 100644
--- a/trytond/trytond/model/modelsql.py
+++ b/trytond/trytond/model/modelsql.py
@@ -1703,7 +1703,8 @@ class ModelSQL(ModelStorage):
             else:
                 return [convert(d) for d in domain]
 
-        domain = simplify(convert(domain))
+        with without_check_access():
+            domain = simplify(convert(domain))
         rule_domain = Rule.domain_get(cls.__name__, mode='read')
         joined_domains = None
         if domain and domain[0] == 'OR':