tryton-do/tryton
2
0 Fork 0
Code Issues Pull Requests 2 Actions 2 Packages Projects Releases Wiki Activity
58,607 Commits 12 Branches 0 Tags
47d012aadd65dc2003259da170ad79a6ac504f0b
Commit Graph
5181 Commits
Author SHA1 Message Date
Nicolas Évrard d5e24102f3 Fix missing renaming of install to activate 
issue1456
review28941002
 2016-10-21 12:44:57 +02:00
Nicolas Évrard ccbb43cb1d Use activate instead of install for module activation 
issue1456
review28931002
 2016-10-20 12:51:56 +02:00
Cédric Krier 6410cd00d5 Abort User Application key creation if there are already pending one 
For security, we should prevent to create many keys because at that point the
user is not authenticated and so the system could be abused.
The measure is to prevent to create per user more than one pending key.

issue5958
review29651002
 2016-10-20 12:02:07 +02:00
Cédric Krier 29d05d2b1d Ensure main language is loaded and translatable 
issue5959
review27701002
 2016-10-20 11:45:32 +02:00
Maxime Richez e954c2fe38 Fix TypeError on drop_column for SQLite 
It uses now tuple unpacking on the loop.
It was introduced in changeset a3ef75ef8f6a

issue2647
review32641002
 2016-10-13 10:05:44 +02:00
Sergi Almacellas Abellana 4a1e38d01b Remove Report word from Set Translations wizard name 
The wizard sets the translations of all types, not only Reports so it does not
make sense to have the Report word in its name

issue5932
review34311002
 2016-10-13 09:53:07 +02:00
Cédric Krier 0c17960fb2 Merge Spanish's into Spanish (Latin American) 2016-10-08 12:33:32 +02:00
Cédric Krier 8a84cf031f Fix protocols tests for new names: rpc_method and rpc_params 2016-09-27 13:46:44 +02:00
Cédric Krier ddb5fc3026 Manage selection function for Function field 
ModelView automatically adds missing RPC definition for selection function but
only for Selection or Reference field. It should also do the same for Function
field which mimic such fields.

issue5903
review30531002
 2016-09-27 12:19:47 +02:00
Cédric Krier 6261fa486f Improve ModelStorage.search_count by using no order and COUNT(*) 
issue5877
review27651003
 2016-09-27 12:18:16 +02:00
Cédric Krier 892e79da1e Do not check write access on model for wizard with groups 
issue5884
review33371002
 2016-09-27 12:06:11 +02:00
Cédric Krier 965d010dc9 Add user application 
issue5782
review28641002
 2016-09-27 11:56:19 +02:00
Sergi Almacellas Abellana e2afba1e9a Ensure sqlite connection is set when initializing the database 
issue5906
review26721002
 2016-09-24 19:54:13 +02:00
Cédric Krier 972a1b6c91 Do not link the cache of the instances if id is negative 
Otherwise trytond will try to read it from the database and fail.

issue5874
 2016-09-22 11:33:51 +02:00
Cédric Krier 27387b0960 Manage database retry in login/logout 
A concurrency exception could be raised if two successful login/logout are
requested simultaneously.

issue5890
review32591002
 2016-09-22 11:31:18 +02:00
Sergi Almacellas Abellana 35c3495bb9 Don't check access when executing trigger actions 
issue5887
review27641002
 2016-09-21 15:30:02 +02:00
Cédric Krier bf7148d9d3 Link the cache of the instances in xxx2Many setter 
Just as it is done when browsing xxx2Many field, the instances set by the
xxx2Many fields should share the same local cache.

issue5874
review30471002
 2016-09-21 00:36:49 +02:00
Cédric Krier ac04984ea2 Do not decode traceback on Python3 
It is already a unicode string.

issue5867
review28781002
 2016-09-15 21:59:53 +02:00
Sergi Almacellas Abellana 828afc310d Add sequence_ordered 
issue5105
review25561002
 2016-09-13 14:01:17 +02:00
Cédric Krier 44bd45546c Remove deprecated on_change_with on report_content_name field 2016-09-11 13:15:10 +02:00
Cédric Krier a208d9a0d2 Use simplified language code for time_locale 
issue5443
review29511002
 2016-09-11 09:20:01 +02:00
Cédric Krier d305c26e54 Add support for derivative translations 
This is done by calling first the getter method for the parent language for the
terms that are not yet cached. After existing translations are set for the
language. And finally the result is stored in the cache.
The synchronisation wizard remove also the translations that are identical to
their parent language.
The method load_module_graph adds all parent languages to be loaded for
derivation.

issue5443
review25581002
 2016-09-10 23:25:03 +02:00
Cédric Krier 02fa7b240a Allow to call ModelSQL.__insert_history 
Rename __insert_history into _insert_history to be able to call it
when records are manipulated via SQL queries.

issue5819
review32471002
 2016-09-06 09:08:50 +02:00
Cédric Krier 3ee721345d Remove IDENTIFIER regexp on ir.model and ir.model.field 
This regexp has all the factors for ReDoS so it is safer to remove it even if
only administrators can create the records.

issue5743
review29481002
 2016-09-06 09:03:11 +02:00
Xavier Codinas 7ccc973e82 Enforce suffix and prefix to have id or name 
issue5831
review33281002
 2016-09-02 10:50:36 +02:00
Cédric Krier 3e90ed6675 Abort with 404 on wrong database name 
The client must be able to distinct login failure because of wrong database and
failure because of wrong parameters.

issue5837
review32531002
 2016-08-31 22:57:23 +02:00
Cédric Krier 8d3f8347cd Add test about sanitize path in file_open 
issue5808
review28691002
 2016-08-30 12:15:57 +02:00
Cédric Krier f4e14d65cc Sanitize path in file_open 
file_open did not prevent to use up-level reference in file name.
A forged Report name could be used to open file outside the trytond root.

CVE-2016-1242
issue5808
review28691002
 2016-08-30 12:15:25 +02:00
Cédric Krier cbed031e22 Add test about reading password hash 
issue5795
review32441002
 2016-08-30 12:13:31 +02:00
Cédric Krier 2e69e4faf6 Prevent read of user password hash 
changeset c9be44cd05e1 did not add the same hiding protection to the new
password_hash field as the password field.
This allow any authenticated user to read the hash of any other user.

CVE-2016-1241
issue5795
review32441002
 2016-08-30 12:12:55 +02:00
Cédric Krier 16035680aa Do not force _table of SequenceStrict 
Simply resetting to None will make ModelSQL to recompute the name.
 2016-08-27 01:39:30 +02:00
Cédric Krier 739867a41f Fix install_modules for list of modules 
The Module.search in case of a list of modules will return more than one
instance.

issue5794
 2016-08-26 11:02:34 +02:00
Cédric Krier 276ade5e86 Add database dump cache for tests 
issue5794
review21201003
 2016-08-25 22:39:15 +02:00
Cédric Krier ae51da69a1 Consume only requested fields from Fields.get method 
Badly written getter could return more values than requested. This can corrupt
the browse cache as it only filter on requested fields.

issue5805
review21221002
 2016-08-25 19:14:13 +02:00
Cédric Krier c0efe773f0 Fix has_attribute for AttributeError on _database 
The code added from changeset 9b2e0aac2d9c does not work anymore because the
method has moved on the Database object and it requires a connection as
parameter.
So we add cache on the returned value to prevent to consume unnecessary
connection.

issue5818
 2016-08-25 16:46:44 +02:00
Cédric Krier 8b9232ab81 Re-add has_returning for PostgreSQL 
issue5818
review25621002
 2016-08-25 15:38:07 +02:00
Cédric Krier 8d5c562740 Remove unused tools 
issue5811
review27581002
 2016-08-23 18:45:26 +02:00
Maxime Richez 99688e1901 Add missing implementation of drop_column for SQLite 
issue2647
review30311002
 2016-08-23 17:19:23 +02:00
Cédric Krier eb0f868270 Add relate from model and fields to access 
issue5807
review22251002
 2016-08-23 17:18:21 +02:00
Sergi Almacellas Abellana 1484d6382f Allow to pass many configuration files 
issue4780
review27471002
 2016-08-22 11:28:25 +02:00
Cédric Krier f94f58fbaf Test Many2Many add to list of records 
issue5792
review26551002
 2016-08-19 21:35:48 +02:00
Cédric Krier 5a9ea33f85 Add Many2Many targets to all records 
If at least one record had already the target, the target was not added to any
records. This is because the test for existing link was only done on the target
id instead of the tuple origin and target.

issue5792
review26551002
 2016-08-19 21:34:47 +02:00
Xavier Codinas 1165580ec0 Remove translate on field name of User 
issue5164
review21161002
 2016-08-18 09:34:02 +02:00
Sergi Almacellas Abellana 8e6b714626 Sync calendar.rnc and calendar.rng 2016-08-17 17:17:29 +02:00
Sergi Almacellas Abellana b7bdbe51bd Correctly define choices of calendar mode in RelaxNG 
This was a typo introduced in changeset627b84a0d0f5
issue5761
 2016-08-17 16:09:32 +02:00
Sergi Almacellas Abellana 37f85244ee Allow to define the default mode in calendar view 
issue5761
review26511002
 2016-08-17 10:54:48 +02:00
Cédric Krier d6d9f22f7e Update time_locale 2016-08-13 23:50:26 +02:00
Cédric Krier bc6021a634 Remove hard coded list of language code from gen_time_locale.py 
It also removes the support for windows as we can not guarantee to have all the
future language translations.

issue5764
review28631002
 2016-08-13 23:50:00 +02:00
Cédric Krier d972fea9e5 Fix typo when converting po_path into list in Translation.translation_import 
This feature was introduced with typo in changeset 1e46a7fc4fd5 for issue5733
 2016-08-13 02:17:12 +02:00
Cédric Krier 9937191676 Encode the format of Lang.strftime for Python2 
The changeset 83b07c8b2c2d removed the encoding by mistake.
The encoding/decoding dance is necessary on Python2 because strftime returns
str/bytes and converts the unicode format using ascii.

issue5762
review28621002
 2016-08-10 23:13:59 +02:00