tryton-do/tryton
2
0 Fork 0
Code Issues Pull Requests 2 Actions 1 Packages Projects Releases Wiki Activity
5,066 Commits 12 Branches 0 Tags
6144237ef69bda80a35fc2e3ff3886192d96328d
Commit Graph
5066 Commits
This Branch
This Branch
All Branches
Author SHA1 Message Date
Maxime Richez 6144237ef6 Re-fix TypeError on drop_column for SQLite 
Fixing bad interpretation on the value (tuple) when iterating on the dictionary
in previous changeset 9c2eb1b04df8

issue2647
review33491002
 2016-10-24 16:15:28 +02:00
Sergi Almacellas Abellana 1bfc16bcf2 Allow to specify translatable languages in trytond-admin 
issue5961
review27711002
 2016-10-24 14:12:57 +02:00
Nicolas Évrard b486df993e Rename module view button activate instead of install 
issue1456
review34391003
 2016-10-24 13:50:56 +02:00
Nicolas Évrard 7ca35d67ee Fix missed renaming of install to activate (take II) 
issue1456
 2016-10-21 17:59:44 +02:00
Ralf Peschke 4876059350 Add xlsx and docx to output document formats 
review28511002
 2016-10-21 13:00:19 +02:00
Jan Grasnick 1eadd71f98 Add support for datetime_field to fields.Reference 
issue4579
review26811002
 2016-10-21 12:52:26 +02:00
Nicolas Évrard d5e24102f3 Fix missing renaming of install to activate 
issue1456
review28941002
 2016-10-21 12:44:57 +02:00
Nicolas Évrard ccbb43cb1d Use activate instead of install for module activation 
issue1456
review28931002
 2016-10-20 12:51:56 +02:00
Cédric Krier 6410cd00d5 Abort User Application key creation if there are already pending one 
For security, we should prevent to create many keys because at that point the
user is not authenticated and so the system could be abused.
The measure is to prevent to create per user more than one pending key.

issue5958
review29651002
 2016-10-20 12:02:07 +02:00
Cédric Krier 29d05d2b1d Ensure main language is loaded and translatable 
issue5959
review27701002
 2016-10-20 11:45:32 +02:00
Maxime Richez e954c2fe38 Fix TypeError on drop_column for SQLite 
It uses now tuple unpacking on the loop.
It was introduced in changeset a3ef75ef8f6a

issue2647
review32641002
 2016-10-13 10:05:44 +02:00
Sergi Almacellas Abellana 4a1e38d01b Remove Report word from Set Translations wizard name 
The wizard sets the translations of all types, not only Reports so it does not
make sense to have the Report word in its name

issue5932
review34311002
 2016-10-13 09:53:07 +02:00
Cédric Krier 0c17960fb2 Merge Spanish's into Spanish (Latin American) 2016-10-08 12:33:32 +02:00
Cédric Krier 8a84cf031f Fix protocols tests for new names: rpc_method and rpc_params 2016-09-27 13:46:44 +02:00
Cédric Krier ddb5fc3026 Manage selection function for Function field 
ModelView automatically adds missing RPC definition for selection function but
only for Selection or Reference field. It should also do the same for Function
field which mimic such fields.

issue5903
review30531002
 2016-09-27 12:19:47 +02:00
Cédric Krier 6261fa486f Improve ModelStorage.search_count by using no order and COUNT(*) 
issue5877
review27651003
 2016-09-27 12:18:16 +02:00
Cédric Krier 892e79da1e Do not check write access on model for wizard with groups 
issue5884
review33371002
 2016-09-27 12:06:11 +02:00
Cédric Krier 965d010dc9 Add user application 
issue5782
review28641002
 2016-09-27 11:56:19 +02:00
Sergi Almacellas Abellana e2afba1e9a Ensure sqlite connection is set when initializing the database 
issue5906
review26721002
 2016-09-24 19:54:13 +02:00
Cédric Krier 972a1b6c91 Do not link the cache of the instances if id is negative 
Otherwise trytond will try to read it from the database and fail.

issue5874
 2016-09-22 11:33:51 +02:00
Cédric Krier 27387b0960 Manage database retry in login/logout 
A concurrency exception could be raised if two successful login/logout are
requested simultaneously.

issue5890
review32591002
 2016-09-22 11:31:18 +02:00
Sergi Almacellas Abellana 35c3495bb9 Don't check access when executing trigger actions 
issue5887
review27641002
 2016-09-21 15:30:02 +02:00
Cédric Krier bf7148d9d3 Link the cache of the instances in xxx2Many setter 
Just as it is done when browsing xxx2Many field, the instances set by the
xxx2Many fields should share the same local cache.

issue5874
review30471002
 2016-09-21 00:36:49 +02:00
Cédric Krier ac04984ea2 Do not decode traceback on Python3 
It is already a unicode string.

issue5867
review28781002
 2016-09-15 21:59:53 +02:00
Sergi Almacellas Abellana 828afc310d Add sequence_ordered 
issue5105
review25561002
 2016-09-13 14:01:17 +02:00
Cédric Krier 44bd45546c Remove deprecated on_change_with on report_content_name field 2016-09-11 13:15:10 +02:00
Cédric Krier a208d9a0d2 Use simplified language code for time_locale 
issue5443
review29511002
 2016-09-11 09:20:01 +02:00
Cédric Krier d305c26e54 Add support for derivative translations 
This is done by calling first the getter method for the parent language for the
terms that are not yet cached. After existing translations are set for the
language. And finally the result is stored in the cache.
The synchronisation wizard remove also the translations that are identical to
their parent language.
The method load_module_graph adds all parent languages to be loaded for
derivation.

issue5443
review25581002
 2016-09-10 23:25:03 +02:00
Cédric Krier f86939bd5c Install sqlitebck as tox deps instead of drone global 
issue5850
 2016-09-10 10:22:48 +02:00
Cédric Krier 02fa7b240a Allow to call ModelSQL.__insert_history 
Rename __insert_history into _insert_history to be able to call it
when records are manipulated via SQL queries.

issue5819
review32471002
 2016-09-06 09:08:50 +02:00
Cédric Krier 3ee721345d Remove IDENTIFIER regexp on ir.model and ir.model.field 
This regexp has all the factors for ReDoS so it is safer to remove it even if
only administrators can create the records.

issue5743
review29481002
 2016-09-06 09:03:11 +02:00
Xavier Codinas 7ccc973e82 Enforce suffix and prefix to have id or name 
issue5831
review33281002
 2016-09-02 10:50:36 +02:00
Cédric Krier 3e90ed6675 Abort with 404 on wrong database name 
The client must be able to distinct login failure because of wrong database and
failure because of wrong parameters.

issue5837
review32531002
 2016-08-31 22:57:23 +02:00
Cédric Krier 8d3f8347cd Add test about sanitize path in file_open 
issue5808
review28691002
 2016-08-30 12:15:57 +02:00
Cédric Krier f4e14d65cc Sanitize path in file_open 
file_open did not prevent to use up-level reference in file name.
A forged Report name could be used to open file outside the trytond root.

CVE-2016-1242
issue5808
review28691002
 2016-08-30 12:15:25 +02:00
Cédric Krier cbed031e22 Add test about reading password hash 
issue5795
review32441002
 2016-08-30 12:13:31 +02:00
Cédric Krier 2e69e4faf6 Prevent read of user password hash 
changeset c9be44cd05e1 did not add the same hiding protection to the new
password_hash field as the password field.
This allow any authenticated user to read the hash of any other user.

CVE-2016-1241
issue5795
review32441002
 2016-08-30 12:12:55 +02:00
Cédric Krier 16035680aa Do not force _table of SequenceStrict 
Simply resetting to None will make ModelSQL to recompute the name.
 2016-08-27 01:39:30 +02:00
Cédric Krier 739867a41f Fix install_modules for list of modules 
The Module.search in case of a list of modules will return more than one
instance.

issue5794
 2016-08-26 11:02:34 +02:00
Cédric Krier cecc32d9bc Install sqlitebck on drone 
issue5794
 2016-08-25 23:18:24 +02:00
Cédric Krier 276ade5e86 Add database dump cache for tests 
issue5794
review21201003
 2016-08-25 22:39:15 +02:00
Cédric Krier ae51da69a1 Consume only requested fields from Fields.get method 
Badly written getter could return more values than requested. This can corrupt
the browse cache as it only filter on requested fields.

issue5805
review21221002
 2016-08-25 19:14:13 +02:00
Cédric Krier c0efe773f0 Fix has_attribute for AttributeError on _database 
The code added from changeset 9b2e0aac2d9c does not work anymore because the
method has moved on the Database object and it requires a connection as
parameter.
So we add cache on the returned value to prevent to consume unnecessary
connection.

issue5818
 2016-08-25 16:46:44 +02:00
Cédric Krier 8b9232ab81 Re-add has_returning for PostgreSQL 
issue5818
review25621002
 2016-08-25 15:38:07 +02:00
Cédric Krier 8d5c562740 Remove unused tools 
issue5811
review27581002
 2016-08-23 18:45:26 +02:00
Cédric Krier 29acd3560f Re-order CHANGELOG 
People should update to tip more often.
 2016-08-23 17:31:58 +02:00
Maxime Richez 99688e1901 Add missing implementation of drop_column for SQLite 
issue2647
review30311002
 2016-08-23 17:19:23 +02:00
Cédric Krier eb0f868270 Add relate from model and fields to access 
issue5807
review22251002
 2016-08-23 17:18:21 +02:00
Sergi Almacellas Abellana 1484d6382f Allow to pass many configuration files 
issue4780
review27471002
 2016-08-22 11:28:25 +02:00
Cédric Krier f94f58fbaf Test Many2Many add to list of records 
issue5792
review26551002
 2016-08-19 21:35:48 +02:00