Commit Graph
467 Commits
Author SHA1 Message Date
Cédric Krier 3d8abb5059 Use SQL query to remove old login attempt
This is more efficient if there are a huge number of old login attempt because
it avoid to fetch the ids and to have loop over them to delete.

issue5377
review24901002
2016-03-16 22:10:37 +01:00
Cédric Krier 687a51a30c Limit the login size in LoginAttempt
The login data comes from an unauthenticated user so it could be very large and
thus fill the database. But indeed we don't need to have the full login to get
the LoginAttempt benefit, just the 1024 starting char is enough.

issue5381
review17901002
2016-03-14 19:33:40 +01:00
Nicolas Évrard 2fef479575 Follow PEP-0249 for Transaction and backends
issue4949
review19781002
2016-03-03 21:51:57 +01:00
Cédric Krier 29129855ec Add support for Python 3
issue3211
review7311002
2016-02-07 16:46:16 +01:00
Cédric Krier edf80492d9 Update translations 2015-10-31 11:01:24 +01:00
Cédric Krier 0574e90f5b Remove foreign-key on create_uid and write_uid
Instead prevent delete of any user to keep logging information.

issue4925
review24301002
2015-09-04 11:52:53 +02:00
Cédric Krier 44dc331ced Use Constraint instance in ModelSQL._sql_constraints
issue4814
review15491002
2015-06-22 16:57:06 +02:00
Cédric Krier dc42797cb8 Use explicit comparison to Boolean in SQL queries
issue4810
review13251002
2015-06-22 16:22:44 +02:00
Cédric Krier 52ff97b165 Rename ir.module.module* into ir.module*
issue4764
review7171002
2015-05-28 21:02:01 +02:00
Bruno M. Villasanti 7f5ee2d885 Update translation for es_AR 2015-04-17 17:21:30 -03:00
Jordi Esteve 28c4637918 Update es_ES translation 2015-04-17 19:37:50 +02:00
Albert Cervera i Areny 1d8a3e56e3 Update Catalan translation. 2015-04-17 18:51:55 +02:00
Sergi Almacellas Abellana 2f16660fef Add missing write access rule for admin on ir.model.data
issue4706
review13151002
2015-04-17 18:59:54 +02:00
Fabián Calle 7313d588ee Update es_EC translation for res and webdav 2015-04-17 09:53:05 -05:00
Cédric Krier 10d896fa77 Fix search_rec_name for negative operator
In case of negative operator, each subclause must be composed with 'AND'.

issue4559
review7071002
2015-04-05 23:34:38 +02:00
David Harper 0c9012f3b7 change Ok to OK
issue4290
review7011002
2015-03-10 18:17:32 +01:00
Cédric Krier bcd28ca071 Remove safe_eval
We convert all the fields that were storing python code into PYSON.
We add a pyson attribute on field tag to store PYSON value.

issue4416
review6971002
2015-03-09 19:40:41 +01:00
Cédric Krier 36555242de Use root user to compute user's sessions
There is an access rule on ir.session so user can only see his own session.
So it needs to use the root user to compute for others.

issue4558
review10201002
2015-02-14 18:32:56 +01:00
Guillem Barba 4a2255c8d6 Don't remove elements from tuple on group's menu_access field
The changeSet 2a7d6a7e5c59 modified the returning of get()
method of Many2Many fields, from dictionary of list to dictionary of tuples.

issue4542
review14971002
2015-02-10 19:12:32 +01:00
Cédric Krier b1fe2ea538 Don't set default value for user language
issue4400
review12791002
2014-12-11 22:21:38 +01:00
Cédric Krier c144f8c349 Fix most flake8 errors
review8771002
2014-12-02 12:54:01 +01:00
Jordi Esteve a7f08d8606 Update es_ES translation 2014-10-17 19:22:21 +02:00
Albert Cervera i Areny 21ab58226d Update Catalan translation. 2014-10-17 18:18:55 +02:00
Bruno M. Villasanti 9b196347d1 Update translation for es_AR 2014-10-16 23:22:52 -03:00
Mathias Behrle e03135c247 Update translation for de_DE 2014-10-16 22:53:37 +02:00
Cédric Krier b2f5f995dd Update fr_FR translation
review5691002
2014-10-16 15:50:20 +02:00
Venceslav Vezjak 76d199bdcd Update sl_SI translation 2014-10-16 09:47:18 +02:00
Oscar Alvarez 5dab9af39d Update Tryton es_CO translation 2014-10-15 06:23:30 -05:00
Fabián Calle 231a4a8826 Add translation for es_EC 2014-10-02 11:01:30 -05:00
Cédric Krier 5ce5fb79d3 Use literal_eval instead of safe_eval whenever possible
CVE-2014-6633
issue4155
review10521002
2014-09-29 17:29:25 +02:00
Cédric Krier a2c8111f26 Use context to check model and field access
* Model and Field access checked only if _check_access is set
* Add check_access to RPC
* Add check_access to Wizard and Report

issue4081
review8481002
2014-09-17 21:43:53 +02:00
Cédric Krier e0b995abbe Refactore configuration to allow easy extention
issue3627
review7401002
2014-09-03 23:32:01 +02:00
Sergi Almacellas Abellana fd7c510ce4 Add grouped_slice helper and use it.
issue3516
review10301002
2014-07-17 18:53:05 +02:00
Cédric Krier b955ab3070 Allow to sync XML data
- Adds menu entry for ir.model.data
- Remove write access on ir.model.data to administrator group
- Add sync button on ir.model.data
- Change storage format of values to be comparable

issue3918
review8351002
2014-06-13 19:14:48 +02:00
Cédric Krier 9944474f5d Clean translations 2014-04-20 22:26:13 +02:00
Bruno M. Villasanti 42509f36db Update translation for es_AR 2014-04-17 20:51:24 -03:00
Jordi Esteve e2fd64d680 Update translation for es_ES 2014-04-18 00:45:45 +02:00
Mathias Behrle ef8e539372 Update translation for de_DE 2014-04-18 00:11:49 +02:00
Albert Cervera i Areny 0c211d809b Merge. 2014-04-17 23:40:39 +02:00
Albert Cervera i Areny a7633cd9f2 Update Catalan translation 2014-04-17 23:40:12 +02:00
Cédric Krier c6d50fc826 Update fr_FR translation
issue3682
review4881002
2014-04-17 18:28:10 +02:00
Venceslav Vezjak f8669a6fe3 Update sl_SI translation 2014-04-13 19:18:34 +02:00
Cédric Krier 84cc132dcc Remove domain for user field converted to selection
review4891003
2014-04-07 18:14:37 +02:00
Oscar Alvarez f87656e899 Translation es_CO updated 2014-04-03 17:05:49 -05:00
Cédric Krier f0a4bbcff7 Remove Sha field and add password widget
issue3713
review3791003
2014-03-07 19:38:01 +01:00
Cédric Krier c6c0ca4da7 Use bcrypt to hash password if possible
If bcrypt is not available, it fallbacks to sha1 but it will use bcrypt to hash
new password if available.
The storage uses a simple hashing scheme which eases to add new hashing method
and doesn't rely anymore on the specific Sha field but on Function field.

Thanks to Vishesh Yadav

review1039002
2014-02-24 19:48:03 +01:00
Cédric Krier 2ba9526d37 Prevent unecessary update of record when loading XML
review3061003
2014-01-31 22:26:55 +01:00
Cédric Krier f52fe8e45f Use a sequence of records, values in write
issue3499
review1641003
2013-12-19 14:44:01 +01:00
Nicolas Évrard e8bdcd5550 Set the context's user when fetching user preferences
The call to _get_preferences makes some processing based on the user of the
context.

In order for those computations to return the right value the context must be
set when instanciating the user.

issue3068
review1711002
2013-12-10 12:01:30 +01:00
Nicolas Évrard 90324479f2 Backed out changeset a0dfdb90681e 2013-12-10 11:52:37 +01:00