tryton-do/tryton
2
0 Fork 0
Code Issues Pull Requests 2 Actions 2 Packages Projects Releases Wiki Activity
5,032 Commits 12 Branches 0 Tags
f4e14d65cc85a8d34064d2a015d8cb8ce8bb33e7
Commit Graph
5032 Commits
This Branch
This Branch
All Branches
Author SHA1 Message Date
Cédric Krier f4e14d65cc Sanitize path in file_open 
file_open did not prevent to use up-level reference in file name.
A forged Report name could be used to open file outside the trytond root.

CVE-2016-1242
issue5808
review28691002
 2016-08-30 12:15:25 +02:00
Cédric Krier cbed031e22 Add test about reading password hash 
issue5795
review32441002
 2016-08-30 12:13:31 +02:00
Cédric Krier 2e69e4faf6 Prevent read of user password hash 
changeset c9be44cd05e1 did not add the same hiding protection to the new
password_hash field as the password field.
This allow any authenticated user to read the hash of any other user.

CVE-2016-1241
issue5795
review32441002
 2016-08-30 12:12:55 +02:00
Cédric Krier 16035680aa Do not force _table of SequenceStrict 
Simply resetting to None will make ModelSQL to recompute the name.
 2016-08-27 01:39:30 +02:00
Cédric Krier 739867a41f Fix install_modules for list of modules 
The Module.search in case of a list of modules will return more than one
instance.

issue5794
 2016-08-26 11:02:34 +02:00
Cédric Krier cecc32d9bc Install sqlitebck on drone 
issue5794
 2016-08-25 23:18:24 +02:00
Cédric Krier 276ade5e86 Add database dump cache for tests 
issue5794
review21201003
 2016-08-25 22:39:15 +02:00
Cédric Krier ae51da69a1 Consume only requested fields from Fields.get method 
Badly written getter could return more values than requested. This can corrupt
the browse cache as it only filter on requested fields.

issue5805
review21221002
 2016-08-25 19:14:13 +02:00
Cédric Krier c0efe773f0 Fix has_attribute for AttributeError on _database 
The code added from changeset 9b2e0aac2d9c does not work anymore because the
method has moved on the Database object and it requires a connection as
parameter.
So we add cache on the returned value to prevent to consume unnecessary
connection.

issue5818
 2016-08-25 16:46:44 +02:00
Cédric Krier 8b9232ab81 Re-add has_returning for PostgreSQL 
issue5818
review25621002
 2016-08-25 15:38:07 +02:00
Cédric Krier 8d5c562740 Remove unused tools 
issue5811
review27581002
 2016-08-23 18:45:26 +02:00
Cédric Krier 29acd3560f Re-order CHANGELOG 
People should update to tip more often.
 2016-08-23 17:31:58 +02:00
Maxime Richez 99688e1901 Add missing implementation of drop_column for SQLite 
issue2647
review30311002
 2016-08-23 17:19:23 +02:00
Cédric Krier eb0f868270 Add relate from model and fields to access 
issue5807
review22251002
 2016-08-23 17:18:21 +02:00
Sergi Almacellas Abellana 1484d6382f Allow to pass many configuration files 
issue4780
review27471002
 2016-08-22 11:28:25 +02:00
Cédric Krier f94f58fbaf Test Many2Many add to list of records 
issue5792
review26551002
 2016-08-19 21:35:48 +02:00
Cédric Krier 5a9ea33f85 Add Many2Many targets to all records 
If at least one record had already the target, the target was not added to any
records. This is because the test for existing link was only done on the target
id instead of the tuple origin and target.

issue5792
review26551002
 2016-08-19 21:34:47 +02:00
Xavier Codinas 1165580ec0 Remove translate on field name of User 
issue5164
review21161002
 2016-08-18 09:34:02 +02:00
Sergi Almacellas Abellana 8e6b714626 Sync calendar.rnc and calendar.rng 2016-08-17 17:17:29 +02:00
Sergi Almacellas Abellana b7bdbe51bd Correctly define choices of calendar mode in RelaxNG 
This was a typo introduced in changeset627b84a0d0f5
issue5761
 2016-08-17 16:09:32 +02:00
Sergi Almacellas Abellana 37f85244ee Allow to define the default mode in calendar view 
issue5761
review26511002
 2016-08-17 10:54:48 +02:00
Cédric Krier d6d9f22f7e Update time_locale 2016-08-13 23:50:26 +02:00
Cédric Krier bc6021a634 Remove hard coded list of language code from gen_time_locale.py 
It also removes the support for windows as we can not guarantee to have all the
future language translations.

issue5764
review28631002
 2016-08-13 23:50:00 +02:00
Cédric Krier d972fea9e5 Fix typo when converting po_path into list in Translation.translation_import 
This feature was introduced with typo in changeset 1e46a7fc4fd5 for issue5733
 2016-08-13 02:17:12 +02:00
Cédric Krier 9937191676 Encode the format of Lang.strftime for Python2 
The changeset 83b07c8b2c2d removed the encoding by mistake.
The encoding/decoding dance is necessary on Python2 because strftime returns
str/bytes and converts the unicode format using ascii.

issue5762
review28621002
 2016-08-10 23:13:59 +02:00
Cédric Krier 9d100e33c5 Fix Transaction documentation according to last changes 
issue5759
review30401002
 2016-08-04 23:58:37 +02:00
Cédric Krier 8b99a62f10 Use 'default_rec_name' context key in Model.default_get 
This allow the client to set searched value as default rec_name when the user
choose to create the record.

issue4136
review22131002
 2016-08-04 23:54:50 +02:00
Sergi Almacellas Abellana 5353de2e1e Translation import should accept a list of file names 
This will prevent deleting valid translations when a module defines multiple
translation files for the same language.

issue5733
review32321002
 2016-08-01 10:03:23 +02:00
Cédric Krier 7a1bbd6cd4 Improve RelaxNG syntax 
- Allow field inside graph xpath
- Allow zero xpath for tree and graph
- Allow no children for graph

issue5744
review30371002
 2016-07-29 12:23:15 +02:00
Cédric Krier c4c6e6ed54 Do not set NOT NULL on any Binary fields 
Even if the data is stored in the database, the column is filled only after the
initial insert by the set method.
 2016-07-29 12:17:04 +02:00
Sergi Almacellas Abellana 88c28bf4a5 Add missing Transaction().rollback for ModelStorage.save test 2016-07-29 11:24:45 +02:00
Cédric Krier 7ca7f4c6f0 Allow to store Binary field in filestore 
Two options are added on Binary field to define the column to use to store the
filestore id and the prefix to use.
Those options are used for Attachment and are configurable with conservative
default values.

issue5692
review25471003
 2016-07-29 10:51:53 +02:00
Cédric Krier 065d1b7bb6 Add filestore module 
Replace custom Attachment setter/getter by a generic module that can be used by
others.

issue5686
review22141003
 2016-07-29 10:46:52 +02:00
Sergi Almacellas Abellana 70a979449c Add docs about ir.trigger 
issue5699
review28491002
 2016-07-29 10:33:18 +02:00
Sergi Almacellas Abellana db3ded5b90 Add test on ModelStorage.save with records with different context 
issue5753
review22201002
 2016-07-29 10:31:14 +02:00
Sergi Almacellas Abellana cca2b961b0 Allow records with different context on ModelStorage.save 
issue5753
review22201002
 2016-07-29 10:30:00 +02:00
Cédric Krier c0709a7b2c Fix default value and check of last_timestamp of Sequence 
The client integer widget does not allow to display float value. So the default
value of last_timestamp is replaced by None which fails later in the check.
Also the check must not validate when it is not filled because in Python3 None
and int are unorderable.

issue5591
review28571002
 2016-07-26 23:07:18 +02:00
Cédric Krier cc33880308 Skip check_wizard_model of ActionKeyword if there is not yet an action 
This case can happen when copying an wizard action.

issue5582
review31381002
 2016-07-25 11:19:48 +02:00
Cédric Krier 8555aa5b0b Allow None in Greater/Less PYSON 
As all statements are evaluated even if surrounded by 'If', it is not possible
to use numeric field with Greater/Less because they can be None.

issue5711
review29381004
 2016-07-19 07:40:50 +07:00
Sergi Almacellas Abellana 6477227a82 Skip already loaded rec_name in Wizard.get_default 
Introduced on changeset e11df51790ba
issue5665
review32301002
 2016-07-15 14:50:14 +02:00
Cédric Krier b2e5e20a06 Remove remaining files with sha field 
issue3713
 2016-07-11 18:34:43 +02:00
Cédric Krier 9601375f8a Always write the fs values when sync data 
This prevent to keep out of sync, data that are Python equals but the
representation is different like float and integer.

issue5559
review27481003
 2016-07-11 18:28:32 +02:00
Cédric Krier 599dbd035e Add option to reset admin password with trytond-admin 
issue5385
review23251003
 2016-07-08 10:45:46 +02:00
Xavier Codinas 88fc69453d Fix TransationExport.default_result file value 
issue5683
review32281002
 2016-07-08 10:23:59 +02:00
Sergi Almacellas Abellana 2cc1d8a5b0 Close database connection before droping the database 
issue5384
review27481002
 2016-07-08 09:20:45 +02:00
Sergi Almacellas Abellana 5967d21d46 Remove database management from RPC 
issue5384
review29311002
 2016-07-07 16:05:45 +02:00
Xavier Codinas 7e359d5c2b Add option to update modules list 
issue2638
review26431002
 2016-07-07 09:43:01 +02:00
Sergi Almacellas Abellana 4b2b8671b6 Add Many2One rec_name's in Wizard.get_default 
issue5665
review25451002
 2016-07-06 11:47:49 +02:00
Cédric Krier c771f0faea Force encoding to open XML files 
The views and icons file should always be encoded in UTF-8, so it is better to
force it when opening than relying on the default system.

issue5596
review21101002
 2016-07-05 22:00:57 +02:00
Sergi Almacellas Abellana b24c4143a2 Remove string attribute from ir.ui.view and ModelView.view_header_get 
issue2350
review24251002
 2016-07-05 12:42:46 +02:00