{"push_id":2796409905,"size":855,"distinct_size":1,"ref":"refs/heads/master-action-multi-seb","head":"e5e05571e01c21af1aadf3564e80e7b26f86f3f1","before":"629e077bc4f8459d7f025b17596f433dcfa2c4ac","commits":[{"sha":"8669361dd6d5214f8545797b9e1b0c0c45c8874f","author":{"name":"Martin Trigaux","email":"cc7c5be316e48d137cbb549833b85d91034d799d@odoo.com"},"message":"[I18N] remove outdated translations\n\nContained bad %s and out of sync with .pot","distinct":false,"url":"https://api.github.com/repos/odoo-dev/odoo/commits/8669361dd6d5214f8545797b9e1b0c0c45c8874f"},{"sha":"9609f79cad50613049dc20b0d7eb9cad012fdbf4","author":{"name":"Joren Van Onder","email":"8c699a05c38304827cff61803bc9687ef59fcf8f@odoo.com"},"message":"[FIX] point_of_sale: invalidate cache after reloading partners\n\nThe POS uses a DomCache for various UI elements to avoid re-rendering\nelements that are the same as the last render. One such cached UI\nelement is an entry in the client list.\n\nWhen a partner is edited in the POS frontend the POS will write this\nto the backend and then it will load all updated res.partner\nrecords (new write_date > previously loaded most recent write_date).\n\nTo render the newly updated information *and* to ensure any other\npartner edited (through backend or because it's a child contact) is\nupdated just clear the whole cache.\n\nFixes #13856","distinct":false,"url":"https://api.github.com/repos/odoo-dev/odoo/commits/9609f79cad50613049dc20b0d7eb9cad012fdbf4"},{"sha":"db994ca57af4f09953946dede3950c2eb7a94871","author":{"name":"Lucas Perais (lpe)","email":"42d29efea96f3992aa24782120ec2948e42548fa@odoo.com"},"message":"[FIX] sale: do not always overwrite discount on soline\n\nBefore this commit, the discount on a so line was always brought to zero when changing the price\n\nAfter this commit, we do this only when the pricelist is supposed to compute the discount\n\nOPW 1867262\ncloses #25851","distinct":false,"url":"https://api.github.com/repos/odoo-dev/odoo/commits/db994ca57af4f09953946dede3950c2eb7a94871"},{"sha":"dae282279947e1f9cccad5ec0244ee654132509b","author":{"name":"Simon Lejeune","email":"1969d8dff896674c2d819e813f5e88ca826229ab@odoo.com"},"message":"[FIX] report: avoid local file resources\n\nMake sure building reports using local resources are disabled.\nThis avoids get different report result based on the system if the\ngiven resources are or not present (e.g. custom style)","distinct":false,"url":"https://api.github.com/repos/odoo-dev/odoo/commits/dae282279947e1f9cccad5ec0244ee654132509b"},{"sha":"19ac9fba0d4be4e30d6103e6ebd49b466adb74b5","author":{"name":"Simon Lejeune","email":"1969d8dff896674c2d819e813f5e88ca826229ab@odoo.com"},"message":"[FIX] base: strengthen ir.attachment access rights\n\nAn ir.attachment record can be served as a request's reponse if:\n  - a request triggers a 404\n  - the ir.attachment record has its url field matching the url of\n    the failed and is of binary type\n\nFollowing rev[1], portal users have the right to create these kind of\nrecords, and it is a security concern.\n\nThis patch restrict the ability to create and write on the ir.attachment\nrecords that may be served through the dispatch's exception mechanism to\nsettings users.\n\nAs the asset bundles files are served through the use of these special\nir.attachment, we make sure to retrieve only ir.attachment records\ncreated by the superuser in the `get_attachment` method.\n\nAs website administrators often need to play with these special\nir.attachment, we also let to this group the permission to manage them.\n\n[1] 61065b6d04248aa496765e1035c4c90cbdc38de7","distinct":false,"url":"https://api.github.com/repos/odoo-dev/odoo/commits/19ac9fba0d4be4e30d6103e6ebd49b466adb74b5"},{"sha":"e00370e194ffa0c527bb4669401949cc6a15f55f","author":{"name":"Thibault Delavallée","email":"2d325771bb6e8870d87f0f3f7b45589a8338e550@odoo.com"},"message":"[IMP] website_mail: allow per-module override of token_field\n\nInstead of forcing a token field through an override, set it at the class level\nto be changed in other model inheriting from the MailThread","distinct":false,"url":"https://api.github.com/repos/odoo-dev/odoo/commits/e00370e194ffa0c527bb4669401949cc6a15f55f"},{"sha":"2d32609440239bd284fd472851a5c7936aa516ed","author":{"name":"Thibault Delavallée","email":"2d325771bb6e8870d87f0f3f7b45589a8338e550@odoo.com"},"message":"[FIX] mail: log correct user deleting the record\n\nWhen using sudo, the administrator is logged as deleting the action.\nFor audit reason, log the correct user.\nTo avoid access rights errors, only group system can delete the action.","distinct":false,"url":"https://api.github.com/repos/odoo-dev/odoo/commits/2d32609440239bd284fd472851a5c7936aa516ed"},{"sha":"ef017ab1ab7bc5988ad30ab92a445079e245cf03","author":{"name":"Olivier Dony","email":"d670d44c3ca8bd4cd53a3b09f8bf8fc35e4843cc@odoo.com"},"message":"[FIX] base: always preload dateutil\n\nThe dateutil package uses lazy import to selectively expose its\nfeatures: `parser`, `relativedelta`, `rrule`, `tz`.\n\nDepending on installed modules and order of initialization, there was no\nguarantee that a given feature was already loaded during the preparation\nof the action context.\n\nThis patch ensures that we always preload the feature set we need, and\nonly that feature set. This way we have a consistent `dateutil` lib in\nthe action context at all times.","distinct":false,"url":"https://api.github.com/repos/odoo-dev/odoo/commits/ef017ab1ab7bc5988ad30ab92a445079e245cf03"},{"sha":"0dbed816b90db5be06c60bf0e4a74411c9cf962e","author":{"name":"Raphael Collet","email":"fcee45b878db1f337818c5c606c1542797080a40@odoo.com"},"message":"[FIX] base: override correct read method\n\nThe _read_from_database is used by all the different methods that may access\nthe value of the fields.","distinct":false,"url":"https://api.github.com/repos/odoo-dev/odoo/commits/0dbed816b90db5be06c60bf0e4a74411c9cf962e"},{"sha":"2c9c7e770addb152f6d424c3ea0f6ac9bcc25a56","author":{"name":"Raphael Collet","email":"fcee45b878db1f337818c5c606c1542797080a40@odoo.com"},"message":"[FIX] models: correct regex for onchange_v7\n\nEnsure, we only match the expected az-A-Z characters for old-style onchanges.\nThe \\w allowed starting with 0-9 which should be prevented.","distinct":false,"url":"https://api.github.com/repos/odoo-dev/odoo/commits/2c9c7e770addb152f6d424c3ea0f6ac9bcc25a56"},{"sha":"e93fa785629500e997330731d84853eb2edac299","author":{"name":"Raphael Collet","email":"fcee45b878db1f337818c5c606c1542797080a40@odoo.com"},"message":"[FIX] base: access rights on transient models","distinct":false,"url":"https://api.github.com/repos/odoo-dev/odoo/commits/e93fa785629500e997330731d84853eb2edac299"},{"sha":"7501691da9a9dae832b7d6e78c6a5f57fc983b5c","author":{"name":"Nicolas Martinelli","email":"771435c469f83f6aa9c405ac5e1ed06314a94f2d@odoo.com"},"message":"[IMP] auth_signup: hide unusable field from users\n\nThe token field is a technical data that the other users are not able to use.\nIt may be confusing for users to see token on the user interface.\nStill show it to administrator for debug reasons.","distinct":false,"url":"https://api.github.com/repos/odoo-dev/odoo/commits/7501691da9a9dae832b7d6e78c6a5f57fc983b5c"},{"sha":"4e4dd4dfa2b898c064df93199f882c3829574d44","author":{"name":"Martin Trigaux","email":"cc7c5be316e48d137cbb549833b85d91034d799d@odoo.com"},"message":"[FIX] http: avoid corruption with domain name\n\nDomain names may have been interpreted as a regex by mistake","distinct":false,"url":"https://api.github.com/repos/odoo-dev/odoo/commits/4e4dd4dfa2b898c064df93199f882c3829574d44"},{"sha":"b0203084133bee0dadc004debf3b0fb2835d0ffd","author":{"name":"Christophe Simonis","email":"0e117f2b429bfa19751522a564765b352cb7b946@odoo.com"},"message":"[FIX] web: clean data_file after restore\n\nThe file used for the restoration was not properly removed","distinct":false,"url":"https://api.github.com/repos/odoo-dev/odoo/commits/b0203084133bee0dadc004debf3b0fb2835d0ffd"},{"sha":"d255628ecf564d54825a55c662eeee552e66377a","author":{"name":"Simon Lejeune","email":"1969d8dff896674c2d819e813f5e88ca826229ab@odoo.com"},"message":"[FIX] report: avoid local file resources\n\nMake sure building reports using local resources are disabled.\nThis avoids get different report result based on the system if the\ngiven resources are or not present (e.g. custom style)","distinct":false,"url":"https://api.github.com/repos/odoo-dev/odoo/commits/d255628ecf564d54825a55c662eeee552e66377a"},{"sha":"bfffe39f1376a56226572295b945a2cc73ba50ce","author":{"name":"Simon Lejeune","email":"1969d8dff896674c2d819e813f5e88ca826229ab@odoo.com"},"message":"[FIX] base: strengthen ir.attachment access rights\n\nAn ir.attachment record can be served as a request's reponse if:\n  - a request triggers a 404\n  - the ir.attachment record has its url field matching the url of\n    the failed and is of binary type\n\nFollowing rev[1], portal users have the right to create these kind of\nrecords, and it is a security concern.\n\nThis patch restrict the ability to create and write on the ir.attachment\nrecords that may be served through the dispatch's exception mechanism to\nsettings users.\n\nAs the asset bundles files are served through the use of these special\nir.attachment, we make sure to retrieve only ir.attachment records\ncreated by the superuser in the `get_attachment` method.\n\nAs website administrators often need to play with these special\nir.attachment, we also let to this group the permission to manage them.\n\n[1] 61065b6d04248aa496765e1035c4c90cbdc38de7","distinct":false,"url":"https://api.github.com/repos/odoo-dev/odoo/commits/bfffe39f1376a56226572295b945a2cc73ba50ce"},{"sha":"1e42cbc1f425d31bbc83f3994f3bd8836aa201a2","author":{"name":"Thibault Delavallée","email":"2d325771bb6e8870d87f0f3f7b45589a8338e550@openerp.com"},"message":"[FIX] mail: log correct user deleting the record\n\nWhen using sudo, the administrator is logged as deleting the action.\nFor audit reason, log the correct user.\nTo avoid access rights errors, only group system can delete the action.","distinct":false,"url":"https://api.github.com/repos/odoo-dev/odoo/commits/1e42cbc1f425d31bbc83f3994f3bd8836aa201a2"},{"sha":"21bb14d17764f16ca2727622d7892d38104e2ec3","author":{"name":"Olivier Dony","email":"d670d44c3ca8bd4cd53a3b09f8bf8fc35e4843cc@odoo.com"},"message":"[FIX] base: always preload dateutil\n\nThe dateutil package uses lazy import to selectively expose its\nfeatures: `parser`, `relativedelta`, `rrule`, `tz`.\n\nDepending on installed modules and order of initialization, there was no\nguarantee that a given feature was already loaded during the preparation\nof the action context.\n\nThis patch ensures that we always preload the feature set we need, and\nonly that feature set. This way we have a consistent `dateutil` lib in\nthe action context at all times.","distinct":false,"url":"https://api.github.com/repos/odoo-dev/odoo/commits/21bb14d17764f16ca2727622d7892d38104e2ec3"},{"sha":"698314e5d4c145c0b7b9fc323fccc7c3a19de0fc","author":{"name":"Raphael Collet","email":"fcee45b878db1f337818c5c606c1542797080a40@odoo.com"},"message":"[FIX] base: override correct read method\n\nThe _read_from_database is used by all the different methods that may access\nthe value of the fields.","distinct":false,"url":"https://api.github.com/repos/odoo-dev/odoo/commits/698314e5d4c145c0b7b9fc323fccc7c3a19de0fc"},{"sha":"ff45f227505df644c70bd02d804f48b3c3e54601","author":{"name":"Raphael Collet","email":"fcee45b878db1f337818c5c606c1542797080a40@odoo.com"},"message":"[FIX] models: correct regex for onchange_v7\n\nEnsure, we only match the expected az-A-Z characters for old-style onchanges.\nThe \\w allowed starting with 0-9 which should be prevented.","distinct":false,"url":"https://api.github.com/repos/odoo-dev/odoo/commits/ff45f227505df644c70bd02d804f48b3c3e54601"}]}
{"actor":{"display_login":"seb-odoo"}}