From 230fecbef9ecc8a65a115d7c933c9b16f7aa67ff Mon Sep 17 00:00:00 2001 From: =?UTF-8?q?Mois=C3=A9s=20L=C3=B3pez?= Date: Tue, 21 Mar 2017 21:14:58 -0600 Subject: [PATCH] [REF] runbot: Check access for build from controller --- runbot/runbot.py | 5 +++++ 1 file changed, 5 insertions(+) diff --git a/runbot/runbot.py b/runbot/runbot.py index 2d572feb..f3c959e4 100644 --- a/runbot/runbot.py +++ b/runbot/runbot.py @@ -1480,6 +1480,11 @@ def build(self, build_id=None, search=None, **post): if not build.exists(): return request.not_found() + try: + build.sudo(uid).check_access_rights('read') + build.sudo(uid).check_access_rule('read') + except openerp.exceptions.AccessError: + return request.not_found() real_build = build.duplicate_id if build.state == 'duplicate' else build # other builds