16.0][FIX] report_label fix a security issue that prevents regular us…

…ers to print labels
OCA · Dec 12, 2023 · 5b225f9 · 5b225f9
1 parent 7885eac
commit 5b225f9
Show file tree

Hide file tree

Showing 2 changed files with 3 additions and 3 deletions.
diff --git a/report_label/wizards/report_label_wizard.py b/report_label/wizards/report_label_wizard.py
@@ -61,9 +61,9 @@ def _prepare_report_data(self):
         self.ensure_one()
         return {
             "label_format": self.label_paperformat_id.read()[0],
-            "label_template": self.label_template_view_id.key,
+            "label_template": self.label_template_view_id.sudo().key,
             "offset": self.offset,
-            "res_model": self.model_id.model,
+            "res_model": self.model_id.sudo().model,
             "lines": [
                 {
                     "res_id": line.res_id,

diff --git a/report_label/wizards/report_label_wizard_line.py b/report_label/wizards/report_label_wizard_line.py
@@ -22,7 +22,7 @@ class ReportLabelWizardLine(models.TransientModel):
     def _compute_res_name(self):
         wizard = self.mapped("wizard_id")
         wizard.ensure_one()
-        res_model = wizard.model_id.model
+        res_model = wizard.model_id.sudo().model
         res_ids = self.mapped("res_id")
         names_map = dict(self.env[res_model].browse(res_ids).name_get())
         for rec in self: