[6.1] notebook page can see content of hidden pages by navigating through record

Bug #1029320 reported by Yannick Vaucher @ Camptocamp
6
This bug affects 1 person
Affects Status Importance Assigned to Milestone
Odoo Web (MOVED TO GITHUB)
New
Undecided
Unassigned

Bug Description

Maybe related to #1029286

However this one is a bit different case and a more probable one and even more dangerous one.

Let's create a notebook with multiple pages. Each page has a rule with attrs to be hidden or not.

You will be able to see and edit some content in a page that should be hidden if you switch from an object that allow you access to those data to an other that should hide it. The tab will be hidden but you will see content.

This is not a matter of groups. It is more likely when you have a polymorphic object that dynamically gives you access to some data.

To experiment it please install the sample module that I'm providing in this bug report.

You have an object containing a notebook with a dummy condition to hide it based on name.

How to reproduce:
0. Install the attached module
1. create an object to hide tab 1 by setting name to hidden
2. create an object to hide tab 2 by setting name to cache
3. create an object without any tab hidden by setting name to what ever else other than hidden or cache you want.

4. Play by navigating through records using Next Previous arrows

Issue comes when you go from an object that has page2 hidden to an object that has page1 hidden

Revision history for this message
Yannick Vaucher @ Camptocamp (yvaucher-c2c) wrote :
To post a comment you must log in.
This report contains Public information  
Everyone can see this information.

Other bug subscribers

Remote bug watches

Bug watches keep track of this bug in other bug trackers.