[trunk/7.0]On the Anonymous portal you are able to list dashboards

[Csaba TOTH]

Try this:

* install portal_anonymus module
* logout, the portal will come up
* you are on the "News" page for example
* open the search window on the top right
* open the "Add to Dashboard"

Now you are able to see the created dashboards in the system, and you can click on the Add button, what is gone to error:

Client Traceback (most recent call last):
  File "c:\oefwt3\Lib\site-packages\openerp-7.0-py2.7.egg\openerp\addons\web\http.py", line 203, in dispatch
    response["result"] = method(self, **self.params)
TypeError: add_to_dashboard() takes at least 7 arguments (7 given)

Another thing is with the save custom filters (in the same search window).

[Csaba TOTH (tsabi)]

Hi,
on the video i see you didn't logged out. Originally i mean "you are able to see the list of dashboards" when you are logged out, and browsing the anonymous portal.
best regards,
Csaba

[Olivier Dony (Odoo) (odo-openerp)]

Note: The error "TypeError: add_to_dashboard() takes at least 7 arguments (7 given)" was caused by having the Add To Dashboard option shown on screens where it should not have been visible.
This is fixed in addons 7.0 at revision 8910 (revision-id: <email address hidden>).

There is still an issue with the fact that the list of dashboards is readable for the anonymous user. This is not much of a disclosure but some might consider it a security problem nevertheless. The `board` module should enforce better security by default and hide the "Add to Dashboard" option when access to the list of dashboards is not permitted.

[Csaba TOTH (tsabi)]

Hi, exactly this privacy concern was my original purpose to create this bug report!

[Christophe Simonis (OpenERP) (kangol)]

Fixed by 9549 <email address hidden>