Comment 5 for bug 1070884

Revision history for this message
Daniel Reis (dreis-pt) wrote : Re: ir_rule should apply to the result of a Model.write()

I have to agree that there shouldn't be an inconsistency between what you can achieve through a write() and a create().
I think this qualifies as a "security vulnerability".