Skip to content

[18.0][FIX] dms: Remove public read access to trigger redirect - #503

Merged
OCA-git-bot merged 1 commit into
OCA:18.0from
Tecnativa:18.0-fix-dms
Aug 11, 2026
Merged

[18.0][FIX] dms: Remove public read access to trigger redirect#503
OCA-git-bot merged 1 commit into
OCA:18.0from
Tecnativa:18.0-fix-dms

Conversation

@christian-ramos-tecnativa

Copy link
Copy Markdown
Contributor

In order for the access-token to be processed and redirect to the proper url my/dms/directory... the user access must fail first here https://github.com/OCA/OCB/blob/18.0/addons/portal/controllers/mail.py#L155 otherwise you will be redirected to the login page even with the access token available, to test this:

  1. Create a folder
  2. Press share action
  3. Try to enter the url without login
  4. You will get redirected to the login, with this patch the folder content its properly displayed
    @Tecnativa TT63966
    @pedrobaeza @victoralmau

@pedrobaeza pedrobaeza added this to the 18.0 milestone Aug 11, 2026
Comment thread dms/security/ir.model.access.csv Outdated
@pedrobaeza

Copy link
Copy Markdown
Member

This was changed in 4595cc8, so @victoralmau can tell us if there's a reason for that.

@pedrobaeza
pedrobaeza requested a review from victoralmau August 11, 2026 11:06

@victoralmau victoralmau left a comment

Copy link
Copy Markdown
Member

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

The change seems coherent.

For folders and files, there are already ACLs named base.group_portal and base.group_user.

The important thing is that the URL for accessing a folder works correctly and that a logged-in user can view the appropriate content from /my.

Functionality has been tested.

@pedrobaeza

Copy link
Copy Markdown
Member

/ocabot merge patch

@OCA-git-bot

Copy link
Copy Markdown
Contributor

This PR looks fantastic, let's merge it!
Prepared branch 18.0-ocabot-merge-pr-503-by-pedrobaeza-bump-patch, awaiting test results.

@OCA-git-bot
OCA-git-bot merged commit 62269d3 into OCA:18.0 Aug 11, 2026
7 checks passed
@OCA-git-bot

Copy link
Copy Markdown
Contributor

Congratulations, your PR was merged at 0e2a12d. Thanks a lot for contributing to OCA. ❤️

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Projects

None yet

Development

Successfully merging this pull request may close these issues.

4 participants