Commit Graph

6 Commits (79ece2c45d5b51d58f8fcc08d635a898ec1fa22e)

Author SHA1 Message Date
Aitor Bouzas fbb550f65c [MIG] web_notify: Migration to 12.0
Add self-test buttons in demo environment,
Updated readme to show how to test it.
Add buttons to users form
Do not rely on SUPERUSER_ID and avoid getattr usage
2018-10-15 14:53:36 +02:00
Guewen Baconnier ae8e4ec59d Prevent to send web notifications to other users
Only the admin user (sudo) is allowed to send notifications to other
users. The normal users can only send notifications to themselves.

This is to prevent attackers to craft malicious notifications and send
them to other users using RPC.

Correction based on the idea of @hbrunn
2018-10-10 10:40:46 +02:00
Damien Bouvy b7fcfc5a8c [MIG] web_notify: Migration to 11.0
- Use the 'session' class of the JS Framework (session no lounger bound
to web client)
- Test change: compare emitted & received messages based on content, not
order. Using string comparison raises false positives.
2018-10-10 10:40:46 +02:00
Houzéfa Abbasbhay 88e68cf513 [10.0][FIX] web_notify tests: Fix an arg check
Fix a check when comparing a user count with items within a mock call.

The previous method was succeeding by pure luck because OCA test
databases contain 2 users, which happens to be the amount of items
within a mock "call_args" (it contains args + kwargs).
2018-10-10 10:40:46 +02:00
Jay Vora(SerpentCS) 2fc5ab26c6 [MIG] Migration started web_notify 2018-10-10 10:40:46 +02:00
Laurent Mignon (ACSONE) f50f17a174 New module web_notify
This technical module allows you to send instant notification messages from the server to the user in live.
2018-10-10 10:40:46 +02:00