Commit Graph

10 Commits (cfcc708554363759a0e5034205ee88f1bcc03ad5)

Author SHA1 Message Date
Guewen Baconnier 7924072514 Prevent to send web notifications to other users
Only the admin user (sudo) is allowed to send notifications to other
users. The normal users can only send notifications to themselves.

This is to prevent attackers to craft malicious notifications and send
them to other users using RPC.

Correction based on the idea of @hbrunn
2018-10-09 08:28:53 +02:00
Guewen Baconnier 4fd13e22da Make notify options variadic
It opens for extensions.
The implemented options now allow to configure the name and the icon of
the link for the action. Addons could easily add new features as the
arguments are no longer predefined, they'll all be available in the
'options' dictionary.
2018-07-31 15:19:33 +02:00
Guewen Baconnier b333cdc7b1 Add possibility to return an action in a notification 2018-07-31 15:17:06 +02:00
Guewen Baconnier 8d3f2749e4 web_notify: add feature to reload current view 2018-07-31 15:15:50 +02:00
Jay Vora(SerpentCS) 012b45c3be [MIG] Migration of web_notify 2016-11-18 19:01:16 +05:30
Jay Vora(SerpentCS) 6a1ebe8e3d [MIG] Migration of web_notify 2016-11-18 18:52:57 +05:30
Laurent Mignon (ACSONE) 80674a6241 Don't store channel names since the perf gain is negligible and not worth additional database columns. 2016-09-21 15:37:56 +02:00
Laurent Mignon (ACSONE) acb8ce6ff4 Remove required flag 2016-09-21 12:01:21 +02:00
Laurent Mignon (ACSONE) 8b2079b3ef Improve logic and add tests 2016-09-21 11:05:31 +02:00
Laurent Mignon (ACSONE) 8fa467fa1f New module web_notify
This technical module allows you to send instant notification messages from the server to the user in live.
2016-09-20 17:56:56 +02:00