mirror of https://github.com/OCA/web.git
Only the admin user (sudo) is allowed to send notifications to other users. The normal users can only send notifications to themselves. This is to prevent attackers to craft malicious notifications and send them to other users using RPC. Correction based on the idea of @hbrunn |
||
---|---|---|
.. | ||
__init__.py | ||
res_users.py |