NextERP/runbot
5
0
Fork 0
mirror of https://github.com/odoo/runbot.git synced 2025-03-15 23:45:44 +07:00
Code Issues Actions Packages Projects Releases Wiki Activity

[FIX] runbot: use proper manager visibility

Browse Source 
The token is not meant to be used by anyone except runbot managers.

Reported by @nilshamerlinck - thanks!
This commit is contained in:
Olivier Dony 2017-04-27 14:41:56 +02:00
parent 3b1145b4ab
commit e1ecb49f89
1 changed files with 2 additions and 2 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

4
runbot/runbot.py
View File

@ -214,7 +214,7 @@ class runbot_repo(osv.osv):
id1='dependant_id', id2='dependency_id',
string='Extra dependencies',
help="Community addon repos which need to be present to run tests."),
'token': fields.char("Github token"),
'token': fields.char("Github token", groups="runbot.group_runbot_admin"),
'group_ids': fields.many2many('res.groups', string='Limited to groups'),
}
_defaults = {
@ -457,7 +457,7 @@ class runbot_branch(osv.osv):
def _get_pull_head_name(self, cr, uid, ids, field_name, arg, context=None):
r = dict.fromkeys(ids, False)
for bid in ids:
pi = self._get_pull_info(cr, uid, [bid], context=context)
pi = self._get_pull_info(cr, SUPERUSER_ID, [bid], context=context)
if pi:
r[bid] = pi['head']['ref']
return r