[6.1] notebook page can see content of hidden pages by navigating through record
Affects | Status | Importance | Assigned to | Milestone | |
---|---|---|---|---|---|
Odoo Web (MOVED TO GITHUB) |
New
|
Undecided
|
Unassigned |
Bug Description
Maybe related to #1029286
However this one is a bit different case and a more probable one and even more dangerous one.
Let's create a notebook with multiple pages. Each page has a rule with attrs to be hidden or not.
You will be able to see and edit some content in a page that should be hidden if you switch from an object that allow you access to those data to an other that should hide it. The tab will be hidden but you will see content.
This is not a matter of groups. It is more likely when you have a polymorphic object that dynamically gives you access to some data.
To experiment it please install the sample module that I'm providing in this bug report.
You have an object containing a notebook with a dummy condition to hide it based on name.
How to reproduce:
0. Install the attached module
1. create an object to hide tab 1 by setting name to hidden
2. create an object to hide tab 2 by setting name to cache
3. create an object without any tab hidden by setting name to what ever else other than hidden or cache you want.
4. Play by navigating through records using Next Previous arrows
Issue comes when you go from an object that has page2 hidden to an object that has page1 hidden