[tryton-debian-vcs] tryton-server branch debian-jessie-3.2 updated. debian/3.2.12-1-2-gaa711ef

Mathias Behrle tryton-debian-vcs at alioth.debian.org
Wed Feb 10 19:55:47 UTC 2016


The following commit has been merged in the debian-jessie-3.2 branch:
https://alioth.debian.org/plugins/scmgit/cgi-bin/gitweb.cgi/?p=tryton/tryton-server.git;a=commitdiff;h=debian/3.2.12-1-2-gaa711ef

commit aa711ef27e2fe495493f6ed925bc78320fed2ec0
Author: Mathias Behrle <mathiasb at m9s.biz>
Date:   Wed Feb 10 18:20:53 2016 +0100

    Releasing debian version 3.2.13-1.
    
    Signed-off-by: Mathias Behrle <mathiasb at m9s.biz>

diff --git a/debian/changelog b/debian/changelog
index 95c04c5..c254450 100644
--- a/debian/changelog
+++ b/debian/changelog
@@ -1,3 +1,9 @@
+tryton-server (3.2.13-1) unstable; urgency=medium
+
+  * Merging upstream version 3.2.13.
+
+ -- Mathias Behrle <mathiasb at m9s.biz>  Wed, 10 Feb 2016 18:20:53 +0100
+
 tryton-server (3.2.12-1) unstable; urgency=medium
 
   * Merging upstream version 3.2.12.
commit 98582ae0065fb020eae1c087c3a913f9365b074e
Author: Mathias Behrle <mathiasb at m9s.biz>
Date:   Wed Feb 10 18:20:52 2016 +0100

    Merging upstream version 3.2.13.

diff --git a/CHANGELOG b/CHANGELOG
index 0e457ce..759bf68 100644
--- a/CHANGELOG
+++ b/CHANGELOG
@@ -1,3 +1,8 @@
+Version 3.2.13 - 2016-02-06
+* Bug fixes (see mercurial logs for details)
+* Don't read historized user when evaluating record rules as it could lead to
+  past privilege escalation.
+
 Version 3.2.12 - 2016-01-11
 * Bug fixes (see mercurial logs for details)
 
diff --git a/PKG-INFO b/PKG-INFO
index 5a3cdbe..ecb743a 100644
--- a/PKG-INFO
+++ b/PKG-INFO
@@ -1,6 +1,6 @@
 Metadata-Version: 1.1
 Name: trytond
-Version: 3.2.12
+Version: 3.2.13
 Summary: Tryton server
 Home-page: http://www.tryton.org/
 Author: Tryton
diff --git a/trytond.egg-info/PKG-INFO b/trytond.egg-info/PKG-INFO
index 5a3cdbe..ecb743a 100644
--- a/trytond.egg-info/PKG-INFO
+++ b/trytond.egg-info/PKG-INFO
@@ -1,6 +1,6 @@
 Metadata-Version: 1.1
 Name: trytond
-Version: 3.2.12
+Version: 3.2.13
 Summary: Tryton server
 Home-page: http://www.tryton.org/
 Author: Tryton
diff --git a/trytond/ir/rule.py b/trytond/ir/rule.py
index 479f162..3837c11 100644
--- a/trytond/ir/rule.py
+++ b/trytond/ir/rule.py
@@ -144,7 +144,7 @@ class Rule(ModelSQL, ModelView):
     def _get_context():
         User = Pool().get('res.user')
         user_id = Transaction().user
-        with Transaction().set_user(0, set_context=True):
+        with Transaction().set_context(_check_access=False, _datetime=None):
             user = User(user_id)
         return {
             'user': user,
diff --git a/trytond/version.py b/trytond/version.py
index ead27c9..690151c 100644
--- a/trytond/version.py
+++ b/trytond/version.py
@@ -1,6 +1,6 @@
 #This file is part of Tryton.  The COPYRIGHT file at the top level of
 #this repository contains the full copyright notices and license terms.
 PACKAGE = "trytond"
-VERSION = "3.2.12"
+VERSION = "3.2.13"
 LICENSE = "GPL-3"
 WEBSITE = "http://www.tryton.org/"
-- 
tryton-server



More information about the tryton-debian-vcs mailing list