[tryton-debian-vcs] tryton-server branch upstream-3.6 updated. upstream/3.6.6-1-gc956a5c

[Mathias Behrle]

The following commit has been merged in the upstream-3.6 branch:
https://alioth.debian.org/plugins/scmgit/cgi-bin/gitweb.cgi/?p=tryton/tryton-server.git;a=commitdiff;h=upstream/3.6.6-1-gc956a5c

commit c956a5c258b1b79f81b86cf16a3bd13e4ad4e645
Author: Mathias Behrle <mathiasb at m9s.biz>
Date:   Wed Feb 10 18:26:01 2016 +0100

    Adding upstream version 3.6.7.
    
    Signed-off-by: Mathias Behrle <mathiasb at m9s.biz>

diff --git a/CHANGELOG b/CHANGELOG
index 6eac27e..8f80168 100644
--- a/CHANGELOG
+++ b/CHANGELOG
@@ -1,3 +1,8 @@
+Version 3.6.7 - 2016-02-06
+* Bug fixes (see mercurial logs for details)
+* Don't read historized user when evaluating record rules as it could lead to
+  past privilege escalation.
+
 Version 3.6.6 - 2016-01-11
 * Bug fixes (see mercurial logs for details)
 
diff --git a/PKG-INFO b/PKG-INFO
index 395efbe..f70441a 100644
--- a/PKG-INFO
+++ b/PKG-INFO
@@ -1,6 +1,6 @@
 Metadata-Version: 1.1
 Name: trytond
-Version: 3.6.6
+Version: 3.6.7
 Summary: Tryton server
 Home-page: http://www.tryton.org/
 Author: Tryton
diff --git a/trytond.egg-info/PKG-INFO b/trytond.egg-info/PKG-INFO
index 395efbe..f70441a 100644
--- a/trytond.egg-info/PKG-INFO
+++ b/trytond.egg-info/PKG-INFO
@@ -1,6 +1,6 @@
 Metadata-Version: 1.1
 Name: trytond
-Version: 3.6.6
+Version: 3.6.7
 Summary: Tryton server
 Home-page: http://www.tryton.org/
 Author: Tryton
diff --git a/trytond/__init__.py b/trytond/__init__.py
index 933c1c1..7db9720 100644
--- a/trytond/__init__.py
+++ b/trytond/__init__.py
@@ -4,7 +4,7 @@ import os
 import time
 from email import charset
 
-__version__ = "3.6.6"
+__version__ = "3.6.7"
 
 os.environ['TZ'] = 'UTC'
 if hasattr(time, 'tzset'):
diff --git a/trytond/ir/rule.py b/trytond/ir/rule.py
index 351b577..4fadc62 100644
--- a/trytond/ir/rule.py
+++ b/trytond/ir/rule.py
@@ -142,7 +142,7 @@ class Rule(ModelSQL, ModelView):
     def _get_context():
         User = Pool().get('res.user')
         user_id = Transaction().user
-        with Transaction().set_context(_check_access=False):
+        with Transaction().set_context(_check_access=False, _datetime=None):
             user = EvalEnvironment(User(user_id), User)
         return {
             'user': user,
-- 
tryton-server