TIP: You can type at any time to perform a new search.
CMS notification
cms_notification · OCA/website-cms
⚠ Security warnings
portal_users_can_write_users— Access rule grants write on security model 'base.model_res_users' to group 'base.group_portal': members can escalate their own permissions acl-privilege-escalation
Found by automated static analysis: these patterns are usually risky, but only a manual review of the module can confirm a real issue.
- Repository
- OCA/website-cms · module folder · Try on Runboat
- Module version
- 1.0.3
- Category
- Uncategorized
- Folder size
- 0.13 MB
- License
- LGPL-3
- Application
- No
- Auto-installable
- No
- Website
- None
- Last tracking update
- 2026-08-07 07:25:01
- Authors
- Camptocamp, Odoo Community Association (OCA)
- Maintainers
- Camptocamp, Odoo Community Association (OCA)
- Committers
- Simone Orsi, GitHub, OCA Transbot, oca-travis
Code Analysis ⓘ
Views touched (8)
| XML ID | Name | Model | Type | Status |
|---|---|---|---|---|
assets_frontend |
CMS notification frontend assets | ir.ui.view | qweb | Inherits website.assets_frontend |
field_widget_notification_selection |
CMS notification selection widget | ir.ui.view | qweb | Inherits cms_form.field_widget_radio_selection |
listing |
CMS notification listing | ir.ui.view | qweb | New |
mail_message_subtype_form |
mail_digest mail.message.subtype.form | mail.message.subtype | form | Inherits mail.view_mail_message_subtype_form |
message_subtype_tree |
mail_digest mail.message.subtype.tree | mail.message.subtype | tree | Inherits mail.view_message_subtype_tree |
notify_email_help_email |
CMS notification form - notify_email help `Email` | ir.ui.view | qweb | New |
notify_email_help_inbox |
CMS notification form - notify_email help `Inbox` | ir.ui.view | qweb | New |
user_menu |
CMS notification user menu | ir.ui.view | qweb | Inherits website.layout |
HTTP endpoints (2)
| Route(s) | Handler | Auth | Type | Methods | Flags |
|---|---|---|---|---|---|
/my/notifications |
MyNotificationsController.cms_form |
user | http | ALL | website |
/my/settings/notifications |
PanelFormController.cms_form |
user | http | ALL | website |
Models touched (6)
New fields (0)
No new fields.
Public methods (1)-
w_option_items(self)@propertyChange options order and inject help text.
New fields (0)
No new fields.
Public methods (4)-
check_view_permission(self, item)Check read permission on given item. We could list messages that are attached to other records. If the permissions for this records has changed then the user viewing the notification may not have permissions to read it anymore. -
form_description(self)@property -
form_search_domain(self, search_values) -
form_title(self)@property
New fields (0)
No new fields.
Public methods (7)-
form_after_create_or_update(self, values, extra_values)Update subtype configuration for `_form_subtype_fields`. -
form_description(self)@property -
form_get_loader(self, fname, field, main_object=None, value=None, **req_values)Override to provide automatic loader for boolean fields. -
form_msg_success_updated(self)@property -
form_next_url(self, main_object=None) -
form_title(self)@property -
form_widgets(self)@property
New fields (2)
-
ref_item_idReferencecompute='_compute_ref_item_id'readonly=Trueselection='_selection_ref_item_id'string='Referenced item' -
ref_model_idMany2one → ir.modelcomodel_name='ir.model'compute='_compute_ref_model_id'string='Referenced model'
-
is_read(self, partner=None) -
is_unread(self, partner=None)
New fields (1)
-
cms_typeBooleanhelp="If active, this message subtype will be visible in users' notifications control panel." args: 'Visible in CMS control panel'
No public methods.
New fields (1)
-
has_unread_notifBooleancompute='_compute_has_unread_notif'readonly=Truestring='Has unread notif'
No public methods.
Loading…