TIP: You can type at any time to perform a new search.
Sale Credit Points
sale_credit_point · OCA/sale-workflow
⚠ Security warnings
access_credit_point_history— Access rule grants write/create/unlink on 'model_credit_point_history' to EVERY user (portal/public included): no group is set acl-global-writecredit_points_access_res_users— Access rule grants write on security model 'base.model_res_users' to group 'sale_credit_point.group_manage_credit_point': members can escalate their own permissions acl-privilege-escalation
Found by automated static analysis: these patterns are usually risky, but only a manual review of the module can confirm a real issue.
- Repository
- OCA/sale-workflow · module folder · Try on Runboat
- Module version
- 1.1.0
- Category
- Sales
- Folder size
- 0.07 MB
- License
- AGPL-3
- Application
- No
- Auto-installable
- No
- Website
- https://github.com/OCA/sale-workflow
- Last tracking update
- 2026-08-07 07:56:58
- Authors
- Camptocamp, Odoo Community Association (OCA)
- Maintainers
- Camptocamp, Odoo Community Association (OCA)
- Committers
- Denis Roussel, Weblate, OCA-git-bot, oca-ci, Telmo Santos, Stefan, Hai Lang
Code Analysis ⓘ
Views touched (5)
| XML ID | Name | Model | Type | Status |
|---|---|---|---|---|
view_credit_point_history_search |
credit.point.history.search | credit.point.history | search | New |
view_credit_point_history_tree |
view.credit.point.history.tree | credit.point.history | tree | New |
view_partner_form_points |
res.partner.form.points | res.partner | form | Inherits base.view_partner_form |
view_partner_search_points |
res.partner.search.points | res.partner | search | Inherits base.view_res_partner_filter |
wiz_manage_credit_point |
Credit Point Update | wiz.manage.credit.point | form | New |
HTTP endpoints (0)
No HTTP endpoints found for this module.
Models touched (4)
New fields (6)
-
amountMonetarycurrency_field='credit_point_currency_id'default=0readonly=Truerequired=True -
commentChar -
create_dateDatetime -
credit_point_currency_idMany2onereadonly=Truerelated='partner_id.credit_point_currency_id' -
operationSelectionrequired=Trueselection=POINT_OPERATIONS -
partner_idMany2one → res.partnercomodel_name='res.partner'required=Truestring='Partner'
No public methods.
New fields (4)
-
credit_history_idsOne2many → credit.point.historycomodel_name='credit.point.history'inverse_name='partner_id' -
credit_pointMonetarycurrency_field='credit_point_currency_id'default=0readonly=Truestring='Points Attribution' -
credit_point_currency_idMany2one → res.currencycomodel_name='res.currency'default=<expr> -
yearly_point_increaseMonetarycompute='_compute_yearly_point_increase'currency_field='credit_point_currency_id'readonly=Truestring='Yearly points increase'
-
action_update_credit_point(self)Open update credit point wizard. -
credit_point_bypass_check(self) -
credit_point_decrease(self, amount, comment='') -
credit_point_increase(self, amount, comment='') -
credit_point_replace(self, amount, comment='') -
update_history(self, amount, operation, comment)
New fields (0)
No new fields.
Public methods (5)-
action_cancel(self) -
action_confirm(self)Check credit before confirmation, update credit if check passed. -
credit_point_check(self, user=None)Verify order amount against credit point budget. -
credit_point_check_failed_msg(self)@property -
credit_point_decrease_msg(self)@property
New fields (4)
-
commentTextrequired=True -
credit_pointIntegerrequired=Truestring='Points' -
operationSelectionrequired=Trueselection=POINT_OPERATIONSstring='Type of operation' -
partner_idsMany2many → res.partnerrequired=Truestring='Partners' args: 'res.partner'
-
action_update_credit(self)