TIP: You can type at any time to perform a new search.
Web Shortcuts
web_shortcuts · OCA/web
⚠ Security warnings
access_web_shortcut— Access rule grants write/create/unlink on 'model_web_shortcut' to EVERY user (portal/public included): no group is set acl-global-write
Found by automated static analysis: these patterns are usually risky, but only a manual review of the module can confirm a real issue.
- Repository
- OCA/web · module folder · Try on Runboat
- Module version
- 1.0.0
- Category
- Tools
- Folder size
- 0.17 MB
- License
- AGPL-3
- Application
- No
- Auto-installable
- No
- Website
- http://openerp.com
- Last tracking update
- 2026-08-07 07:03:03
- Authors
- OpenERP SA, Odoo Community Association (OCA)
- Maintainers
- OpenERP SA, Odoo Community Association (OCA)
- Committers
- Yannick Vaucher, Stéphane Bidoul, Alexandre Fayolle, GitHub, Stéphane Bidoul (ACSONE), Adrien Peiffer, Weblate, OCA Transbot, oca-travis, Adil Houmadi
- Odoo dependencies
-
odoo/odoo:- base
- Python dependencies
- None
- System dependencies
- None
- Required by
- None
- Description
Code Analysis ⓘ
Views touched (1)
| XML ID | Name | Model | Type | Status |
|---|---|---|---|---|
assets_backend |
filter_selection | ir.ui.view | qweb | Inherits web.assets_backend |
HTTP endpoints (0)
No HTTP endpoints found for this module.
Models touched (2)
New fields (0)
No new fields.
Public methods (1)-
unlink(self)@api.multi
New fields (3)
-
menu_idMany2one → ir.ui.menuondelete='cascade' args: 'ir.ui.menu' -
nameCharsize=64 args: 'Shortcut Name' -
user_idMany2one → res.usersdefault=<expr>ondelete='cascade'required=Trueselect=True args: 'res.users', 'User Ref.'
-
get_user_shortcuts(self, user_id)@api.model