TIP: You can type at any time to perform a new search.
Products Wishlist
website_sale_wishlist · OCA/e-commerce
⚠ Security warnings
access_product_wishlist— Access rule grants write/create/unlink on 'model_product_wishlist' to EVERY user (portal/public included): no group is set acl-global-write
Found by automated static analysis: these patterns are usually risky, but only a manual review of the module can confirm a real issue.
- Repository
- OCA/e-commerce · module folder · Try on Runboat
- Module version
- 1.0.0
- Category
- Website
- Folder size
- 0.32 MB
- License
- LGPL-3
- Application
- No
- Auto-installable
- No
- Website
- https://tecnativa.com/
- Last tracking update
- 2026-08-07 07:17:47
- Authors
- Odoo Community Association (OCA), Tecnativa
- Maintainers
- Odoo Community Association (OCA), Tecnativa
- Committers
- Pedro M. Baeza, Jairo Llopis, David, Weblate, OCA Transbot, oca-travis, reinka
Code Analysis ⓘ
Views touched (12)
| XML ID | Name | Model | Type | Status |
|---|---|---|---|---|
assets_frontend |
assets_frontend | ir.ui.view | qweb | Inherits website.assets_frontend |
assets_frontend_demo |
assets_frontend_demo | ir.ui.view | qweb | Inherits website.assets_frontend |
header |
Wishlist Menu | ir.ui.view | qweb | Inherits website_sale.header |
heart |
Heart Icon | ir.ui.view | qweb | New |
hidden_wishlist_only_input |
Hidden Wishlist Input to Preserve Filters | ir.ui.view | qweb | New |
menu |
Wishlist Menu | ir.ui.view | qweb | New |
product_add_to_wishlist |
Add to Wishlist From Form | ir.ui.view | qweb | Inherits website_sale.product |
product_toggle |
Add to Wishlist Widget | ir.ui.view | qweb | New |
products |
Enable Wishlist in Shop | ir.ui.view | qweb | Inherits website_sale.products |
products_add_to_wishlist |
Add to Wishlist From List | ir.ui.view | qweb | Inherits website_sale.products_item |
products_attributes |
Preserve Wishlist Filter When Choosing Attributes | ir.ui.view | qweb | Inherits website_sale.products_attributes |
search |
Preserve Wishlist Filter When Searching | ir.ui.view | qweb | Inherits website_sale.search |
HTTP endpoints (2)
| Route(s) | Handler | Auth | Type | Methods | Flags |
|---|---|---|---|---|---|
| (inherited route override) | Wishlist.shop |
inherited | http | ALL | |
/shop/wishlist/toggle/<model('product.template'):product> |
Wishlist.wishlist_toggle |
public | json | ALL | website |
Models touched (4)
New fields (0)
No new fields.
Public methods (1)-
wishlisted(self)@api.multi@tools.ormcache('self.ids', 'self.env.uid', 'self.env.user.current_session')Check if all products are wishlisted in current session.
New fields (4)
-
product_tmpl_idMany2one → product.templatecomodel_name='product.template'help='Wishlisted product.'ondelete='cascade'required=Truestring='Product' -
sessionChardefault=<expr>help='Website session identifier where this product was wishlisted.' -
user_idMany2one → res.userscomodel_name='res.users'default=<expr>help='User that wishlisted this product.'ondelete='cascade'string='User' -
website_idMany2one → websitecomodel_name='website'default=<expr>help='Website where the user wishlisted the product.'ondelete='cascade'required=Truestring='Website'
-
create(self, vals)@api.model -
unlink(self)@api.multi -
write(self, vals)@api.multi
New fields (1)
-
current_sessionCharcompute='_compute_current_session'
-
check_credentials(self, password)@api.modelMake all this session's wishlists belong to its owner user.
New fields (0)
No new fields.
Public methods (2)-
wishlist_product_ids(self)@api.multi@tools.ormcache('self.ids', 'self.env.uid', 'self.env.user.current_session')Get wishlisted products for current session. :return list: List of IDs. Not returning records because they could lead to errors if you try to browse them when loaded from cache and cached ones used a cursor that is now closed. -
wishlisted_product_template_ids(self)@api.multi@tools.ormcache('self.ids', 'self.env.uid', 'self.env.user.current_session')Get ``product.template`` records wishlisted in current session. :return list: List of IDs. Not returning records because they could lead to errors if you try to browse them when loaded from cache and cached ones used a cursor that is now closed.
Loading…