Daily updates from Odoo
Thursday, March 15, 2018
2 changes
Security fixes and vulnerability patches
Mass mailing users can now choose which outgoing mail server to use for a campaign, with administrators able to set a default server in settings. Mail server login details are also better protected so users can access server choices without seeing sensitive credentials.
Original PR description
Task: https://www.odoo.com/web#id=31737&view_type=form&model=project.task&action=333&active_id=131&menu_id=4720 Pad: https://pad.odoo.com/p/r.1add489078208636962b46f167f1dfce -- I confirm I have signed the CLA and read the PR guidelines at www.odoo.com/submit-pr
Resolved issues and error corrections
The database list returned through JSON-RPC now respects the configured database filter. This prevents users from seeing databases that should be hidden by the server configuration, improving consistency and reducing accidental exposure.
Original PR description
Issue in : Odoo 9.0+ JSON-RPC returns wrong list for database even provided --db-filter openerp/service/db.py : RPC call db service to get database list (direct list no filter apply) https://github.com/odoo/odoo/blob/9.0/openerp/service/db.py#L301,L330 As we have already filtered db list in openerp/http.py https://github.com/odoo/odoo/blob/9.0/openerp/http.py#L1668,L1680 It can be solved by replacing direct `list_dbs()` to `openerp.http.db_list()`