Daily updates from Odoo
Wednesday, March 21, 2018
1 change
Resolved issues and error corrections
The change prevents confusing database errors when an invalid user ID is used during credential checks. Instead, the system returns a standard access denied response, improving reliability and avoiding unnecessary technical error exposure.
Original PR description
**Description of the issue/feature this PR addresses:** Use ORM to test if the user exist, instead SQL request. During an RPC access if you send a bad uid (exemple 'test'): **Current behavior before PR:** It return an SQL error : ``` psycopg2.DataError: invalid input syntax for integer: "test" LINE 1: ... password, password_crypt FROM res_users WHERE id='test' AND... ``` **Desired behavior after PR is merged:** It will return AccesDenied -- I confirm I have signed the CLA and read the PR guidelines at www.odoo.com/submit-pr