Odoo Changelog — 2021-01-25

Monday, January 25, 2021

1 change · master

Improvements(1)

Enhancements to existing features

[IMP] website(_*): prevent wrong multi website access during dispatch

Coremasterwebsitewebsite_blogwebsite_eventwebsite_event_exhibitorwebsite_event_meetwebsite_event_meet_quizwebsite_event_trackwebsite_forumwebsite_hr_recruitmentwebsite_salewebsite_slidesMedium

Website pages tied to a specific site are now checked more consistently before they are shown, reducing cases where content from the wrong website could be accessed. This centralizes the behavior across many website features, making multi-website setups more reliable and easier to maintain.

Original PR description

Before this commit, routes were prevented to be accessed if the route model was
not accessible from the current website, eg you couldn't access blog1 which is
set to website2 from website 1.
That would raise a 404 even from admin/editor.

This commit introduce that behavior at a lowel level in a generic way, instead
of having to write it on every route.

Note that routes without a model converter won't benefit from this.

Closes #63499

#multi-website#access control#routing