Daily updates from Odoo
Monday, August 29, 2022
1 change · master
Security fixes and vulnerability patches
Archived Knowledge articles are no longer reachable through shared article links, helping ensure users only see content that should be available. The update also hides actions that do not apply to archived articles and makes the public not-found message clearer.
Original PR description
The method _fetch_article was using browse instead of search. That means that archived articles could be retrieved when accessing the route of the article. As we don't make any difference between Forbidden and Not Found error, this commit replaces the browse by search method that will automatically check access rules but also filter out archived articles. Task-2950423