Initial commit: Core packages

odoo-bringout-oca-ocb-mail/mail/models/ir_attachment.py

@@ -0,0 +1,94 @@
+# Part of Odoo. See LICENSE file for full copyright and licensing details.
+
+from odoo import _, models, SUPERUSER_ID
+from odoo.exceptions import AccessError, MissingError, UserError
+from odoo.tools import consteq
+
+
+class IrAttachment(models.Model):
+    _inherit = 'ir.attachment'
+
+    def _check_attachments_access(self, attachment_tokens):
+        """This method relies on access rules/rights and therefore it should not be called from a sudo env."""
+        self = self.sudo(False)
+        attachment_tokens = attachment_tokens or ([None] * len(self))
+        if len(attachment_tokens) != len(self):
+            raise UserError(_("An access token must be provided for each attachment."))
+        for attachment, access_token in zip(self, attachment_tokens):
+            try:
+                attachment_sudo = attachment.with_user(SUPERUSER_ID).exists()
+                if not attachment_sudo:
+                    raise MissingError(_("The attachment %s does not exist.", attachment.id))
+                try:
+                    attachment.check('write')
+                except AccessError:
+                    if not access_token or not attachment_sudo.access_token or not consteq(attachment_sudo.access_token, access_token):
+                        message_sudo = self.env['mail.message'].sudo().search([('attachment_ids', 'in', attachment_sudo.ids)], limit=1)
+                        if not message_sudo or not message_sudo.is_current_user_or_guest_author:
+                            raise
+            except (AccessError, MissingError):
+                raise UserError(_("The attachment %s does not exist or you do not have the rights to access it.", attachment.id))
+
+    def _post_add_create(self):
+        """ Overrides behaviour when the attachment is created through the controller
+        """
+        super(IrAttachment, self)._post_add_create()
+        for record in self:
+            record.register_as_main_attachment(force=False)
+
+    def register_as_main_attachment(self, force=True):
+        """ Registers this attachment as the main one of the model it is
+        attached to.
+        """
+        self.ensure_one()
+        if not self.res_model:
+            return
+        related_record = self.env[self.res_model].browse(self.res_id)
+        if not related_record.check_access_rights('write', raise_exception=False):
+            return
+        # message_main_attachment_id field can be empty, that's why we compare to False;
+        # we are just checking that it exists on the model before writing it
+        if related_record and hasattr(related_record, 'message_main_attachment_id'):
+            if force or not related_record.message_main_attachment_id:
+                #Ignore AccessError, if you don't have access to modify the document
+                #Just don't set the value
+                try:
+                    related_record.message_main_attachment_id = self
+                except AccessError:
+                    pass
+
+    def _delete_and_notify(self):
+        for attachment in self:
+            if attachment.res_model == 'mail.channel' and attachment.res_id:
+                target = self.env['mail.channel'].browse(attachment.res_id)
+            else:
+                target = self.env.user.partner_id
+            self.env['bus.bus']._sendone(target, 'ir.attachment/delete', {
+                'id': attachment.id,
+            })
+        self.unlink()
+
+    def _attachment_format(self, legacy=False):
+        res_list = []
+        for attachment in self:
+            res = {
+                'checksum': attachment.checksum,
+                'id': attachment.id,
+                'filename': attachment.name,
+                'name': attachment.name,
+                'mimetype': attachment.mimetype,
+                'type': attachment.type,
+                'url': attachment.url,
+            }
+            if not legacy:
+                res['originThread'] = [('insert', {
+                    'id': attachment.res_id,
+                    'model': attachment.res_model,
+                })]
+            else:
+                res.update({
+                    'res_id': attachment.res_id,
+                    'res_model': attachment.res_model,
+                })
+            res_list.append(res)
+        return res_list