openerp-community team mailing list archive

["Stéphane Wirtel, OpenERP" <stw@xxxxxxxxxxx>]

Hi,

We have the pleasure to announce a new revision of OpenERP 5.0.

This release contains lots of bug fixes and one important security fix which you can find in this brief summary.
In this version we have back-ported the safe_eval function from the trunk version.
But if you want to find more details you can look at the Changelogs [1]

The Windows Installers will be made available as soon as possible.


Server:
========

* Bugfixes
----------

* Use the safe_eval function from trunk
* Don't marshal None in XML-RPC
* Correct the field.related behavior at write()
* Fix a problem with the "Resynchronise Terms" wizard
* Fix a bug in the read function if the field is a function field or a many2one and store=True
* Fix the RNG, the filter attribute was missing

Improvements
------------

* Backport the safe_eval function from the trunk version of OpenERP
* Better Logging, display database name in the logger
* Add the @logged decorator also log exceptions
* Add the @traceback decorator that log the traceback at call


Bugfixes (addons)
-----------------

* Use the safe_eval function from trunk
* account : Bank statement should allow opening entries to reconcile disrespecting jornal
* account : Overdue message wizard corrected
* account : Partner Balance report filter corrected
* account : Unpaid invoices should not include proforma type of invoices
* account : fixed _search_amount() ethod to allow operators like <, >, =, !=, in and not in
* account : sequences in fiscal years should be restricted to the same type.
* account_date_check : Corrections in check_date constraint of move line
* account_followup : Report corrected by putting formatLang for maturity date
* crm: fixes send reminder.
* l10n_be : VAT Declaration wizard corrected
* l10n_be : Wizard of VAT intra corrected
* l10n_be : VAT Listing Wizard corrected
* l10n_ch : Correction on making payment with DTA
* purchase : Calculation of minimum planned date should not fail when there is no PO Line.
* stock: Use the standard price for the default price in the wizard of a partial picking
* wiki : Corrections for history revision differences,_rec_name corrected

Improvements:
-------------

* The translations have been updated

* account : Improve the calculation of general ledger
* account : General Journal and Central Journal Reports Corrected & Optimized
* account : General Ledger report improved
* account : Read Access for Fiscalyear given to Partner Manager
* account : Pay Invoice Wizard in foreign currency
* account : Use the right journal and period ids for the General Journal Report
* account : added notification on absence of invoice sequence number
* crm_configuration : Stage should be set to the basic stage of opportunity when leads are converted to opportunity.
* hr_timesheet : Onchange of user was counting changed user into context
* hr_timesheet_sheet : timesheet should only be confirmed when no. of sign in entries equal to sign out
* mrp : Cancellation of procurement allowed if it has no moves attached
* mrp: Attribute the right destination location
* mrp_repair : Creation of invoices corrected from repairs with fees
* purchase : Translations corrected
* report_intrastat : Correction in PSQL View creation
* rurchase : Report should show Partner of destination address
* sale : Cancellation of Order should be allowed by un-linking the Pickings to it
* sale : Correction on advance invoice wizard
* sale : Included customer reference in advance invoice
* sale : Make Invoice button set to invisible when invoiced.
* sale_crm : Case should be created with the user which is supplied from the wizard,not the current logged in user
* stock : Chained picking should generate same picking for moves
* stock : Manually created stock moves should confirm without fail
* stock : The return picking wizard has been improved


You will find the Windows Installers and the tarball archives on OpenERP download page.

Tarballs:
=========
  * Server: http://openerp.com/download/stable/source/openerp-server-5.0.13.tar.gz
  * Client: http://openerp.com/download/stable/source/openerp-client-5.0.13.tar.gz
  * Web: http://openerp.com/download/stable/source/openerp-web-5.0.13.tar.gz

You can contribute to OpenERP on LaunchPad.

* OpenERP Download page: http://openerp.com/downloads.html
* OpenObject Project on LaunchPad: https://launchpad.net/openobject
* Translations: https://translations.launchpad.net/openobject
* Bug Reporting: https://bugs.launchpad.net/openobject/+filebug
* [1] Changelogs:
  * Server: http://bazaar.launchpad.net/~openerp/openobject-server/5.0/annotate/head:/doc/Changelog
  * Client: http://bazaar.launchpad.net/~openerp/openobject-client/5.0/annotate/head:/doc/Changelog
  * Web: http://bazaar.launchpad.net/~openerp/openobject-client-web/5.0/annotate/head:/doc/ChangeLog

For more information, take a look at the wiki and the forum.

The OpenERP Team,

-- 
Stephane Wirtel - "As OpenERP is OpenSource, please feel free to contribute."
Quality/Release Manager
Technical Project Manager
OpenERP S.A.
Chaussee de Namur, 40
B-1367 Grand-Rosière
Tel: +32.81.81.37.00
Web: http://www.openerp.com
Planet: http://www.openerp.com/planet/
Blog: http://stephane-wirtel-at-tiny.blogspot.com


=== modified file 'bin/service/security.py'
--- bin/service/security.py	2009-12-11 11:03:12 +0000
+++ bin/service/security.py	2010-06-02 14:43:40 +0000
@@ -45,7 +45,7 @@
 
 def check(db, uid, passwd):
     if not passwd:
-        return False
+        raise Exception('AccessDenied')
     cached_pass = _uid_cache.get(db, {}).get(uid)
     if (cached_pass is not None) and cached_pass == passwd:
         return True



_______________________________________________
Mailing list: https://launchpad.net/~openerp-expert-framework
Post to     : openerp-expert-framework@xxxxxxxxxxxxxxxxxxx
Unsubscribe : https://launchpad.net/~openerp-expert-framework
More help   : https://help.launchpad.net/ListHelp