openerp-india team mailing list archive
-
openerp-india team
-
Mailing list archive
-
Message #13620
[Bug 1024532] Re: insufficient validation of orm fields thru xmlrpc
** Attachment added: "create_partner_badfields.py"
https://bugs.launchpad.net/bugs/1024532/+attachment/3222619/+files/create_partner_badfields.py
--
You received this bug notification because you are a member of OpenERP
Indian Team, which is subscribed to OpenERP Server.
https://bugs.launchpad.net/bugs/1024532
Title:
insufficient validation of orm fields thru xmlrpc
Status in OpenERP Server:
New
Bug description:
there seems to be insufficient validation of orm fields when executing a create thru xmlrpc to for example create a partner with the wrong data type or invalid fields.
for example:
partner_data =
{'name':True,'whacky':'123oiuwefkajshfdq39r87239487234'}
- name being a boolean and whacky being a field that is not in the
model.
This creates a new partner called 'True'.
To manage notifications about this bug go to:
https://bugs.launchpad.net/openobject-server/+bug/1024532/+subscriptions
References