← Back to team overview

openerp-india team mailing list archive

[Bug 1024532] Re: insufficient validation of orm fields thru xmlrpc

 

** Attachment added: "create_partner_badfields.py"
   https://bugs.launchpad.net/bugs/1024532/+attachment/3222619/+files/create_partner_badfields.py

-- 
You received this bug notification because you are a member of OpenERP
Indian Team, which is subscribed to OpenERP Server.
https://bugs.launchpad.net/bugs/1024532

Title:
  insufficient validation of orm fields thru xmlrpc

Status in OpenERP Server:
  New

Bug description:
  
  there seems to be insufficient validation of orm fields when executing a create thru xmlrpc to for example create a partner with the wrong data type or invalid fields.

  for example:

  partner_data =
  {'name':True,'whacky':'123oiuwefkajshfdq39r87239487234'}

  - name being a boolean and whacky being a field that is not in the
  model.

  This creates a new partner called 'True'.

To manage notifications about this bug go to:
https://bugs.launchpad.net/openobject-server/+bug/1024532/+subscriptions


References