← Back to team overview

openerp-india team mailing list archive

[Bug 1024532] Re: insufficient validation of orm fields thru xmlrpc

 

Hello Marcos Mendez ,

I have checked your issue, I am confirming this as a bug. For first issue  you
can set  user define constraint that validate a field.For second issue 
there should be a one warning message for 'whacky' Like  field not found in object.
because it's  shows that record is created with field 'whacky' which does not exist in object.

Thank you!



** Changed in: openobject-server
   Importance: Undecided => Low

** Changed in: openobject-server
       Status: New => Confirmed

** Changed in: openobject-server
     Assignee: (unassigned) => OpenERP's Framework R&D (openerp-dev-framework)

-- 
You received this bug notification because you are a member of OpenERP
Indian Team, which is subscribed to OpenERP Server.
https://bugs.launchpad.net/bugs/1024532

Title:
  insufficient validation of orm fields thru xmlrpc

Status in OpenERP Server:
  Confirmed

Bug description:
  
  there seems to be insufficient validation of orm fields when executing a create thru xmlrpc to for example create a partner with the wrong data type or invalid fields.

  for example:

  partner_data =
  {'name':True,'whacky':'123oiuwefkajshfdq39r87239487234'}

  - name being a boolean and whacky being a field that is not in the
  model.

  This creates a new partner called 'True'.

To manage notifications about this bug go to:
https://bugs.launchpad.net/openobject-server/+bug/1024532/+subscriptions


References