19 lines
708 B
Python
19 lines
708 B
Python
|
# -*- coding: utf-8 -*-
|
||
|
|
# Part of Odoo. See LICENSE file for full copyright and licensing details.
|
||
|
|
|
||
|
|
from odoo import models
|
||
|
|
|
||
|
|
|
||
|
|
class Attachment(models.Model):
|
||
|
|
|
||
|
|
_inherit = "ir.attachment"
|
||
|
|
|
||
|
|
def _can_bypass_rights_on_media_dialog(self, **attachment_data):
|
||
|
|
# We need to allow and sudo the case of an "url + file" attachment,
|
||
|
|
# which is by default forbidden for non admin.
|
||
|
|
# See `_check_serving_attachments`
|
||
|
|
forbidden = 'url' in attachment_data and attachment_data.get('type', 'binary') == 'binary'
|
||
|
|
if forbidden and attachment_data['url'].startswith('/unsplash/'):
|
||
|
|
return True
|
||
|
|
return super()._can_bypass_rights_on_media_dialog(**attachment_data)
|