FIX security issue + details

agreement/i18n/agreement.pot

@@ -36,11 +36,6 @@ msgstr ""
 msgid "Archived"
 msgstr ""
 
-#. module: agreement
-#: model:ir.model.fields,field_description:agreement.field_agreement__code
-msgid "Code"
-msgstr ""
-
 #. module: agreement
 #: model:ir.model.fields,field_description:agreement.field_agreement__company_id
 msgid "Company"
@@ -76,6 +71,11 @@ msgstr ""
 msgid "ID"
 msgstr ""
 
+#. module: agreement
+#: model:ir.model.fields,help:agreement.field_agreement__code
+msgid "ID used for internal contract tracking."
+msgstr ""
+
 #. module: agreement
 #: model:ir.model.fields,help:agreement.field_agreement__active
 msgid "If unchecked, it will allow you to hide the agreement without removing it."
@@ -107,6 +107,11 @@ msgstr ""
 msgid "Partner"
 msgstr ""
 
+#. module: agreement
+#: model:ir.model.fields,field_description:agreement.field_agreement__code
+msgid "Reference"
+msgstr ""
+
 #. module: agreement
 #: model_terms:ir.ui.view,arch_db:agreement.agreement_search
 msgid "Search Agreements"

agreement/i18n/pt_PT.po

@@ -0,0 +1,157 @@
+# Translation of Odoo Server.
+# This file contains the translation of the following modules:
+#	* agreement
+#
+msgid ""
+msgstr ""
+"Project-Id-Version: Odoo Server 12.0\n"
+"Report-Msgid-Bugs-To: \n"
+"PO-Revision-Date: 2019-05-04 16:02+0000\n"
+"Last-Translator: JC <rdc02271@yahoo.com>\n"
+"Language-Team: none\n"
+"Language: pt_PT\n"
+"MIME-Version: 1.0\n"
+"Content-Type: text/plain; charset=UTF-8\n"
+"Content-Transfer-Encoding: \n"
+"Plural-Forms: nplurals=2; plural=n > 1;\n"
+"X-Generator: Weblate 3.5.1\n"
+
+#. module: agreement
+#: model:ir.model.fields,field_description:agreement.field_agreement__active
+msgid "Active"
+msgstr "Activo"
+
+#. module: agreement
+#: model:ir.model,name:agreement.model_agreement
+#: model_terms:ir.ui.view,arch_db:agreement.agreement_form
+msgid "Agreement"
+msgstr "Acordo"
+
+#. module: agreement
+#: model:ir.actions.act_window,name:agreement.agreement_action
+#: model:ir.ui.menu,name:agreement.agreement_menu
+#: model_terms:ir.ui.view,arch_db:agreement.agreement_tree
+msgid "Agreements"
+msgstr "Acordos"
+
+#. module: agreement
+#: model_terms:ir.ui.view,arch_db:agreement.agreement_search
+msgid "Archived"
+msgstr "Arquivado"
+
+#. module: agreement
+#: model:ir.model.fields,field_description:agreement.field_agreement__company_id
+msgid "Company"
+msgstr "Empresa"
+
+#. module: agreement
+#: model_terms:ir.ui.view,arch_db:agreement.agreement_form
+msgid "Configuration"
+msgstr "Configuração"
+
+#. module: agreement
+#: model:ir.model.fields,field_description:agreement.field_agreement__create_uid
+msgid "Created by"
+msgstr "Criado por"
+
+#. module: agreement
+#: model:ir.model.fields,field_description:agreement.field_agreement__create_date
+msgid "Created on"
+msgstr "Criado em"
+
+#. module: agreement
+#: model:ir.model.fields,field_description:agreement.field_agreement__display_name
+msgid "Display Name"
+msgstr ""
+
+#. module: agreement
+#: model:ir.model.fields,field_description:agreement.field_agreement__end_date
+msgid "End Date"
+msgstr ""
+
+#. module: agreement
+#: model:ir.model.fields,field_description:agreement.field_agreement__id
+msgid "ID"
+msgstr ""
+
+#. module: agreement
+#: model:ir.model.fields,help:agreement.field_agreement__code
+msgid "ID used for internal contract tracking."
+msgstr ""
+
+#. module: agreement
+#: model:ir.model.fields,help:agreement.field_agreement__active
+msgid "If unchecked, it will allow you to hide the agreement without removing it."
+msgstr ""
+
+#. module: agreement
+#: model:ir.model.fields,field_description:agreement.field_agreement____last_update
+msgid "Last Modified on"
+msgstr ""
+
+#. module: agreement
+#: model:ir.model.fields,field_description:agreement.field_agreement__write_uid
+msgid "Last Updated by"
+msgstr ""
+
+#. module: agreement
+#: model:ir.model.fields,field_description:agreement.field_agreement__write_date
+msgid "Last Updated on"
+msgstr ""
+
+#. module: agreement
+#: model_terms:ir.ui.view,arch_db:agreement.agreement_search
+msgid "Name or Number"
+msgstr ""
+
+#. module: agreement
+#: model:ir.model.fields,field_description:agreement.field_agreement__partner_id
+#: model_terms:ir.ui.view,arch_db:agreement.agreement_search
+msgid "Partner"
+msgstr ""
+
+#. module: agreement
+#: model:ir.model.fields,field_description:agreement.field_agreement__code
+msgid "Reference"
+msgstr ""
+
+#. module: agreement
+#: model_terms:ir.ui.view,arch_db:agreement.agreement_search
+msgid "Search Agreements"
+msgstr ""
+
+#. module: agreement
+#: model:ir.model.fields,field_description:agreement.field_agreement__signature_date
+#: model_terms:ir.ui.view,arch_db:agreement.agreement_search
+msgid "Signature Date"
+msgstr ""
+
+#. module: agreement
+#: model:ir.model.fields,field_description:agreement.field_agreement__start_date
+msgid "Start Date"
+msgstr ""
+
+#. module: agreement
+#: model:ir.model.fields,help:agreement.field_agreement__partner_id
+msgid "The customer or vendor this agreement is related to."
+msgstr ""
+
+#. module: agreement
+#: sql_constraint:agreement:0
+msgid "This agreement code already exists for this partner!"
+msgstr ""
+
+#. module: agreement
+#: model:ir.model.fields,field_description:agreement.field_agreement__name
+msgid "Title"
+msgstr ""
+
+#. module: agreement
+#: model:ir.model.fields,help:agreement.field_agreement__end_date
+msgid "When the agreement ends."
+msgstr ""
+
+#. module: agreement
+#: model:ir.model.fields,help:agreement.field_agreement__start_date
+msgid "When the agreement starts."
+msgstr ""

agreement/models/agreement.py

@@ -16,8 +16,7 @@ class Agreement(models.Model):
         domain=[('parent_id', '=', False)])
     company_id = fields.Many2one(
         'res.company', string='Company',
-        default=lambda self: self.env['res.company']._company_default_get(
-            'agreement'))
+        default=lambda self: self.env['res.company']._company_default_get())
     active = fields.Boolean(default=True)
     signature_date = fields.Date()
     start_date = fields.Date()
@@ -28,7 +27,7 @@ class Agreement(models.Model):
         for agr in self:
             name = agr.name
             if agr.code:
-                name = u'[%s] %s' % (agr.code, agr.name)
+                name = '[%s] %s' % (agr.code, agr.name)
             res.append((agr.id, name))
         return res
 

agreement/security/ir.model.access.csv

@@ -1,2 +1,3 @@
 id,name,model_id:id,group_id:id,perm_read,perm_write,perm_create,perm_unlink
 access_agreement_read,Read access on agreement to Employees,model_agreement,base.group_user,1,0,0,0
+access_agreement_full,Full access on agreement grp,model_agreement,base.group_no_one,1,1,1,1