From 094228b3aef54a0e2e24bf63a32aec4e2568d2ee Mon Sep 17 00:00:00 2001
From: =?UTF-8?q?Dar=C3=ADo=20Lodeiros?= <dario@commitsun.com>
Date: Thu, 14 Jul 2022 20:09:30 +0200
Subject: [PATCH] [IMP]pms_api_rest: Disable GET multi reservation lines by
 security reasons

---
 .../services/pms_reservation_line_service.py  | 102 +++++++++---------
 1 file changed, 51 insertions(+), 51 deletions(-)

diff --git a/pms_api_rest/services/pms_reservation_line_service.py b/pms_api_rest/services/pms_reservation_line_service.py
index 411f41900..8133d8935 100644
--- a/pms_api_rest/services/pms_reservation_line_service.py
+++ b/pms_api_rest/services/pms_reservation_line_service.py
@@ -47,58 +47,58 @@ class PmsReservationLineService(Component):
         else:
             raise MissingError(_("Reservation Line not found"))
 
-    @restapi.method(
-        [
-            (
-                [
-                    "/",
-                ],
-                "GET",
-            )
-        ],
-        input_param=Datamodel("pms.reservation.line.search.param"),
-        output_param=Datamodel("pms.reservation.line.info", is_list=True),
-        auth="jwt_api_pms",
-    )
-    def get_reservation_lines(self, reservation_lines_search_param):
-        domain = []
-        if reservation_lines_search_param.date:
-            domain.append(("date", "=", reservation_lines_search_param.date))
-        if reservation_lines_search_param.reservationId:
-            domain.append(
-                ("reservation_id", "=", reservation_lines_search_param.reservationId)
-            )
-        if reservation_lines_search_param.pmsPropertyId:
-            domain.extend(
-                [
-                    (
-                        "pms_property_id",
-                        "=",
-                        reservation_lines_search_param.pmsPropertyId,
-                    ),
-                ]
-            )
+    # @restapi.method(
+    #     [
+    #         (
+    #             [
+    #                 "/",
+    #             ],
+    #             "GET",
+    #         )
+    #     ],
+    #     input_param=Datamodel("pms.reservation.line.search.param"),
+    #     output_param=Datamodel("pms.reservation.line.info", is_list=True),
+    #     auth="jwt_api_pms",
+    # )
+    # def get_reservation_lines(self, reservation_lines_search_param):
+    #     domain = []
+    #     if reservation_lines_search_param.date:
+    #         domain.append(("date", "=", reservation_lines_search_param.date))
+    #     if reservation_lines_search_param.reservationId:
+    #         domain.append(
+    #             ("reservation_id", "=", reservation_lines_search_param.reservationId)
+    #         )
+    #     if reservation_lines_search_param.pmsPropertyId:
+    #         domain.extend(
+    #             [
+    #                 (
+    #                     "pms_property_id",
+    #                     "=",
+    #                     reservation_lines_search_param.pmsPropertyId,
+    #                 ),
+    #             ]
+    #         )
 
-        result_lines = []
-        PmsReservationLineInfo = self.env.datamodels["pms.reservation.line.info"]
-        for reservation_line in self.env["pms.reservation.line"].search(
-            domain,
-        ):
-            result_lines.append(
-                PmsReservationLineInfo(
-                    id=reservation_line.id,
-                    date=datetime.combine(
-                        reservation_line.date, datetime.min.time()
-                    ).isoformat(),
-                    price=round(reservation_line.price, 2),
-                    discount=round(reservation_line.discount, 2),
-                    cancelDiscount=round(reservation_line.cancel_discount, 2),
-                    roomId=reservation_line.room_id.id,
-                    reservationId=reservation_line.reservation_id.id,
-                    pmsPropertyId=reservation_line.pms_property_id.id,
-                )
-            )
-        return result_lines
+    #     result_lines = []
+    #     PmsReservationLineInfo = self.env.datamodels["pms.reservation.line.info"]
+    #     for reservation_line in self.env["pms.reservation.line"].search(
+    #         domain,
+    #     ):
+    #         result_lines.append(
+    #             PmsReservationLineInfo(
+    #                 id=reservation_line.id,
+    #                 date=datetime.combine(
+    #                     reservation_line.date, datetime.min.time()
+    #                 ).isoformat(),
+    #                 price=round(reservation_line.price, 2),
+    #                 discount=round(reservation_line.discount, 2),
+    #                 cancelDiscount=round(reservation_line.cancel_discount, 2),
+    #                 roomId=reservation_line.room_id.id,
+    #                 reservationId=reservation_line.reservation_id.id,
+    #                 pmsPropertyId=reservation_line.pms_property_id.id,
+    #             )
+    #         )
+    #     return result_lines
 
     @restapi.method(
         [