diff --git a/pms/models/res_users.py b/pms/models/res_users.py index 2a4123127..9ca390e3e 100644 --- a/pms/models/res_users.py +++ b/pms/models/res_users.py @@ -1,7 +1,6 @@ # Copyright 2019 Pablo Quesada # License AGPL-3.0 or later (http://www.gnu.org/licenses/agpl). -from odoo import _, api, fields, models -from odoo.exceptions import AccessError +from odoo import api, fields, models from odoo.http import request @@ -39,7 +38,8 @@ class ResUsers(models.Model): active_property_ids = list( map(int, request.httprequest.cookies.get("pms_pids", "").split(",")) ) - if any(pid not in user_property_ids for pid in active_property_ids): - raise AccessError(_("Access to unauthorized or invalid properties.")) + active_property_ids = [ + pid for pid in active_property_ids if pid in user_property_ids + ] return self.env["pms.property"].browse(active_property_ids).ids return user_property_ids