search

OCA / server-auth

https://odoo-community.org/psc-teams/tools-30
GNU Affero General Public License v3.0
146 stars 399 forks source link

[14.0] Add module base_user_empty_password #638

Closed grindtildeath closed 2 months ago

grindtildeath commented 3 months ago

This module provides a wizard to allow emptying users password field.

This could be useful to force the user to use another sign on method than Odoo.

yankinmax commented 3 months ago

@simahawk to avoid SQL injection if we need to execute a query on a database directly we incapsulate it with SQL.Identifier tools. Am I missing something here?

simahawk commented 3 months ago

@simahawk to avoid SQL injection if we need to execute a query on a database directly we incapsulate it with SQL.Identifier tools. Am I missing something here?

There's no injection here as it relies on psygopg doing proper interpolation of the data.

OCA-git-bot commented 3 months ago

This PR has the approved label and has been created more than 5 days ago. It should therefore be ready to merge by a maintainer (or a PSC member if the concerned addon has no declared maintainer). 🤖

simahawk commented 2 months ago

/ocabot merge nobump

OCA-git-bot commented 2 months ago

Hey, thanks for contributing! Proceeding to merge this for you. Prepared branch 14.0-ocabot-merge-pr-638-by-simahawk-bump-nobump, awaiting test results.

OCA-git-bot commented 2 months ago

Congratulations, your PR was merged at c5355ed48f1ade340c1ffc6116077c8443530943. Thanks a lot for contributing to OCA. ❤️