Vauxoo / odoo

Fork of Odoo (formerly OpenERP). [This project is not publically mantained just born for internal usage with some little patches] go to official repository on github.com/odoo/odoo
https://www.odoo.com
Other
9 stars 9 forks source link

[FIX] http/db: handle case when db_filter is empty in the config file #439

Closed luistorresm closed 3 years ago

luistorresm commented 3 years ago

In such a case the db filtering won't be applied on an empty regex so we use the list of databases passed to db_name (--database) as the database list (and we also avoid to list all the databases present on the postgresql cluster)

As a side effect, this patch allows to strengthen the postgresql security by preventing Odoo to list all the databases present on the cluster.

Based on https://github.com/Vauxoo/odoo/commit/6fa705399bc05d4b0dce5e7181c40a4a5ab8b1c3

-- I confirm I have signed the CLA and read the PR guidelines at www.odoo.com/submit-pr

moylop260 commented 3 years ago

👍