Changelog

odoo/enterprise#77343

Created by fw-bot

Merged at 34503039686d9cd1360b45c6e10b1a9677225306

Statuses:

legal/cla: Contributor License Agreement check
ci/runbot: Odoo Test Suite
ci/upgrade_enterprise: Test upgrades for enterprise master
ci/template: Contact runbot team on discord for help.
ci/style: Optional style check. Ignore it only if strictly necessary.
ci/security: Required security check. Can only be ignored by security team.
ci/l10n: (runtime 2s)

Linked pull requests

odoo/odoo#194137

label: odoo-dev:saas-18.1-18.0-disable-download-live-shared-spreadsheet-lul-Gtl8-fw
head: 04a69fdabf93ba3fe288d801a6c88283d21ace58
merged: 7 months ago by BI, Lucas Lefèvre (lul)

	odoo/odoo	odoo/enterprise
18.0	#192349	#76460
saas-18.1	#194137	#77343
saas-18.2
saas-18.3
saas-18.4
master	#194163	#77358

[FW][FIX] documents_spreadsheet: disable public download button

Steps to reproduce:

install Documents
create a new spreadsheet
hit the Share button
change the sharing settings to "Anyone with the link: Viewer / Musty have the link to access"
open the sharing link in an incognito window
hit the download button

=> 404 not found

A public user cannot convert a spreadsheet to an excel file and downlaod it because a route needs to be called to create the excel file. This route is currently not allowed for public users.

For frozen spreadsheet, we generate the excel file before-hand (when the internal user shares the spreadsheet). For a regular "live" share though, we cannot pre-generate the excel file since the spreadsheet continues to live and evolve.

The spreadsheet module needs to be updated for this bug fix to take effect. (otherwise the download button won't do anything, which is not worse than facing a 404 response)