Changelog

odoo/enterprise#77358

Created by fw-bot

Merged at f5bb82040a554f1e6ef90f80f038bb645b2781ec

Statuses:

legal/cla: Contributor License Agreement check
ci/runbot: Odoo Test Suite
ci/upgrade_enterprise: Test upgrades for enterprise master
ci/style: Optional style check. Ignore it only if strictly necessary.
ci/security: Required security check. Can only be ignored by security team.
ci/l10n: (runtime 1s)

Linked pull requests

odoo/odoo#194163

label: odoo-dev:master-18.0-disable-download-live-shared-spreadsheet-lul-YgTu-fw
head: de01f9e91d4b7cbb8fe7dd5ceb1100fee9905dcd
merged: 6 months ago by BI, Lucas Lefèvre (lul)

	odoo/odoo	odoo/enterprise
18.0	#192349	#76460
saas-18.1	#194137	#77343
saas-18.2
saas-18.3
saas-18.4
master	#194163	#77358

[FW][FIX] documents_spreadsheet: disable public download button

Steps to reproduce:

install Documents
create a new spreadsheet
hit the Share button
change the sharing settings to "Anyone with the link: Viewer / Musty have the link to access"
open the sharing link in an incognito window
hit the download button

=> 404 not found

A public user cannot convert a spreadsheet to an excel file and downlaod it because a route needs to be called to create the excel file. This route is currently not allowed for public users.

For frozen spreadsheet, we generate the excel file before-hand (when the internal user shares the spreadsheet). For a regular "live" share though, we cannot pre-generate the excel file since the spreadsheet continues to live and evolve.

The spreadsheet module needs to be updated for this bug fix to take effect. (otherwise the download button won't do anything, which is not worse than facing a 404 response)