odoo/odoo#162065
Created by Discuss, Didier Debondt (did)
Merged
at 3db7cd8c006fdde07cae4cd938497a9df1c9fe2b
Linked pull requests
- label
- odoo-dev:master-remove-need-action-from-message-format-did
- head
- 44f86cf52a918c66ce3f12eddc71c2239d1fa714
- target
- master
- merged
- 1 week ago by Discuss, Sébastien Theys (seb)
[IMP] mail: avoid broadcasting partner lists and tracking values
Before this PR, `_message_format` function always included data that were only
relevant to the logged user. It also `leak partner_ids`.
This PR condition the `needaction_partner_ids`, `history_partner_ids`,
`starredPersonas` and `trackingValues` values to a new param.
This allows us to control when those data should be sent to the user.
PR enterprise: https://github.com/odoo/enterprise/pull/61353