diff options
| author | stephanchrst <stephanchrst@gmail.com> | 2023-01-27 10:56:07 +0700 |
|---|---|---|
| committer | stephanchrst <stephanchrst@gmail.com> | 2023-01-27 10:56:07 +0700 |
| commit | 669b9de298ed3667fc6aaf1e6070604c1799a0a8 (patch) | |
| tree | 8567d6e063502a2a1538135270aaa322eef3113d | |
| parent | 46cc2c3deb299cc61c14a0675221b811aaf999b8 (diff) | |
bug fix unauthorized sale order
| -rw-r--r-- | indoteknik_api/controllers/api_v1/midtrans.py | 4 | ||||
| -rwxr-xr-x | indoteknik_custom/models/__init__.py | 1 | ||||
| -rwxr-xr-x | indoteknik_custom/security/ir.model.access.csv | 4 |
3 files changed, 6 insertions, 3 deletions
diff --git a/indoteknik_api/controllers/api_v1/midtrans.py b/indoteknik_api/controllers/api_v1/midtrans.py index 9a0ca50e..a5e667cf 100644 --- a/indoteknik_api/controllers/api_v1/midtrans.py +++ b/indoteknik_api/controllers/api_v1/midtrans.py @@ -14,8 +14,8 @@ class Midtrans(controller.Controller): order_no = json.loads(request.httprequest.data)['order_id'] query = [('name', '=', order_no)] - order = request.env['sale.order'].search(query, limit=1) - order.transaction_status = trx_status + order = request.env['sale.order'].sudo().search(query, limit=1) + order.payment_status = trx_status request.env['midtrans.notification'].create([{ 'sale_order_id': order.id, diff --git a/indoteknik_custom/models/__init__.py b/indoteknik_custom/models/__init__.py index c6fb7d4f..121bd0f4 100755 --- a/indoteknik_custom/models/__init__.py +++ b/indoteknik_custom/models/__init__.py @@ -46,3 +46,4 @@ from . import x_partner_purchase_order from . import x_product_tags from . import website_ads from . import leads_monitoring +from . import midtrans diff --git a/indoteknik_custom/security/ir.model.access.csv b/indoteknik_custom/security/ir.model.access.csv index d469aa1e..c755c11a 100755 --- a/indoteknik_custom/security/ir.model.access.csv +++ b/indoteknik_custom/security/ir.model.access.csv @@ -27,4 +27,6 @@ access_website_content,access.website.content,model_website_content,,1,1,1,1 access_invoice_reklas,access.invoice.reklas,model_invoice_reklas,,1,1,1,1 access_custom_mail_marketing,access.custom.mail.marketing,model_custom_mail_marketing,,1,1,1,1 access_website_ads,access.website.ads,model_website_ads,,1,1,1,1 -access_leads_monitoring,access.leads.monitoring,model_leads_monitoring,,1,1,1,1
\ No newline at end of file +access_leads_monitoring,access.leads.monitoring,model_leads_monitoring,,1,1,1,1 +access_midtrans_notification,access.midtrans.notification,model_midtrans_notification,,1,1,1,1 +access_midtrans_recurring,access.midtrans.recurring,model_midtrans_recurring,,1,1,1,1
\ No newline at end of file |