39 lines
1.5 KiB
Python
39 lines
1.5 KiB
Python
# Copyright 2026 Munin
|
|
# License AGPL-3.0 or later (https://www.gnu.org/licenses/agpl).
|
|
|
|
from odoo.http import request
|
|
from odoo.addons.portal.controllers.portal import CustomerPortal
|
|
from werkzeug.exceptions import NotFound
|
|
|
|
from ..models.res_users import match_portal_url
|
|
|
|
# Routes always reachable, whatever the portal groups of the user.
|
|
#
|
|
# Split in two because of how each route is matched, not because of how
|
|
# important it is: both lists are equally "always reachable".
|
|
#
|
|
# Exact match, for routes that have no sub-route of their own. '/my' has to
|
|
# stay here in any case: as a prefix it would match every portal page and
|
|
# make this module a no-op.
|
|
WHITELISTED_ROUTES = ['/my', '/my/home', '/my/account', '/my/security', '/my/payment_method']
|
|
|
|
# Prefix match, for routes that also serve detail and pager sub-pages
|
|
# ('/my/invoices/<id>', '/my/invoices/page/<n>', '/my/invoices/overdue'),
|
|
# which go through _prepare_portal_layout_values too.
|
|
WHITELISTED_ROUTE_PREFIXES = ['/my/invoices']
|
|
|
|
|
|
class CustomerPortalPolicy(CustomerPortal):
|
|
def _prepare_portal_layout_values(self):
|
|
vals = super()._prepare_portal_layout_values()
|
|
current_path = request.httprequest.path
|
|
if current_path in WHITELISTED_ROUTES:
|
|
return vals
|
|
if any(match_portal_url(route, current_path) for route in WHITELISTED_ROUTE_PREFIXES):
|
|
return vals
|
|
if request.env.user.validate_portal_url(current_path):
|
|
return vals
|
|
if '/my/' not in current_path:
|
|
return vals
|
|
raise NotFound()
|