Re: [Openerp-community] XMLRPC : special method for raw SQL instead of search + read ?

2013-10-15 Thread Nicolas Bessi
Hello, Internal Api design is an other topic that clearly needs to be improved. You should refer to new api slides of OpenERP days 2013 and the corresponding branch on launchapd (sorry I have no pointer here) to have an idea of improvement that are coming. Regards Nicolas Ovnicraft a écr

Re: [Openerp-community] XMLRPC : special method for raw SQL instead of search + read ?

2013-10-15 Thread Ovnicraft
On Tue, Oct 15, 2013 at 7:57 AM, Nicolas Bessi wrote: > Hello, > > You should take a look at erppeek it is a nice abstraction library to > interface OpenERP with external system. > > If you really needs a fast read access to your system to do stats or what > else, maybe you should setup a limited

Re: [Openerp-community] XMLRPC : special method for raw SQL instead of search + read ?

2013-10-15 Thread Brendan Clune
I agree. A database user is a better choice in this instance since it is easier to understand the effective permissions of that user. I think it is dangerous to encourage queries at the ORM level that bypass all safety checks the ORM provides. If we do this, we then have very little idea what a us

Re: [Openerp-community] XMLRPC : special method for raw SQL instead of search + read ?

2013-10-15 Thread Alexandre Fayolle
On 15/10/2013 14:19, Christophe Dubuit wrote: > Okay, but what if this method would be restricted to user with > "administator" privileges only ? > a user with administrator privileges already has other means of accessing the db (such as direct SQL connection if required, or erppeek) > Plus, we

Re: [Openerp-community] XMLRPC : special method for raw SQL instead of search + read ?

2013-10-15 Thread Nicolas Bessi
Hello, You should take a look at erppeek it is a nice abstraction library to interface OpenERP with external system. If you really needs a fast read access to your system to do stats or what else, maybe you should setup a limited postgresql user with strong authentication and read permission

Re: [Openerp-community] XMLRPC : special method for raw SQL instead of search + read ?

2013-10-15 Thread Christophe Dubuit
Okay, but what if this method would be restricted to user with "administator" privileges only ? Plus, we have to see the context. Someone who uses XMLRPC queries... usually is an admin, don't you think ? XMLRPC / JSON queries are for "behind work", "plumber work"... Not reallly regular front u

Re: [Openerp-community] [Merge] lp:~camptocamp/openerp-product-attributes/port-add-product_multi_company_7.0-jge into lp:openerp-product-attributes

2013-10-15 Thread Maxime Chambreuil (http://www.savoirfairelinux.com)
Thanks Joël. I would put this module in the Multi-company project: https://launchpad.net/multi-company -- https://code.launchpad.net/~camptocamp/openerp-product-attributes/port-add-product_multi_company_7.0-jge/+merge/191128 Your team OpenERP Community is subscribed to branch lp:openerp-product-

[Openerp-community] XMLRPC : special method for raw SQL instead of search + read ?

2013-10-15 Thread Christophe Dubuit
Hello, [this is my first message to the mailing list] I would like to make a suggestion regarding XMLRPC (and even JSON). Would it be good to add a special method, in order to be able to send raw SQL queries (SELECT only ) ? Personal background : I've started to use XMLRPC  (and some JSON) wit

Re: [Openerp-community] XMLRPC : special method for raw SQL instead of search + read ?

2013-10-15 Thread Alexandre Fayolle
On mar. 15 oct. 2013 13:32:11 CEST, Christophe Dubuit wrote: > Hello, > > [this is my first message to the mailing list] > > I would like to make a suggestion regarding XMLRPC (and even JSON). > > Would it be good to add a special method, in order to be able to send > raw SQL queries (SELECT only

Re: [Openerp-community] XMLRPC : special method for raw SQL instead of search + read ?

2013-10-15 Thread Niels Huylebroeck
The security implications are endless, it would mean any ir.rule that is in place will be circumvented using your direct sql queries. 2013/10/15 Christophe Dubuit > Hello, > > [this is my first message to the mailing list] > > I would like to make a suggestion regarding XMLRPC (and even JSON).

[Openerp-community] XMLRPC : special method for raw SQL instead of search + read ?

2013-10-15 Thread Christophe Dubuit
Hello, [this is my first message to the mailing list] I would like to make a suggestion regarding XMLRPC (and even JSON). Would it be good to add a special method, in order to be able to send raw SQL queries (SELECT only ) ? Personal background : I've started to use XMLRPC (and some JSON) with

[Openerp-community] [Merge] lp:~camptocamp/openerp-product-attributes/port-add-product_multi_company_7.0-jge into lp:openerp-product-attributes

2013-10-15 Thread Joël Grand-Guillaume
Joël Grand-Guillaume @ camptocamp has proposed merging lp:~camptocamp/openerp-product-attributes/port-add-product_multi_company_7.0-jge into lp:openerp-product-attributes. Commit message: [ADD] product_multi_company for version 7.0, completely rebuilt to allow managing a single product between

[Openerp-community] [Merge] lp:~camptocamp/openerp-product-attributes/port-add-product_multi_company_7.0-jge into lp:openerp-product-attributes

2013-10-15 Thread Joël Grand-Guillaume
The proposal to merge lp:~camptocamp/openerp-product-attributes/port-add-product_multi_company_7.0-jge into lp:openerp-product-attributes has been updated. Commit Message changed to: [ADD] product_multi_company for version 7.0, completely rebuilt to allow managing a single product between vari

[Openerp-community] [Merge] lp:~camptocamp/openerp-product-attributes/7.0-required-on-attributes-gbr into lp:openerp-product-attributes

2013-10-15 Thread noreply
The proposal to merge lp:~camptocamp/openerp-product-attributes/7.0-required-on-attributes-gbr into lp:openerp-product-attributes has been updated. Status: Needs review => Merged For more details, see: https://code.launchpad.net/~camptocamp/openerp-product-attributes/7.0-required-on-attribu