[15.0.1.0.0] 403: Forbidden on logon

[blackjacky]

Module

password_security

Describe the bug

When logging in, redirect to 403: Forbidden
I tried uninstall and re-install -> same issues

To Reproduce

Affected versions:

Steps to reproduce the behavior:

1. install the module
2. log on
3. redirect to 403: Forbidden

Expected behavior
A clear and concise description of what you expected to happen.

Additional context
2024-01-16 02:51:42,030 4460 WARNING DB_NAME odoo.addons.http_routing.models.ir_http: 403 Forbidden:

Traceback (most recent call last):
File "/home/odoo/src/odoo/odoo/tools/cache.py", line 85, in lookup
r = d[key]
File "/home/odoo/src/odoo/odoo/tools/func.py", line 71, in wrapper
return func(self, *args, **kwargs)
File "/home/odoo/src/odoo/odoo/tools/lru.py", line 34, in getitem
a = self.d[obj]
KeyError: ('ir.model.access', <function IrModelAccess.check at 0x7f347c48bca0>, 22, False, 'res.users', 'write', True, (None,))

The above exception was the direct cause of the following exception:

Traceback (most recent call last):
File "/home/odoo/src/odoo/odoo/addons/base/models/ir_http.py", line 237, in _dispatch
result = request.dispatch()
File "/home/odoo/src/odoo/odoo/http.py", line 815, in dispatch
r = self._call_function(**self.params)
File "/home/odoo/src/odoo/odoo/http.py", line 368, in _call_function
return checked_call(self.db, *args, **kwargs)
File "/home/odoo/src/odoo/odoo/service/model.py", line 94, in wrapper
return f(dbname, *args, **kwargs)
File "/home/odoo/src/odoo/odoo/http.py", line 357, in checked_call
result = self.endpoint(*a, **kw)
File "/home/odoo/src/odoo/odoo/http.py", line 921, in call
return self.method(*args, **kw)
File "/home/odoo/src/odoo/odoo/http.py", line 546, in response_wrap
response = f(*args, **kw)
File "/home/odoo/src/odoo/addons/website/controllers/main.py", line 139, in web_login
return super().web_login(*args, **kw)
File "/home/odoo/src/odoo/odoo/http.py", line 546, in response_wrap
response = f(*args, **kw)
File "/home/odoo/src/user/additional-addons/password_security/controllers/main.py", line 39, in web_login
response = super(PasswordSecurityHome, self).web_login(*args, **kw)
File "/home/odoo/src/odoo/odoo/http.py", line 546, in response_wrap
response = f(*args, **kw)
File "/home/odoo/src/odoo/addons/auth_oauth/controllers/main.py", line 96, in web_login
response = super(OAuthLogin, self).web_login(*args, **kw)
File "/home/odoo/src/odoo/odoo/http.py", line 546, in response_wrap
response = f(*args, **kw)
File "/home/odoo/src/odoo/addons/auth_signup/controllers/main.py", line 21, in web_login
response = super(AuthSignupHome, self).web_login(*args, **kw)
File "/home/odoo/src/odoo/odoo/http.py", line 546, in response_wrap
response = f(*args, **kw)
File "/home/odoo/src/odoo/addons/web/controllers/main.py", line 872, in web_login
uid = request.session.authenticate(request.session.db, request.params['login'], request.params['password'])
File "/home/odoo/src/odoo/odoo/http.py", line 1034, in authenticate
uid = odoo.registry(db)['res.users'].authenticate(db, login, password, env)
File "/home/odoo/src/odoo/addons/website/models/res_users.py", line 78, in authenticate
uid = super(ResUsers, cls).authenticate(db, login, password, user_agent_env)
File "/home/odoo/src/odoo/odoo/addons/base/models/res_users.py", line 745, in authenticate
uid = cls._login(db, login, password, user_agent_env=user_agent_env)
File "/home/odoo/src/odoo/odoo/addons/base/models/res_users.py", line 720, in _login
user._check_credentials(password, user_agent_env)
File "/home/odoo/src/odoo/addons/website_sale_wishlist/models/res_users.py", line 10, in _check_credentials
result = super(ResUsers, self)._check_credentials(password, env)
File "/home/odoo/src/user/addons/kbt_api_base/models/res_users.py", line 20, in _check_credentials
return super()._check_credentials(password, env)
File "/home/odoo/src/odoo/addons/auth_oauth/models/res_users.py", line 135, in _check_credentials
return super(ResUsers, self)._check_credentials(password, env)
File "/home/odoo/src/odoo/odoo/addons/base/models/res_users.py", line 1676, in _check_credentials
return super()._check_credentials(password, user_agent_env)
File "/home/odoo/src/odoo/odoo/addons/base/models/res_users.py", line 402, in _check_credentials
self._set_encrypted_password(self.env.user.id, replacement)
File "/home/odoo/src/user/additional-addons/password_security/models/res_users.py", line 214, in _set_encrypted_password
self.write({"password_history_ids": [(0, 0, {"password_crypt": pw})]})
File "/home/odoo/src/user/additional-addons/password_security/models/res_users.py", line 53, in write
return super(ResUsers, self).write(vals)
File "/home/odoo/src/odoo/addons/website_slides/models/res_users.py", line 22, in write
res = super(Users, self).write(vals)
File "/home/odoo/src/odoo/addons/hr/models/res_users.py", line 211, in write
result = super(User, self).write(vals)
File "/home/odoo/src/odoo/addons/gamification/models/res_users.py", line 63, in write
result = super(Users, self).write(vals)
File "/home/odoo/src/odoo/addons/mail/models/res_users.py", line 77, in write
write_res = super(Users, self).write(vals)
File "/home/odoo/src/odoo/addons/resource/models/res_users.py", line 17, in write
rslt = super().write(vals)
File "/home/odoo/src/odoo/odoo/addons/base/models/res_users.py", line 1412, in write
res = super(UsersView, self).write(values)
File "/home/odoo/src/odoo/odoo/addons/base/models/res_users.py", line 1156, in write
return super(UsersImplied, self).write(values)
File "/home/odoo/src/odoo/odoo/addons/base/models/res_users.py", line 600, in write
res = super(Users, self).write(values)
File "/home/odoo/src/odoo/odoo/models.py", line 3781, in write
self.check_access_rights('write')
File "/home/odoo/src/odoo/odoo/models.py", line 3556, in check_access_rights
return self.env['ir.model.access'].check(self._name, operation, raise_exception)
File "", line 2, in check
File "/home/odoo/src/odoo/odoo/tools/cache.py", line 90, in lookup
value = d[key] = self.method(*args, **kwargs)
File "/home/odoo/src/odoo/odoo/addons/base/models/ir_model.py", line 1847, in check
raise AccessError(msg)
Exception

The above exception was the direct cause of the following exception:

Traceback (most recent call last):
File "/home/odoo/src/odoo/odoo/addons/base/models/ir_http.py", line 237, in _dispatch
result = request.dispatch()
File "/home/odoo/src/odoo/odoo/http.py", line 815, in dispatch
r = self._call_function(**self.params)
File "/home/odoo/src/odoo/odoo/http.py", line 368, in _call_function
return checked_call(self.db, *args, **kwargs)
File "/home/odoo/src/odoo/odoo/service/model.py", line 94, in wrapper
return f(dbname, *args, **kwargs)
File "/home/odoo/src/odoo/odoo/http.py", line 357, in checked_call
result = self.endpoint(*a, **kw)
File "/home/odoo/src/odoo/odoo/http.py", line 921, in call
return self.method(*args, **kw)
File "/home/odoo/src/odoo/odoo/http.py", line 546, in response_wrap
response = f(*args, **kw)
File "/home/odoo/src/odoo/addons/website/controllers/main.py", line 139, in web_login
return super().web_login(*args, **kw)
File "/home/odoo/src/odoo/odoo/http.py", line 546, in response_wrap
response = f(*args, **kw)
File "/home/odoo/src/user/additional-addons/password_security/controllers/main.py", line 39, in web_login
response = super(PasswordSecurityHome, self).web_login(*args, **kw)
File "/home/odoo/src/odoo/odoo/http.py", line 546, in response_wrap
response = f(*args, **kw)
File "/home/odoo/src/odoo/addons/auth_oauth/controllers/main.py", line 96, in web_login
response = super(OAuthLogin, self).web_login(*args, **kw)
File "/home/odoo/src/odoo/odoo/http.py", line 546, in response_wrap
response = f(*args, **kw)
File "/home/odoo/src/odoo/addons/auth_signup/controllers/main.py", line 21, in web_login
response = super(AuthSignupHome, self).web_login(*args, **kw)
File "/home/odoo/src/odoo/odoo/http.py", line 546, in response_wrap
response = f(*args, **kw)
File "/home/odoo/src/odoo/addons/web/controllers/main.py", line 872, in web_login
uid = request.session.authenticate(request.session.db, request.params['login'], request.params['password'])
File "/home/odoo/src/odoo/odoo/http.py", line 1034, in authenticate
uid = odoo.registry(db)['res.users'].authenticate(db, login, password, env)
File "/home/odoo/src/odoo/addons/website/models/res_users.py", line 78, in authenticate
uid = super(ResUsers, cls).authenticate(db, login, password, user_agent_env)
File "/home/odoo/src/odoo/odoo/addons/base/models/res_users.py", line 745, in authenticate
uid = cls._login(db, login, password, user_agent_env=user_agent_env)
File "/home/odoo/src/odoo/odoo/addons/base/models/res_users.py", line 720, in _login
user._check_credentials(password, user_agent_env)
File "/home/odoo/src/odoo/addons/website_sale_wishlist/models/res_users.py", line 10, in _check_credentials
result = super(ResUsers, self)._check_credentials(password, env)
File "/home/odoo/src/user/addons/kbt_api_base/models/res_users.py", line 20, in _check_credentials
return super()._check_credentials(password, env)
File "/home/odoo/src/odoo/addons/auth_oauth/models/res_users.py", line 135, in _check_credentials
return super(ResUsers, self)._check_credentials(password, env)
File "/home/odoo/src/odoo/odoo/addons/base/models/res_users.py", line 1676, in _check_credentials
return super()._check_credentials(password, user_agent_env)
File "/home/odoo/src/odoo/odoo/addons/base/models/res_users.py", line 402, in _check_credentials
self._set_encrypted_password(self.env.user.id, replacement)
File "/home/odoo/src/user/additional-addons/password_security/models/res_users.py", line 214, in _set_encrypted_password
self.write({"password_history_ids": [(0, 0, {"password_crypt": pw})]})
File "/home/odoo/src/user/additional-addons/password_security/models/res_users.py", line 53, in write
return super(ResUsers, self).write(vals)
File "/home/odoo/src/odoo/addons/website_slides/models/res_users.py", line 22, in write
res = super(Users, self).write(vals)
File "/home/odoo/src/odoo/addons/hr/models/res_users.py", line 211, in write
result = super(User, self).write(vals)
File "/home/odoo/src/odoo/addons/gamification/models/res_users.py", line 63, in write
result = super(Users, self).write(vals)
File "/home/odoo/src/odoo/addons/mail/models/res_users.py", line 77, in write
write_res = super(Users, self).write(vals)
File "/home/odoo/src/odoo/addons/resource/models/res_users.py", line 17, in write
rslt = super().write(vals)
File "/home/odoo/src/odoo/odoo/addons/base/models/res_users.py", line 1412, in write
res = super(UsersView, self).write(values)
File "/home/odoo/src/odoo/odoo/addons/base/models/res_users.py", line 1156, in write
return super(UsersImplied, self).write(values)
File "/home/odoo/src/odoo/odoo/addons/base/models/res_users.py", line 600, in write
res = super(Users, self).write(values)
File "/home/odoo/src/odoo/odoo/models.py", line 3781, in write
self.check_access_rights('write')
File "/home/odoo/src/odoo/odoo/models.py", line 3556, in check_access_rights
return self.env['ir.model.access'].check(self._name, operation, raise_exception)
File "", line 2, in check
File "/home/odoo/src/odoo/odoo/tools/cache.py", line 90, in lookup
value = d[key] = self.method(*args, **kwargs)
File "/home/odoo/src/odoo/odoo/addons/base/models/ir_model.py", line 1847, in check
raise AccessError(msg)
odoo.exceptions.AccessError: You are not allowed to modify 'Users' (res.users) records.

This operation is allowed for the following groups:
- Administration/Access Rights

Contact your administrator to request access if necessary.

[fkantelberg]

We also noticed the bug last week and spend some time. Updating the module wasn't enough but see the fix it in #594

[github-actions]

There hasn't been any activity on this issue in the past 6 months, so it has been marked as stale and it will be closed automatically if no further activity occurs in the next 30 days.
If you want this issue to never become stale, please ask a PSC member to apply the "no stale" label.