Not connect with superuser

[nicomacr]

Hello Team,

I've been trying to use the last releases and i face with an error with the "system" user on the connexion.
It's seems the check on it's doing before and authentication.
Due this when the code want to check on this we received uid on False and them we see the raise message Cannot become Superuser.

I' do something wrong?

[florentx]

Hello @nicomacr

Can you give me some details, so I can reproduce.
Which version of Odoo is it? And is it with a script or interactively?
Which user you login initially? Normally you're supposed to login with an Admin account, then to switch to superuser with .sudo().
AFAIK user cannot login with __system__ directly in the UI. It is the same with Odooly.

[nicomacr]

@florentx Yes, I used to login using system, but with last changes it's having the error Cannot become Superuser.
This is that you said about the login with admin?

[nicomacr]

@florentx as I saw testing after this changes I cannot login using odooly with "system" by script. For version +15

[nicomacr]

@florentx as I said in the description of the issue the problem when you connect with system is the check password is doing a check of authentication that is not available yet at that moment.

[florentx]

Hello @nicomacr

The use case which should work is:

import odooly

client = odooly.Client(server="https://demo.odoo.com/", user="admin")

env = client.env
print(env.user.login)
# 'admin'

sudo_env = env.sudo()
print(sudo_env.user.login)
# '__system__'

I've just tested right now.

Please can you present your scenario?
It would be easier if you can reproduce with a script which targets https://demo.odoo.com so I can test it.
Thanks.

[florentx]

OK, I could reproduce with a hack.

I had to update DB with SQL first:

UPDATE res_users SET active = TRUE WHERE id = 1;

Then I could login with your method:

$ odooly -vv --server https://demo2.odoo.com/web?db=demo_190_4ce46c2a0fb3_1765977105 --user __system__ --password 1234

--> HEAD https://demo2.odoo.com/web?db=demo_190_4ce46c2a0fb3_1765977105
<-- https://demo2.odoo.com/web/login?redirect=%2Fweb%3Fdb%3Ddemo_190_4ce46c2a0fb3_1765977105
--> POST /web/webclient/version_info 
<-- {'server_version': '19.0+e', 'server_version_info': [19, 0, 0, 'final', 0, 'e'], 'server_serie': '19.0', 'protocol_version': 1}
--> POST /web/database/list 
<-- []
--> GET /web
<-- cec36c7a2a88e2f71ecbaba4a9d8f1c7c556168eo1797514340
--> POST /web/login csrf_token='cec36c7a2a88e2f71ecbaba4a9d8f1c7c556168eo1797514340' login='__system__' password=*
<-- {'uid': 1, 'is_system': True, 'is_admin': True, 'is_public': False, 'is_internal_user': True, 'user_context': {'lang': 'en_US', 'tz': 'Europe/Brussels', 'uid': 1}, 'db':... L=5276
Logged in as '__system__'
demo_190_4ce46c2a0fb3_1765977105 >>> env.user.login
'__system__'

It is non-standard method, not really supported by Odoo. And it might be a security risk.

I will see if I apply the patch on Odooly to support this login.

[nicomacr]

@florentx Ok I understand that point and why before the changes I can access login as superuser.
As far I investigated the issue, the _request_parse return the "user_id" False. Connecting like that:
Client(hostname, db="odoo", user=user, password=password)

[florentx]

Odooly 2.5.2 fixes this use case.
https://pypi.org/project/Odooly/2.5.2/