This question has been flagged
2928 Views

I'm developing an interface app by using odoo's xmlrpc api. Odoo returns error message for specific error types such as UserError, AccessError ..etc. For other errors such as ValidationError, it uses sys.exec_info() as error message.

https://github.com/odoo/odoo/blob/11.0/odoo/service/wsgi_server.py#L60

odoo's xmlrpc api returns me a traceback string with lines and file names ends with 

 "method_name\n    raise ValidationError(\'Test\')\nValidationError: (\'Amount should bigger than zero.\', None)"

What should i say to my interface user about what is wrong. Why odoo api returning traceback for unknown errors. Is it not a security problem? Even json api is returning traceback in debug parameter.

Avatar
Discard