T2792 Ensure child protection on children page

my_compassion/__manifest__.py

@@ -30,7 +30,7 @@
 # pylint: disable=C8101
 {
     "name": "MyCompassion - Sponsor portal website",
-    "version": "14.0.1.0.1",
+    "version": "14.0.1.0.2",
     "category": "Website",
     "author": "Compassion CH",
     "license": "AGPL-3",

my_compassion/controllers/my2_children.py

@@ -255,6 +255,9 @@ def my2_render_child_timeline_page(self, child, **kwargs):
             request.env["ir.config_parameter"].sudo().get_param("google_custom_map_id")
         )
 
+        # Generate the obfuscated if necessary (eg: the first time the values are read)
+        child.sudo().project_id._compute_gps_obfuscated()
+
         return request.render(
             "my_compassion.my2_child_timeline_page",
             {

my_compassion/migrations/14.0.1.0.2/pre-migration.py

@@ -0,0 +1,12 @@
+from openupgradelib import openupgrade
+
+
+def migrate(cr, version):
+    openupgrade.logged_query(
+        cr,
+        """
+        ALTER TABLE compassion_project
+        ADD COLUMN IF NOT EXISTS gps_latitude_obfuscated DECIMAL(10, 6),
+        ADD COLUMN IF NOT EXISTS gps_longitude_obfuscated DECIMAL(10, 6)
+        """,
+    )

my_compassion/templates/components/my2_weather_time_container.xml

@@ -13,6 +13,7 @@
 
     Injected data:
     - timezone (string): timezone of the center.
+    - fcp_id (string): Identifier of the compassion project.
     - church_name (string): name of the local church associated with the center.
     - city_country (string): represents where the center is located in the following format city,country.
 
@@ -23,10 +24,10 @@
     <template id="WeatherTimeContainer" name="Weather and Time Container">
         <link rel="stylesheet" href="/my_compassion/static/src/css/my2_weather_time_container.css" />
         <div class="center-info-card d-none">
-            <t t-if="church_name">
+            <t t-if="cdc_name">
                 <div class="center-info-card__header">
                     <p class="center-info-card__project-info">
-                        <t t-esc="church_name" />
+                        <t t-esc="cdc_name" />
                     </p>
                 </div>
             </t>

my_compassion/templates/pages/my2_child_timeline.xml

@@ -453,8 +453,8 @@
                     >
                         <t t-if="google_api_key">
                             <t t-call="theme_compassion_2025.MapComponent">
-                                <t t-set="long" t-value="compassion_child.project_id.gps_longitude" />
-                                <t t-set="lat" t-value="compassion_child.project_id.gps_latitude" />
+                                <t t-set="long" t-value="compassion_child.project_id.gps_longitude_obfuscated" />
+                                <t t-set="lat" t-value="compassion_child.project_id.gps_latitude_obfuscated" />
                                 <t t-set="api_key" t-value="google_api_key" />
                                 <t t-set="custom_map_id" t-value="google_custom_map_id" />
                             </t>
@@ -463,7 +463,11 @@
                             <t t-call="my_compassion.WeatherTimeContainer">
                                 <t t-set="timezone" t-value="timezone" />
                                 <t t-set="fcp_id" t-value="compassion_child.project_id.fcp_id" />
-                                <t t-set="church_name" t-value="compassion_child.project_id.local_church_name" />
+                                <t t-set="church_default_name">Compassion center</t>
+                                <t
+                                    t-set="cdc_name"
+                                    t-value="compassion_child.project_id.child_center_original_name or compassion_child.project_id.name or church_default_name "
+                                />
                                 <t
                                     t-set="city_country"
                                     t-value="', '.join(list(filter(None, [compassion_child.project_id.closest_city, compassion_child.project_id.country_id.name])))"