[IMP] orm.read_group: remove sql injection vector by forcing group_by to be valid field + assert grouped field is in the view
[IMP] orm.read_group: remove sql injection vector by forcing group_by to be valid field + assert grouped field is in the view

akretion/openerp-server,akretion/openerp-server,akretion/openerp-server