From 00ac6c60f6bc2d83ca614db043b1e655fd892b5e Mon Sep 17 00:00:00 2001 From: jem-odoo Date: Fri, 24 May 2019 14:28:09 +0000 Subject: [PATCH] [FIX] project: portal user can not read AA For historical reason (problably the inheritS between project and AA, removed in 12.0), portal user can read Analytic Account. This makes no sense, as it is a purely internal resource for companies. Removing the access rights don't change anything for portal user and make those data secure. Task-1911581 --- addons/project/security/ir.model.access.csv | 3 +-- 1 file changed, 1 insertion(+), 2 deletions(-) diff --git a/addons/project/security/ir.model.access.csv b/addons/project/security/ir.model.access.csv index f7bf080c5cf..ccc5238f501 100644 --- a/addons/project/security/ir.model.access.csv +++ b/addons/project/security/ir.model.access.csv @@ -22,5 +22,4 @@ access_mail_alias,mail.alias,mail.model_mail_alias,project.group_project_manager access_mail_activity_type_project_manager,mail.activity.type.project.manager,mail.model_mail_activity_type,project.group_project_manager,1,1,1,1 access_account_analytic_account_user,account.analytic.account,analytic.model_account_analytic_account,project.group_project_user,1,0,0,0 access_account_analytic_account_manager,account.analytic.account,analytic.model_account_analytic_account,project.group_project_manager,1,1,1,1 -access_account_analytic_account_portal,account_analytic_account,analytic.model_account_analytic_account,base.group_portal,1,0,0,0 -access_account_analytic_line_project,account.analytic.line project,analytic.model_account_analytic_line,project.group_project_manager,1,1,1,1 \ No newline at end of file +access_account_analytic_line_project,account.analytic.line project,analytic.model_account_analytic_line,project.group_project_manager,1,1,1,1