[FIX] base: suggested default ACL should be safer
When there is no ACL for a model, the system emits a log with a sample ACL entry that developers should consider adding. This proposed ACL should be safe: a default read-only access for internal users seems appropriate. Closes #25919
This commit is contained in:
@@ -389,7 +389,7 @@ def load_modules(db, force_demo=False, status=None, update_module=False):
|
||||
cr.execute("""select model,name from ir_model where id NOT IN (select distinct model_id from ir_model_access)""")
|
||||
for (model, name) in cr.fetchall():
|
||||
if model in registry and not registry[model].is_transient() and not isinstance(registry[model], openerp.osv.orm.AbstractModel):
|
||||
_logger.warning('The model %s has no access rules, consider adding one. E.g. access_%s,access_%s,model_%s,,1,0,0,0',
|
||||
_logger.warning('The model %s has no access rules, consider adding one. E.g. access_%s,access_%s,model_%s,base.group_user,1,0,0,0',
|
||||
model, model.replace('.', '_'), model.replace('.', '_'), model.replace('.', '_'))
|
||||
|
||||
# Temporary warning while we remove access rights on osv_memory objects, as they have
|
||||
|
||||
Reference in New Issue
Block a user