From 26d67991c2ff5de77ce0d69284d7aaa97c9955f5 Mon Sep 17 00:00:00 2001 From: Stijn Houben Date: Thu, 4 Oct 2018 22:35:38 +0000 Subject: [PATCH] [FIX] base: allow admin to modify paperformats If a user creates a paperformat, he should be able to modify it too. Employees have no reason to modify the paperformat though (nor create). Having a malicious employee modifying an existing report may be dangerous. [CLA] signature for stijnh92 Fixes #26292 closes odoo/odoo#27444 --- doc/cla/individual/stijnh92.md | 11 +++++++++++ odoo/addons/base/security/ir.model.access.csv | 2 +- 2 files changed, 12 insertions(+), 1 deletion(-) create mode 100644 doc/cla/individual/stijnh92.md diff --git a/doc/cla/individual/stijnh92.md b/doc/cla/individual/stijnh92.md new file mode 100644 index 00000000000..b969df67c38 --- /dev/null +++ b/doc/cla/individual/stijnh92.md @@ -0,0 +1,11 @@ +Belgium, 2018-09-05 + +I hereby agree to the terms of the Odoo Individual Contributor License +Agreement v1.0. + +I declare that I am authorized and able to make this agreement and sign this +declaration. + +Signed, + +Stijn Houben stijnhouben92@gmail.com https://github.com/stijnh92 diff --git a/odoo/addons/base/security/ir.model.access.csv b/odoo/addons/base/security/ir.model.access.csv index 13e07e1aeac..4b80e19ab71 100644 --- a/odoo/addons/base/security/ir.model.access.csv +++ b/odoo/addons/base/security/ir.model.access.csv @@ -97,4 +97,4 @@ "access_ir_actions_client","ir_actions_client all","model_ir_actions_client",,1,0,0,0 "access_ir_logging","ir_logging admin","model_ir_logging","group_erp_manager",1,1,1,1 "paperformat_access_portal","ir_actions_report_paperformat group_portal","model_report_paperformat",,1,0,0,0 -"paperformat_access_employee","ir_actions_report_paperformat group_hr_user","model_report_paperformat",,1,0,1,0 +"paperformat_access_employee","ir_actions_report_paperformat group_system","model_report_paperformat",group_system,1,1,1,1