[FIX] project_issue_sheet: restrict inherited view access

The field timesheet_ids (hr.analytic.timesheet) and analytic_account_id
(account.analytic.account) should not be accessible by the portal user.

Fixes #8338
Closes #8354
This commit is contained in:
Nicolas Mac Rouillon
2015-10-06 09:24:53 +02:00
committed by Martin Trigaux
parent 25634df8f2
commit 4400da6ca4
@@ -4,6 +4,7 @@
<record model="ir.ui.view" id="project_issue_form_view">
<field name="name">Project Issue Tracker Form</field>
<field name="model">project.issue</field>
<field name="groups_id" eval="[(4, ref('base.group_user'))]"/>
<field name="inherit_id" ref="project_issue.project_issue_form_view" />
<field name="arch" type="xml">
<field name="project_id" position="attributes">