pengyuthon/odoo_source
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity

[IMP] *: remove global ACL

Browse Source 
THese are rarely intended for all users but often intended only for
employees.

account:
account.incoterms: only used within internal business models
account.journal.group: same as account.journal, add sudo in computed field

account_edi: need access to accounting objects

base_address_extended:
res.city: only employees should access address data

board: only employees uses this (old) module

crm:
crm.stage: internal users business object

hr_recruitment: employees can read

im_livechat: apply same as for the steps

l10n_ar: used on partner, not only invoices
l10n_ec: accessed only through account.move
l10n_latam: accessed on res.partner

mail:
publisher.warrenty.contract: no data, only static models
mail.channel: group_user has already his own rule
mail.group: group_user has already his own rule
mail.message.subtype: group_user has already his own rule
mail.message.all: remove, already has a portal and employee rule

partner_autocomplete: no interaction with public

project:
project.tags: only needed for project sharing

sale_management:
sale.order.option: same as sale.order

utm: employee already has write access

web_editor: test models that have nothing to do here
web_tour: only employees uses tours

website_sale:
product.ribbon: add sudo for access

base:
ir.default: only employees uses set (could probably be converted to group_system)
ir.ui.view.custom: same as ir.ui.view, add sudo when needed
report.*: portal users don't configure reports
res.users.log: create in sudo, no access needed (adapt test to use another model)
res.lang: still needed for public

closes odoo/odoo#118701

Related: odoo/enterprise#41285
Signed-off-by: Martin Trigaux (mat) <mat@odoo.com>
This commit is contained in:
Martin Trigaux
2023-06-12 22:39:26 +02:00
parent 53ca9840d8
commit 604a47ead8
56 changed files with 252 additions and 246 deletions
Download Patch File Download Diff File Expand all files Collapse all files
addons/utm/security/ir.model.access.csv
+3 -3
View File
@@ -1,11 +1,11 @@
id,name,model_id:id,group_id:id,perm_read,perm_write,perm_create,perm_unlink
access_utm_campaign,access_utm_campaign,model_utm_campaign,,1,0,1,0
access_utm_campaign,access_utm_campaign,model_utm_campaign,base.group_portal,1,0,1,0
access_utm_campaign_user,access_utm_campaign_user,model_utm_campaign,base.group_user,1,1,1,0
access_utm_campaign_system,utm.campaign.system,model_utm_campaign,base.group_system,1,1,1,1
access_utm_medium,access_utm_medium,model_utm_medium,,1,0,1,0
access_utm_medium,access_utm_medium,model_utm_medium,base.group_portal,1,0,1,0
access_utm_medium_user,access_utm_medium_user,model_utm_medium,base.group_user,1,1,1,0
access_utm_medium_system,utm.medium.system,model_utm_medium,base.group_system,1,1,1,1
access_utm_source,access_utm_source,model_utm_source,,1,0,1,0
access_utm_source,access_utm_source,model_utm_source,base.group_portal,1,0,1,0
access_utm_source_user,access_utm_source_user,model_utm_source,base.group_user,1,1,1,0
access_utm_source_system,utm.source.system,model_utm_source,base.group_system,1,1,1,1
access_utm_stage_user,mail.utm.stage,model_utm_stage,base.group_user,1,0,0,0
1 id name model_id:id group_id:id perm_read perm_write perm_create perm_unlink
2 access_utm_campaign access_utm_campaign model_utm_campaign base.group_portal 1 0 1 0
3 access_utm_campaign_user access_utm_campaign_user model_utm_campaign base.group_user 1 1 1 0
4 access_utm_campaign_system utm.campaign.system model_utm_campaign base.group_system 1 1 1 1
5 access_utm_medium access_utm_medium model_utm_medium base.group_portal 1 0 1 0
6 access_utm_medium_user access_utm_medium_user model_utm_medium base.group_user 1 1 1 0
7 access_utm_medium_system utm.medium.system model_utm_medium base.group_system 1 1 1 1
8 access_utm_source access_utm_source model_utm_source base.group_portal 1 0 1 0
9 access_utm_source_user access_utm_source_user model_utm_source base.group_user 1 1 1 0
10 access_utm_source_system utm.source.system model_utm_source base.group_system 1 1 1 1
11 access_utm_stage_user mail.utm.stage model_utm_stage base.group_user 1 0 0 0