From 732293d69b03b2aed7976e92365e32f33ea925e1 Mon Sep 17 00:00:00 2001
From: "Richard Mathot (OpenERP)" <rim@openerp.com>
Date: Thu, 17 Apr 2014 15:50:47 +0200
Subject: [PATCH] [FIX] Security rules for surveys

bzr revid: rim@openerp.com-20140417135047-7ekyq1t7jpa6ggk1
---
 addons/survey/security/survey_security.xml | 10 +++++-----
 1 file changed, 5 insertions(+), 5 deletions(-)

diff --git a/addons/survey/security/survey_security.xml b/addons/survey/security/survey_security.xml
index 872e1049bcd..7d7388c26f2 100644
--- a/addons/survey/security/survey_security.xml
+++ b/addons/survey/security/survey_security.xml
@@ -17,7 +17,7 @@
         <record id="survey_public_access" model="ir.rule">
             <field name="name">Public access to surveys</field>
             <field name="model_id" ref="survey.model_survey_survey"/>
-            <field name="domain_force">[('state', '=', 'open'), ('auth_required', '=', False)]</field>
+            <field name="domain_force">[('auth_required', '=', False)]</field>
             <field name="groups" eval="[(4, ref('base.group_public'))]"/>
             <field eval="0" name="perm_unlink"/>
             <field eval="0" name="perm_write"/>
@@ -53,9 +53,9 @@
             <field name="domain_force">[('create_uid', '=', user.id)]</field>
             <field name="groups" eval="[(4, ref('base.group_public'))]"/>
             <field eval="0" name="perm_unlink"/>
-            <field eval="1" name="perm_write"/>
+            <field eval="0" name="perm_write"/>
             <field eval="1" name="perm_read"/>
-            <field eval="1" name="perm_create"/>
+            <field eval="0" name="perm_create"/>
         </record>
 
         <record id="survey_rule" model="ir.rule">
@@ -65,8 +65,8 @@
             <field name="groups" eval="[(4, ref('base.group_survey_user'))]"/>
             <field eval="0" name="perm_unlink"/>
             <field eval="1" name="perm_write"/>
-            <field eval="1" name="perm_read"/>
-            <field eval="1" name="perm_create"/>
+            <field eval="0" name="perm_read"/>
+            <field eval="0" name="perm_create"/>
         </record>
 
         <record id="survey_rule_manager" model="ir.rule">