From 76d0444fde75bc0f58049c5d5dc7bbc686b923b3 Mon Sep 17 00:00:00 2001
From: Jeremy Kersten <jke@odoo.com>
Date: Fri, 28 Apr 2017 19:06:12 +0200
Subject: [PATCH] [FIX] website_hr: fix access right to allow portal user to
 read employee website_published

opw-741077
This commit closes #16616
---
 addons/website_hr/security/hr_employee_security.xml | 10 ++++++++++
 addons/website_hr/security/ir.model.access.csv      |  2 ++
 2 files changed, 12 insertions(+)

diff --git a/addons/website_hr/security/hr_employee_security.xml b/addons/website_hr/security/hr_employee_security.xml
index e2125c2575b..a86b14310a8 100644
--- a/addons/website_hr/security/hr_employee_security.xml
+++ b/addons/website_hr/security/hr_employee_security.xml
@@ -10,4 +10,14 @@
         <field name="perm_create" eval="False"/>
         <field name="perm_unlink" eval="False"/>
     </record>
+    <record id="hr_employee_portal" model="ir.rule">
+        <field name="name">hr_employee: Portal</field>
+        <field name="model_id" ref="hr.model_hr_employee"/>
+        <field name="domain_force">[('website_published', '=', True)]</field>
+        <field name="groups" eval="[(4, ref('base.group_portal'))]"/>
+        <field name="perm_read" eval="True"/>
+        <field name="perm_write" eval="False"/>
+        <field name="perm_create" eval="False"/>
+        <field name="perm_unlink" eval="False"/>
+    </record>
 </odoo>
\ No newline at end of file
diff --git a/addons/website_hr/security/ir.model.access.csv b/addons/website_hr/security/ir.model.access.csv
index 6f038a47ba9..53be505e42e 100644
--- a/addons/website_hr/security/ir.model.access.csv
+++ b/addons/website_hr/security/ir.model.access.csv
@@ -1,3 +1,5 @@
 id,name,model_id:id,group_id:id,perm_read,perm_write,perm_create,perm_unlink
 access_hr_employee_public,hr.employee.public,hr.model_hr_employee,base.group_public,1,0,0,0
+access_hr_employee_portal,hr.employee.portal,hr.model_hr_employee,base.group_portal,1,0,0,0
 access_resource_public,resource.resource.public,resource.model_resource_resource,base.group_public,1,0,0,0
+access_resource_portal,resource.resource.portal,resource.model_resource_resource,base.group_portal,1,0,0,0