pengyuthon/odoo_source
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity

[FIX] website: gives acces to ir.asset to the website admin

Browse Source 
Before this commit, the users with the "editor and designer" role no
longer had access to the theme tab options (and also other flows like
assets regeneration in debug mode, etc). This is because when the
website assets have been changed to be handled by ir.asset records, in
this commit [1], the "editor and designer" rights were not updated to
have an access to ir.asset.

After this commit, the users with the "editor and designer" role have
the rights to access ir.asset (read, write, create, but not unlink
because the admin does not need it).

This mimick what is done with ir.ui.view, which is way more critical
than ir.asset, so it should be relatively safe to add this right to the
website admin for assets, as it is already the case for views.

We could have added sudo() everywhere (as no need of a -u, and which is
less risky that adding rights directly through csv but the ir.asset
rights covers too many different flows to do so.

[1]: https://github.com/odoo/odoo/commit/8cc066173dfb61bd95b8e1f0716f71f4e251810a

task-2748004

closes odoo/odoo#84847

X-original-commit: e3515a7b73c3e173a3ddf0bc48e4a888024c8817
Signed-off-by: Romain Derie (rde) <rde@odoo.com>
This commit is contained in:
Benjamin Vray
2022-02-18 10:47:01 +00:00
parent 34c192761f
commit 952b2eb390
1 changed files with 1 additions and 0 deletions
Download Patch File Download Diff File Expand all files Collapse all files
addons/website/security/ir.model.access.csv
+1
View File
@@ -9,6 +9,7 @@ access_website_page,access_website_page,model_website_page,,0,0,0,0
access_website_page_designer,Web Page Manager,model_website_page,group_website_designer,1,1,1,1
access_website_ir_ui_view_publisher,access_website_ir_ui_view_publisher,model_ir_ui_view,group_website_publisher,1,0,0,0
access_website_ir_ui_view_designer,access_website_ir_ui_view_designer,model_ir_ui_view,group_website_designer,1,1,1,1
access_website_ir_asset_designer,access_website_ir_asset_designer,model_ir_asset,group_website_designer,1,1,1,0
access_seo_public,access_seo_public,model_website_seo_metadata,,1,0,0,0
access_seo_designer,access_seo_designer,model_website_seo_metadata,group_website_designer,1,1,1,1
access_website_visitor_designer,access_website_visitor_designer,model_website_visitor,website.group_website_designer,1,1,0,1
1 id name model_id:id group_id:id perm_read perm_write perm_create perm_unlink
9 access_website_page_designer Web Page Manager model_website_page group_website_designer 1 1 1 1
10 access_website_ir_ui_view_publisher access_website_ir_ui_view_publisher model_ir_ui_view group_website_publisher 1 0 0 0
11 access_website_ir_ui_view_designer access_website_ir_ui_view_designer model_ir_ui_view group_website_designer 1 1 1 1
12 access_website_ir_asset_designer access_website_ir_asset_designer model_ir_asset group_website_designer 1 1 1 0
13 access_seo_public access_seo_public model_website_seo_metadata 1 0 0 0
14 access_seo_designer access_seo_designer model_website_seo_metadata group_website_designer 1 1 1 1
15 access_website_visitor_designer access_website_visitor_designer model_website_visitor website.group_website_designer 1 1 0 1