[IMP] subscription: Remove write,create,unlink right on ir_cron

Use a sudo on a ir_cron creation instead of giving full access rights to employee on a technical field
2016-07-07 16:20:15 +02:00
parent c9b56753e7
commit ac099b0e07
2 changed files with 2 additions and 2 deletions
@@ -78,7 +78,7 @@ class Subscription(models.Model):
                'priority': 6,
                'user_id': subscription.user_id.id
            }
-            cron = self.env['ir.cron'].create(cron_data)
+            cron = self.env['ir.cron'].sudo().create(cron_data)
            subscription.write({'cron_id': cron.id, 'state': 'running'})

    @api.multi
@@ -4,4 +4,4 @@ access_subscription_subscription_user,subscription.subscription user,model_subsc
 access_subscription_subscription_history_user,subscription.subscription.history user,model_subscription_subscription_history,base.group_user,1,1,1,1
 access_subscription_document_user,subscription.document user,model_subscription_document,base.group_user,1,1,1,1
 access_res_partner_user,res.partner.user,base.model_res_partner,base.group_user,1,1,1,1
-access_ir_cron_user,ir.cron.user,base.model_ir_cron,base.group_user,1,1,1,1
+access_ir_cron_user,ir.cron.user,base.model_ir_cron,base.group_user,1,0,0,0