From adb16fd77918f186941ef634917f2185c01aff8b Mon Sep 17 00:00:00 2001 From: "vta vta@openerp.com" <> Date: Wed, 19 Dec 2012 21:03:39 +0100 Subject: [PATCH] [FIX] Anonymous group allowed to create mail.message, so anonymous users can submit contact forms which creates a lead bzr revid: vta@openerp.com-20121219200339-42fx8vxw7pzfclxl --- addons/portal_anonymous/security/ir.model.access.csv | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/addons/portal_anonymous/security/ir.model.access.csv b/addons/portal_anonymous/security/ir.model.access.csv index a26b600288d..24c29200230 100644 --- a/addons/portal_anonymous/security/ir.model.access.csv +++ b/addons/portal_anonymous/security/ir.model.access.csv @@ -1,3 +1,3 @@ id,name,model_id:id,group_id:id,perm_read,perm_write,perm_create,perm_unlink -access_mail_message_portal,mail.message.portal,mail.model_mail_message,portal.group_anonymous,1,0,0,0 +access_mail_message_portal,mail.message.portal,mail.model_mail_message,portal.group_anonymous,1,0,1,0 access_res_partner,res.partner,base.model_res_partner,portal.group_anonymous,1,0,0,0