pengyuthon/odoo_source
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity

[FIX] base: change password wizard should be restricted to ERP managers

Browse Source 
ACLs on the wizard lines should match that of the wizard, otherwise
ERP managers can see the action but get an error as soon as they open
the wizard.

Since ERP managers have write access on arbitrary users, that's
probably the right group to use.

Task 2275134

closes odoo/odoo#53007

X-original-commit: 657d44f08c402bc0547b7cbb01c2d447e641d062
Signed-off-by: Xavier Morel (xmo) <xmo@odoo.com>
This commit is contained in:
Xavier Morel
2020-06-16 06:04:48 +00:00
parent 0e1ce4c660
commit add22ec8ef
1 changed files with 1 additions and 1 deletions
Download Patch File Download Diff File Expand all files Collapse all files
odoo/addons/base/security/ir.model.access.csv
+1 -1
View File
@@ -109,7 +109,7 @@
"access_res_config_installer","access.res.config.installer","model_res_config_installer","base.group_system",1,1,1,0
"access_res_config_settings","access.res.config.settings","model_res_config_settings","base.group_system",1,1,1,0
"access_change_password_wizard","access.change.password.wizard","model_change_password_wizard","base.group_erp_manager",1,1,1,0
"access_change_password_user","access.change.password.user","model_change_password_user","base.group_system",1,1,1,0
"access_change_password_user","access.change.password.user","model_change_password_user","base.group_erp_manager",1,1,1,0
"access_base_module_update","access.base.module.update","model_base_module_update","base.group_system",1,1,1,0
"access_base_language_install","access.base.language.install","model_base_language_install","base.group_system",1,1,1,0
"access_base_language_import","access.base.language.import","model_base_language_import","base.group_system",1,1,1,0
1 id name model_id:id group_id:id perm_read perm_write perm_create perm_unlink
109 access_res_config_installer access.res.config.installer model_res_config_installer base.group_system 1 1 1 0
110 access_res_config_settings access.res.config.settings model_res_config_settings base.group_system 1 1 1 0
111 access_change_password_wizard access.change.password.wizard model_change_password_wizard base.group_erp_manager 1 1 1 0
112 access_change_password_user access.change.password.user model_change_password_user base.group_system base.group_erp_manager 1 1 1 0
113 access_base_module_update access.base.module.update model_base_module_update base.group_system 1 1 1 0
114 access_base_language_install access.base.language.install model_base_language_install base.group_system 1 1 1 0
115 access_base_language_import access.base.language.import model_base_language_import base.group_system 1 1 1 0