From add22ec8ef11f5ce6f8260c5fd791ca99a38ff43 Mon Sep 17 00:00:00 2001 From: Xavier Morel Date: Wed, 10 Jun 2020 13:50:48 +0000 Subject: [PATCH] [FIX] base: change password wizard should be restricted to ERP managers ACLs on the wizard lines should match that of the wizard, otherwise ERP managers can see the action but get an error as soon as they open the wizard. Since ERP managers have write access on arbitrary users, that's probably the right group to use. Task 2275134 closes odoo/odoo#53007 X-original-commit: 657d44f08c402bc0547b7cbb01c2d447e641d062 Signed-off-by: Xavier Morel (xmo) --- odoo/addons/base/security/ir.model.access.csv | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/odoo/addons/base/security/ir.model.access.csv b/odoo/addons/base/security/ir.model.access.csv index 0a0abc9d090..3c6d64ea09d 100644 --- a/odoo/addons/base/security/ir.model.access.csv +++ b/odoo/addons/base/security/ir.model.access.csv @@ -109,7 +109,7 @@ "access_res_config_installer","access.res.config.installer","model_res_config_installer","base.group_system",1,1,1,0 "access_res_config_settings","access.res.config.settings","model_res_config_settings","base.group_system",1,1,1,0 "access_change_password_wizard","access.change.password.wizard","model_change_password_wizard","base.group_erp_manager",1,1,1,0 -"access_change_password_user","access.change.password.user","model_change_password_user","base.group_system",1,1,1,0 +"access_change_password_user","access.change.password.user","model_change_password_user","base.group_erp_manager",1,1,1,0 "access_base_module_update","access.base.module.update","model_base_module_update","base.group_system",1,1,1,0 "access_base_language_install","access.base.language.install","model_base_language_install","base.group_system",1,1,1,0 "access_base_language_import","access.base.language.import","model_base_language_import","base.group_system",1,1,1,0