pengyuthon/odoo_source
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity

[IMP] website_hr: remove read ACL from portal user

Browse Source 
The read permission on `hr.employee` has been removed from the public
and portal users; replaced with read access on the public employee
profile.

closes odoo/odoo#34508

Signed-off-by: Yannick Tivisse (yti) <yti@odoo.com>
This commit is contained in:
Kevin Baptiste
2019-07-02 08:12:11 +00:00
parent 1f5e89b176
commit b27c145cf2
2 changed files with 4 additions and 4 deletions
Download Patch File Download Diff File Expand all files Collapse all files
addons/website_hr/security/hr_employee_security.xml
+2 -2
View File
@@ -2,7 +2,7 @@
<odoo>
<record id="hr_employee_public" model="ir.rule">
<field name="name">hr_employee: Public</field>
<field name="model_id" ref="hr.model_hr_employee"/>
<field name="model_id" ref="hr.model_hr_employee_public"/>
<field name="domain_force">[('website_published', '=', True)]</field>
<field name="groups" eval="[(4, ref('base.group_public'))]"/>
<field name="perm_read" eval="True"/>
@@ -12,7 +12,7 @@
</record>
<record id="hr_employee_portal" model="ir.rule">
<field name="name">hr_employee: Portal</field>
<field name="model_id" ref="hr.model_hr_employee"/>
<field name="model_id" ref="hr.model_hr_employee_public"/>
<field name="domain_force">[('website_published', '=', True)]</field>
<field name="groups" eval="[(4, ref('base.group_portal'))]"/>
<field name="perm_read" eval="True"/>
addons/website_hr/security/ir.model.access.csv
+2 -2
View File
@@ -1,5 +1,5 @@
id,name,model_id:id,group_id:id,perm_read,perm_write,perm_create,perm_unlink
access_hr_employee_public,hr.employee.public,hr.model_hr_employee,base.group_public,1,0,0,0
access_hr_employee_portal,hr.employee.portal,hr.model_hr_employee,base.group_portal,1,0,0,0
access_hr_employee_public,hr.employee.public,hr.model_hr_employee_public,base.group_public,1,0,0,0
access_hr_employee_portal,hr.employee.portal,hr.model_hr_employee_public,base.group_portal,1,0,0,0
access_resource_public,resource.resource.public,resource.model_resource_resource,base.group_public,1,0,0,0
access_resource_portal,resource.resource.portal,resource.model_resource_resource,base.group_portal,1,0,0,0
1 id name model_id:id group_id:id perm_read perm_write perm_create perm_unlink
2 access_hr_employee_public hr.employee.public hr.model_hr_employee hr.model_hr_employee_public base.group_public 1 0 0 0
3 access_hr_employee_portal hr.employee.portal hr.model_hr_employee hr.model_hr_employee_public base.group_portal 1 0 0 0
4 access_resource_public resource.resource.public resource.model_resource_resource base.group_public 1 0 0 0
5 access_resource_portal resource.resource.portal resource.model_resource_resource base.group_portal 1 0 0 0