From caf1ad8a6218a99222777912253dc038073aef3e Mon Sep 17 00:00:00 2001
From: Denis Ledoux <dle@odoo.com>
Date: Mon, 22 Sep 2014 16:33:09 +0200
Subject: [PATCH] [FIX] website_blog: portal users should not be able to read
 unpublished blog posts

---
 addons/website_blog/security/website_blog.xml | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/addons/website_blog/security/website_blog.xml b/addons/website_blog/security/website_blog.xml
index 97efcb82eab..76653607faf 100644
--- a/addons/website_blog/security/website_blog.xml
+++ b/addons/website_blog/security/website_blog.xml
@@ -6,7 +6,7 @@
             <field name="name">Blog Post: public: published only</field>
             <field name="model_id" ref="model_blog_post"/>
             <field name="domain_force">[('website_published', '=', True)]</field>
-            <field name="groups" eval="[(4, ref('base.group_public'))]"/>
+            <field name="groups" eval="[(4, ref('base.group_public')), (4, ref('base.group_portal'))]"/>
         </record>
 
     </data>