From d22b94a699916745a15836f53e5d4ebf30a460e2 Mon Sep 17 00:00:00 2001
From: Damien Bouvy <dbo@odoo.com>
Date: Tue, 20 Jan 2015 16:06:22 +0100
Subject: [PATCH] [FIX] planner: portal users had no read access to planner,
 which caused an error in the webclient

---
 addons/planner/__openerp__.py                |  1 +
 addons/planner/security/ir.model.access.csv  |  3 ++-
 addons/planner/security/planner_security.xml | 11 +++++++++++
 3 files changed, 14 insertions(+), 1 deletion(-)
 create mode 100644 addons/planner/security/planner_security.xml

diff --git a/addons/planner/__openerp__.py b/addons/planner/__openerp__.py
index abd2e847414..2237c199ddf 100644
--- a/addons/planner/__openerp__.py
+++ b/addons/planner/__openerp__.py
@@ -11,6 +11,7 @@
     'data': [
         'security/ir.model.access.csv',
         'views/planner.xml',
+        'security/planner_security.xml',
     ],
     'qweb': ['static/src/xml/planner.xml'],
     'installable': True,
diff --git a/addons/planner/security/ir.model.access.csv b/addons/planner/security/ir.model.access.csv
index a953e9fb95a..a2868b08762 100644
--- a/addons/planner/security/ir.model.access.csv
+++ b/addons/planner/security/ir.model.access.csv
@@ -1,3 +1,4 @@
 id,name,model_id:id,group_id:id,perm_read,perm_write,perm_create,perm_unlink
 access_planner_emp,planner.planner.emp,model_planner_planner,base.group_user,1,1,0,0
-access_planner_manager,planner.planner.manager,model_planner_planner,base.group_erp_manager,1,1,1,1
\ No newline at end of file
+access_planner_manager,planner.planner.manager,model_planner_planner,base.group_erp_manager,1,1,1,1
+access_planner_portal,planner.planner.portal,model_planner_planner,base.group_portal,1,0,0,0
\ No newline at end of file
diff --git a/addons/planner/security/planner_security.xml b/addons/planner/security/planner_security.xml
new file mode 100644
index 00000000000..7fb8a355b6e
--- /dev/null
+++ b/addons/planner/security/planner_security.xml
@@ -0,0 +1,11 @@
+<?xml version="1.0" encoding="utf-8"?>
+<odoo>
+    <!-- Ensure that the portal user doesn't have access to any planner that is not designed for him -->
+    <record model="ir.rule" id="planner_portal_empty">
+        <field name="name">Portal Planner</field>
+        <field name="model_id" ref="model_planner_planner"/>
+        <field name="perm_read" eval="1" />
+        <field name="domain_force">[('planner_application', '=', 'portal')]</field>
+        <field name="groups" eval="[(4, ref('base.group_public'))]"/>
+    </record>
+</odoo>
\ No newline at end of file