pengyuthon/odoo_source
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity

[FIX] sale, website_sale: push record rule lower in module dependencies

Browse Source 
Some modules expect the users having the sales_team.group_sale_salesman group
to be able to read payment tokens (credit cards).
Payment tokens are defined in payment.
Both are a dependence of sale, which is thus the lowest common denominator.

opw 1965213
This commit is contained in:
Nans Lefebvre
2019-07-19 12:44:14 +00:00
committed by RomainLibert
parent f4563d0710
commit d727adcd70
2 changed files with 17 additions and 0 deletions
Download Patch File Download Diff File Expand all files Collapse all files
addons/sale/security/sale_security.xml
+15
View File
@@ -59,6 +59,21 @@
<field name="domain_force">['|',('company_id','=',False),('company_id','child_of',[user.company_id.id])]</field>
</record>
<!-- Payments -->
<record id="payment_transaction_salesman_rule" model="ir.rule">
<field name="name">Access every payment transaction</field>
<field name="model_id" ref="payment.model_payment_transaction"/>
<field name="domain_force">[(1, '=', 1)]</field>
<field name="groups" eval="[(4, ref('sales_team.group_sale_salesman'))]"/>
</record>
<record id="payment_token_salesman_rule" model="ir.rule">
<field name="name">Access every payment token</field>
<field name="model_id" ref="payment.model_payment_token"/>
<field name="domain_force">[(1, '=', 1)]</field>
<field name="groups" eval="[(4, ref('sales_team.group_sale_salesman'))]"/>
</record>
<!-- Portal Access Rules -->
<record id="sale_order_rule_portal" model="ir.rule">
<field name="name">Portal Personal Quotations/Sales Orders</field>
addons/website_sale/security/website_sale.xml
+2
View File
@@ -23,6 +23,7 @@
<field name="perm_unlink" eval="False"/>
</record>
<!-- TODO: remove in master -->
<record id="payment_transaction_salesman_rule" model="ir.rule">
<field name="name">Access every payment transaction</field>
<field name="model_id" ref="payment.model_payment_transaction"/>
@@ -30,6 +31,7 @@
<field name="groups" eval="[(4, ref('sales_team.group_sale_salesman'))]"/>
</record>
<!-- TODO: remove in master -->
<record id="payment_token_salesman_rule" model="ir.rule">
<field name="name">Access every payment token</field>
<field name="model_id" ref="payment.model_payment_token"/>