pengyuthon/odoo_source
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity

[FIX] ir.ui.view.custom: fix access rights and rules

Browse Source 
Anyone should have full access to their own
ir.ui.view.custom records, as this is the way
to customize dashboards. This is done with
full access for everybody + an access rule
that only grants this access on your own
records.

bzr revid: odo@openerp.com-20111122131110-awawg4dhgsxb6xrc
This commit is contained in:
Olivier Dony
2011-11-22 14:11:10 +01:00
parent 998fd0dab6
commit d80b022195
2 changed files with 14 additions and 11 deletions
Download Patch File Download Diff File Expand all files Collapse all files
openerp/addons/base/security/base_security.xml
+13 -9
View File
@@ -49,14 +49,12 @@
<record model="ir.rule" id="res_widget_user_rule">
<field name="name">res.widget.user rule</field>
<field name="model_id" ref="model_res_widget_user"/>
<field name="global" eval="True"/>
<field name="domain_force">['|', ('user_id','=',user.id),('user_id','=',False)]</field>
</record>
<record model="ir.rule" id="res_partner_rule">
<field name="name">res.partner company</field>
<field name="model_id" ref="model_res_partner"/>
<field name="global" eval="True"/>
<!-- Show partners from ancestors and descendants companies (or company-less), this is usually a better
default for multicompany setups. -->
<field name="domain_force">['|','|',('company_id.child_ids','child_of',[user.company_id.id]),('company_id','child_of',[user.company_id.id]),('company_id','=',False)]</field>
@@ -65,16 +63,22 @@
<record model="ir.rule" id="multi_company_default_rule">
<field name="name">Multi_company_default company</field>
<field name="model_id" ref="model_multi_company_default"/>
<field name="global" eval="True"/>
<field name="domain_force">[('company_id','child_of',[user.company_id.id])]</field>
</record>
<record model="ir.rule" id="ir_values_default_rule">
<field name="name">Defaults: alter personal values only</field>
<field name="model_id" ref="model_ir_values"/>
<field name="domain_force">[('key','=','default'),('user_id','=',user.id)]</field>
<field name="perm_read" eval="False"/>
</record>
<record model="ir.rule" id="ir_values_default_rule">
<field name="name">Defaults: alter personal values only</field>
<field name="model_id" ref="model_ir_values"/>
<field name="domain_force">[('key','=','default'),('user_id','=',user.id)]</field>
<field name="perm_read" eval="False"/>
</record>
<!-- Used for dashboard customizations, users should only be able to edit their own dashboards -->
<record model="ir.rule" id="ir_ui_view_custom_personal">
<field name="name">ir.ui.view_custom rule</field>
<field name="model_id" ref="model_ir_ui_view_custom"/>
<field name="domain_force">[('user_id','=',user.id)]</field>
</record>
</data>
</openerp>
openerp/addons/base/security/ir.model.access.csv
+1 -2
View File
@@ -35,8 +35,7 @@
"access_ir_ui_menu_group_system","ir_ui_menu group_system","model_ir_ui_menu","group_system",1,1,1,1
"access_ir_ui_view_group_user","ir_ui_view group_user","model_ir_ui_view",,1,0,0,0
"access_ir_ui_view_group_system","ir_ui_view group_system","model_ir_ui_view","group_system",1,1,1,1
"access_ir_ui_view_custom_group_user","ir_ui_view_custom_group_user","model_ir_ui_view_custom",,1,0,0,0
"access_ir_ui_view_custom_group_system","ir_ui_view_custom_group_system","model_ir_ui_view_custom","group_system",1,1,1,1
"access_ir_ui_view_custom_group_user","ir_ui_view_custom_group_user","model_ir_ui_view_custom",,1,1,1,1
"access_ir_ui_view_sc_group_user","ir_ui_view_sc group_user","model_ir_ui_view_sc",,1,1,1,1
"access_ir_values_group_all","ir_values group_all","model_ir_values",,1,1,1,1
"access_res_company_group_erp_manager","res_company group_erp_manager","model_res_company","group_erp_manager",1,1,1,1
1 id name model_id:id group_id:id perm_read perm_write perm_create perm_unlink
35 access_ir_ui_menu_group_system ir_ui_menu group_system model_ir_ui_menu group_system 1 1 1 1
36 access_ir_ui_view_group_user ir_ui_view group_user model_ir_ui_view 1 0 0 0
37 access_ir_ui_view_group_system ir_ui_view group_system model_ir_ui_view group_system 1 1 1 1
38 access_ir_ui_view_custom_group_user ir_ui_view_custom_group_user model_ir_ui_view_custom 1 0 1 0 1 0 1
access_ir_ui_view_custom_group_system ir_ui_view_custom_group_system model_ir_ui_view_custom group_system 1 1 1 1
39 access_ir_ui_view_sc_group_user ir_ui_view_sc group_user model_ir_ui_view_sc 1 1 1 1
40 access_ir_values_group_all ir_values group_all model_ir_values 1 1 1 1
41 access_res_company_group_erp_manager res_company group_erp_manager model_res_company group_erp_manager 1 1 1 1