pengyuthon/odoo_source
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity

[IMP] base: remove read access on ir.actions.*

Browse Source 
Custom actions may contain sensitive information, including business
logic

Task-id: 8203
This commit is contained in:
Martin Trigaux
2020-08-17 09:08:21 +00:00
parent bd0b86d3f8
commit de4213b771
2 changed files with 1 additions and 10 deletions
Download Patch File Download Diff File Expand all files Collapse all files
addons/base_automation/security/ir.model.access.csv
-1
View File
@@ -1,3 +1,2 @@
id,name,model_id:id,group_id:id,perm_read,perm_write,perm_create,perm_unlink
access_base_automation,base.automation,model_base_automation,,1,0,0,0
access_base_automation_config,base.automation config,model_base_automation,base.group_system,1,1,1,1
1 id name model_id:id group_id:id perm_read perm_write perm_create perm_unlink
access_base_automation base.automation model_base_automation 1 0 0 0
2 access_base_automation_config base.automation config model_base_automation base.group_system 1 1 1 1
odoo/addons/base/security/ir.model.access.csv
+1 -9
View File
@@ -76,23 +76,16 @@
"access_res_users_apikeys_description_employee","API key wizard employees","model_res_users_apikeys_description","group_user",1,0,1,0
"access_res_users_apikeys_description_portal","API key wizard","model_res_users_apikeys_description","group_portal",1,0,1,0
"access_res_users_apikeys_show_employee","API key result employees","model_res_users_apikeys_show","group_user",1,0,1,0
"access_ir_actions_all","ir_actions_all","model_ir_actions_actions",,1,0,0,0
"access_ir_actions_group_system","ir_actions_group_system","model_ir_actions_actions","group_system",1,1,1,1
"access_ir_actions_act_window_all","ir_actions_act_window_all","model_ir_actions_act_window",,1,0,0,0
"access_ir_actions_act_window_system","ir_actions_act_window_system","model_ir_actions_act_window","group_system",1,1,1,1
"access_ir_actions_act_window_close_all","ir_actions_act_window_close_all","model_ir_actions_act_window_close",,1,0,0,0
"access_ir_actions_act_window_close_group_system","ir_actions_act_window_close_group_system","model_ir_actions_act_window_close","group_system",1,1,1,1
"access_ir_actions_report_all","ir_actions_report","model_ir_actions_report",,1,0,0,0
"access_ir_actions_report_group_system","ir_actions_report_group_system","model_ir_actions_report","group_system",1,1,1,1
"access_ir_actions_todo_group_system","ir_actions_todo group system","model_ir_actions_todo","group_system",1,1,1,1
"access_ir_actions_act_window_view_all","ir_actions_act_window_view_all","model_ir_actions_act_window_view",,1,0,0,0
"access_ir_actions_act_window_view_group_system","ir_actions_act_window_view_group_system","model_ir_actions_act_window_view","group_system",1,1,1,1
"access_ir_actions_act_url_all","ir_actions_act_url_all","model_ir_actions_act_url",,1,0,0,0
"access_ir_actions_act_url_group_system","ir_actions_act_url_group_system","model_ir_actions_act_url","group_system",1,1,1,1
"access_ir_server_object_lines_all","ir_server_object_lines_all","model_ir_server_object_lines",,1,0,0,0
"access_ir_server_object_lines_group_system","ir_server_object_lines_group_system","model_ir_server_object_lines","group_system",1,1,1,1
"access_ir_actions_server_all","ir_actions_server_all","model_ir_actions_server",,1,0,0,0
"access_ir_actions_server_group_system","ir_actions_server_group_system","model_ir_actions_server","group_system",1,1,1,1
"access_ir_actions_client","ir_actions_client all","model_ir_actions_client","group_system",1,1,1,1
"access_res_bank_group_system","res_bank_group_system","model_res_bank","group_system",1,1,1,1
"access_res_bank_group_partner_manager","res_bank_group_partner_manager","model_res_bank","group_partner_manager",1,1,1,1
"access_res_bank_user","res_bank user","model_res_bank","group_user",1,0,0,0
@@ -102,7 +95,6 @@
"access_ir_filter_public","ir_filters all","model_ir_filters","group_public",1,1,1,1
"access_ir_config_parameter_system","ir_config_parameter_system","model_ir_config_parameter","group_system",1,1,1,1
"access_ir_mail_server","ir_mail_server","model_ir_mail_server","group_system",1,1,1,1
"access_ir_actions_client","ir_actions_client all","model_ir_actions_client",,1,0,0,0
"access_ir_logging","ir_logging admin","model_ir_logging","group_erp_manager",1,1,1,1
"paperformat_access_portal","ir_actions_report_paperformat group_portal","model_report_paperformat",,1,0,0,0
"paperformat_access_employee","ir_actions_report_paperformat group_system","model_report_paperformat",group_system,1,1,1,1
1 id name model_id:id group_id:id perm_read perm_write perm_create perm_unlink
76 access_res_users_apikeys_description_employee API key wizard employees model_res_users_apikeys_description group_user 1 0 1 0
77 access_res_users_apikeys_description_portal API key wizard model_res_users_apikeys_description group_portal 1 0 1 0
78 access_res_users_apikeys_show_employee API key result employees model_res_users_apikeys_show group_user 1 0 1 0
access_ir_actions_all ir_actions_all model_ir_actions_actions 1 0 0 0
79 access_ir_actions_group_system ir_actions_group_system model_ir_actions_actions group_system 1 1 1 1
access_ir_actions_act_window_all ir_actions_act_window_all model_ir_actions_act_window 1 0 0 0
80 access_ir_actions_act_window_system ir_actions_act_window_system model_ir_actions_act_window group_system 1 1 1 1
access_ir_actions_act_window_close_all ir_actions_act_window_close_all model_ir_actions_act_window_close 1 0 0 0
81 access_ir_actions_act_window_close_group_system ir_actions_act_window_close_group_system model_ir_actions_act_window_close group_system 1 1 1 1
access_ir_actions_report_all ir_actions_report model_ir_actions_report 1 0 0 0
82 access_ir_actions_report_group_system ir_actions_report_group_system model_ir_actions_report group_system 1 1 1 1
83 access_ir_actions_todo_group_system ir_actions_todo group system model_ir_actions_todo group_system 1 1 1 1
access_ir_actions_act_window_view_all ir_actions_act_window_view_all model_ir_actions_act_window_view 1 0 0 0
84 access_ir_actions_act_window_view_group_system ir_actions_act_window_view_group_system model_ir_actions_act_window_view group_system 1 1 1 1
access_ir_actions_act_url_all ir_actions_act_url_all model_ir_actions_act_url 1 0 0 0
85 access_ir_actions_act_url_group_system ir_actions_act_url_group_system model_ir_actions_act_url group_system 1 1 1 1
access_ir_server_object_lines_all ir_server_object_lines_all model_ir_server_object_lines 1 0 0 0
86 access_ir_server_object_lines_group_system ir_server_object_lines_group_system model_ir_server_object_lines group_system 1 1 1 1
access_ir_actions_server_all ir_actions_server_all model_ir_actions_server 1 0 0 0
87 access_ir_actions_server_group_system ir_actions_server_group_system model_ir_actions_server group_system 1 1 1 1
88 access_ir_actions_client ir_actions_client all model_ir_actions_client group_system 1 1 1 1
89 access_res_bank_group_system res_bank_group_system model_res_bank group_system 1 1 1 1
90 access_res_bank_group_partner_manager res_bank_group_partner_manager model_res_bank group_partner_manager 1 1 1 1
91 access_res_bank_user res_bank user model_res_bank group_user 1 0 0 0
95 access_ir_filter_public ir_filters all model_ir_filters group_public 1 1 1 1
96 access_ir_config_parameter_system ir_config_parameter_system model_ir_config_parameter group_system 1 1 1 1
97 access_ir_mail_server ir_mail_server model_ir_mail_server group_system 1 1 1 1
access_ir_actions_client ir_actions_client all model_ir_actions_client 1 0 0 0
98 access_ir_logging ir_logging admin model_ir_logging group_erp_manager 1 1 1 1
99 paperformat_access_portal ir_actions_report_paperformat group_portal model_report_paperformat 1 0 0 0
100 paperformat_access_employee ir_actions_report_paperformat group_system model_report_paperformat group_system 1 1 1 1