From f0dccae14a07de14169c5b2ab61c5f38bbd573d8 Mon Sep 17 00:00:00 2001 From: Krupal Oza Date: Wed, 26 Aug 2020 06:53:28 +0000 Subject: [PATCH] [FIX] website: prevent manual creation of website visitors Currently, admin and system users have the ability to manually create new visitors from UI, which was introduced since ACL revamp[1] on visitors. However, even admin should not be able to create visitors manually. Indeed having a create button makes no sense as everything is managed through frontend. Those menus are mainly present for reporting and displaying information. This commit fixes the behaviour by preventing manual creation of visitors for all users including admin. [1] - 5e605f5 Task ID-2288363 closes odoo/odoo#56651 X-original-commit: 1db514f8d2a9f1ba6861c89ced9a2a9f5dcf48be Signed-off-by: Thibault Delavallee (tde) --- addons/website/security/ir.model.access.csv | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/addons/website/security/ir.model.access.csv b/addons/website/security/ir.model.access.csv index e15f55b4c85..c3bcd6aa304 100644 --- a/addons/website/security/ir.model.access.csv +++ b/addons/website/security/ir.model.access.csv @@ -12,7 +12,7 @@ access_website_ir_ui_view_designer,access_website_ir_ui_view_designer,model_ir_u access_seo_public,access_seo_public,model_website_seo_metadata,,1,0,0,0 access_seo_designer,access_seo_designer,model_website_seo_metadata,group_website_designer,1,1,1,1 access_website_visitor_designer,access_website_visitor_designer,model_website_visitor,website.group_website_designer,1,1,0,1 -access_website_visitor_system,access_website_visitor_system,model_website_visitor,base.group_system,1,1,1,1 +access_website_visitor_system,access_website_visitor_system,model_website_visitor,base.group_system,1,1,0,1 access_website_track_designer,access_website_track_designer,model_website_track,website.group_website_designer,1,1,1,1 access_website_track_system,access_website_track_system,model_website_track,base.group_system,1,1,1,1 access_website_route_designer,access_website_designer_route,model_website_route,group_website_designer,1,1,1,1