pengyuthon/odoo_source
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity
163,215 Commits 1 Branch 0 Tags
2d42501a5b94de45e68a0b7ee8573aefc29500f0
Commit Graph
27 Commits
Author SHA1 Message Date
Horacio Tellez 2b1e2abda3 [IMP] payment,*: restrict access to payment.transaction records 
Since 15.0, it is no longer possible to have partnerless transactions.
Nonetheless, migrated databases could contain transactions without a
`partner_id` set.
This commit cleans existing rules to make those transactions are not
accessible to unwanted users.

We take the opportunity to clean the security of payment.transaction
records globally.
Now only admin and accounting users have access to payment.transaction
records. The code of different applications has been adapted accordingly.

Task - 3102824

closes odoo/odoo#113515

Related: odoo/upgrade#4564
Related: odoo/enterprise#40939
Signed-off-by: Masereel Pierre <pim@odoo.com>
 2023-05-15 15:07:13 +02:00
Victor Feyens f2ce4b4d46 [FIX] account_payment: show payment link action to accounting users 
The 'Generate payment link' action on account move records was only
shown to the users of the group 'Show Full Accounting Feature'
(and to salesman when sale is installed).

This means that if you only have invoicing app (`account` module) installed,
you don't see the action.

This commit makes sure the action is visible to all accounting users, like
the refund wizard.

closes odoo/odoo#118800

X-original-commit: 8cf2aebe9582a12b0f2309f25844e0b2d82ed3e2
Signed-off-by: Antoine Vandevenne (anv) <anv@odoo.com>
Signed-off-by: Victor Feyens (vfe) <vfe@odoo.com>
 2023-04-17 16:35:11 +02:00
Victor Feyens 61b8c0c1a2 [REF] (account_)payment: extract accounting logic from payment 2022-09-06 13:31:00 +02:00
qdp-odoo c04065abd8 [IMP] accounting v9. Yeeeeaah 2015-05-05 17:28:04 +02:00
Xavier Morel 7a2d912964 [REM] bunch of nonsensical @model + @ref 
bzr revid: xmo@openerp.com-20130429124333-p1h11fpy04y3sljy
 2013-04-29 14:43:33 +02:00
Alexis de Lattre 5101771cd9 Harmonize the noupdate flag on security XML files : 
- ir.rule objects are noupdate="1"
- all other objects are noupdate="0"

bzr revid: alexis@via.ecp.fr-20120713170838-pjsysliyt6twazrc
 2012-07-13 19:08:38 +02:00
Raphael Collet ba1454149c [IMP] groups: remove auto-inclusion of admin in groups, and make the inclusion explicit in groups 
bzr revid: rco@openerp.com-20120404090830-nteimn2kvz8nkk7h
 2012-04-04 11:08:30 +02:00
Fabien Pinckaers f27318c8af [IMP] Security Rule: removed duplicates due to inheritancies of groups 
bzr revid: fp@tinyerp.com-20111212181113-mhnnbps3ip8ls6pp
 2011-12-12 19:11:13 +01:00
Raphael Collet ba6342174e add group implications 
bzr revid: rco@openerp.com-20110802130811-pkdmw43ufifz0tpj
 2011-08-02 15:08:11 +02:00
Rifakat Haradwala (Open ERP) 0cfea97395 [Fix] account_payment: changes in record rules 
bzr revid: rha@tinyerp.com-20110310065007-vj16d1i4lb2dl8c2
 2011-03-10 12:20:07 +05:30
Rifakat Haradwala (Open ERP) e086688440 [Fix]: account_payment: missing company information in payment.order and payment.line 
lp bug: https://launchpad.net/bugs/724059 fixed

bzr revid: rha@tinyerp.com-20110224114537-gygz2yf3jjpgk6z3
 2011-02-24 17:15:37 +05:30
Sbh (OpenERP) abd780fd52 [Fix] : correct security rule of company_id 
bzr revid: sbh@tinyerp.com-20101223095216-n6psmzicdcs8is8x
 2010-12-23 15:22:16 +05:30
Fabien Pinckaers 37680303df [IMP] ir.rule reviewed 
bzr revid: fp@tinyerp.com-20101018092840-7a6wv2vw2s6a1a2s
 2010-10-18 11:28:40 +02:00
Fabien Pinckaers fe9500c14e [IMP] access rights cleaning 
bzr revid: fp@tinyerp.com-20101016164709-8w551aaosqx0dufu
 2010-10-16 18:47:09 +02:00
PSI(OpenERP) a4a2627c1b [IMP] Account Payment: Improve the module (remove payment.type object, change the menus, etc) (still need some improvement from piratpad remaining to do) 
bzr revid: mra@mra-laptop-20100906033801-9kxjpzkhhiltcpp4
 2010-09-06 09:08:01 +05:30
vra c1dbc408c5 [ADD] account, account_payment, analytic: added company related record rules for some objects and also added company field. 
bzr revid: vra@tinyerp.com-20100820113218-5xg58scsgjavb6fg
 2010-08-20 17:02:18 +05:30
AMP(Open ERP) 53cfaebe3f [MOD/IMP] survey,account,email_template,idea,lunch,marketing_campaign,sale,stock_planning : Improvements in access rights 
bzr revid: vir@tinyerp.com-20100813060634-laq3wb2d660wcrrp
 2010-08-13 11:36:34 +05:30
AMP (OpenERP) 829605c027 [MOD] account_* usability improvement in access rights 
bzr revid: amp@tinyerp.com-20100803131758-miqn49utxrrs88to
 2010-08-03 18:47:58 +05:30
AMP (OpenERP) 4b79c0bdff [MOD] usability improvement in access rights in account 
bzr revid: amp@tinyerp.com-20100802133226-fjs4isw8109f0jf8
 2010-08-02 19:02:26 +05:30
AMP (OpenERP) 6eb86abda3 [MOD] usability improvement in access rights 
bzr revid: amp@tinyerp.com-20100723072243-kpex4cdgckhga46d
 2010-07-23 12:52:43 +05:30
Christophe Simonis cebb03c476 fix and complete access rules 
bzr revid: christophe@tinyerp.com-20081017170345-4gw81edzvd2yjtyw
 2008-10-17 19:03:45 +02:00
Christophe Simonis 1a138e1454 fix and complete access rules 
bzr revid: christophe@tinyerp.com-20081017162038-kzsgroivk73t0vyx
 2008-10-17 18:20:38 +02:00
Stephane Wirtel 606165c849 rename the tag <terp/> by <openerp/> 
bzr revid: stephane@tinyerp.com-20080910175600-tutctqg606c9eil4
 2008-09-10 19:56:00 +02:00
qdp 85b0a4334c *bugfixed x2 (name of group were wrong and wrong function call in wizard_payment_order) 
bzr revid: qdp@tinyerp.com-20080904130247-p3f33gx4mfj7vq0s
 2008-09-04 15:02:47 +02:00
Fabien Pinckaers 51f8c2b263 Better Security Rules 
bzr revid: fp@tinyerp.com-20080903224650-u1oadqv9x75atmyl
 2008-09-04 00:46:50 +02:00
Fabien Pinckaers f9ec54047f Improved Security 
bzr revid: fp@tinyerp.com-20080903182533-bi4u27xqnm2mmhhr
 2008-09-03 20:25:33 +02:00
Fabien Pinckaers b4d6690794 Improved Security 
bzr revid: fp@tinyerp.com-20080903180400-df7l6wxg1zpirmmi
 2008-09-03 20:04:00 +02:00