Nicolas Martinelli
81d1296323
1. Create a new user with all the permissions as manager (or at least
Accounting) except Inventory
2. Login and then go to Invoicing --> Settings
3. Do a minor change, save
An access error occurs.
Since the settings of all modules are smartly loaded in v11, it now
implies that a user must have extra manager access rights to be allowed
to save them. We could have kept separate actions for each setting page,
but we would have missed the fun of access errors.
Anyway, security-wise this is not an issue to force the manager groups
since a user with 'Settings' access rights can change his own rights.
It's just very annoying. Or fun.
Complement of aa65a46fc5
Fixes #21766
opw-801210
59 lines
2.9 KiB
XML
59 lines
2.9 KiB
XML
<?xml version="1.0" encoding="utf-8"?>
|
|
<odoo>
|
|
<record id="group_website_publisher" model="res.groups">
|
|
<field name="name">Restricted Editor</field>
|
|
<field name="category_id" ref="base.module_category_website"/>
|
|
</record>
|
|
<record id="group_website_designer" model="res.groups">
|
|
<field name="name">Editor and Designer</field>
|
|
<field name="users" eval="[(4, ref('base.user_root'))]"/>
|
|
<field name="implied_ids" eval="[(4, ref('group_website_publisher'))]"/>
|
|
<field name="category_id" ref="base.module_category_website"/>
|
|
</record>
|
|
|
|
<record id="base.default_user" model="res.users">
|
|
<field name="groups_id" eval="[(4, ref('group_website_designer'))]"/>
|
|
</record>
|
|
|
|
<record id="base.group_system" model="res.groups">
|
|
<field name="implied_ids" eval="[(4, ref('website.group_website_designer'))]"/>
|
|
</record>
|
|
|
|
<record id="website_designer_edit_qweb" model="ir.rule">
|
|
<field name="name">website_designer: Manage Website and qWeb view</field>
|
|
<field name="model_id" ref="base.model_ir_ui_view"/>
|
|
<field name="domain_force">[('type', '=', 'qweb')]</field>
|
|
<field name="groups" eval="[(4, ref('group_website_designer'))]"/>
|
|
<field name="perm_read" eval="True"/>
|
|
<field name="perm_write" eval="True"/>
|
|
<field name="perm_create" eval="True"/>
|
|
<field name="perm_unlink" eval="True"/>
|
|
</record>
|
|
<record id="website_designer_view" model="ir.rule">
|
|
<field name="name">website_designer: global view</field>
|
|
<field name="model_id" ref="base.model_ir_ui_view"/>
|
|
<field name="domain_force">[('type', '!=', 'qweb')]</field>
|
|
<field name="groups" eval="[(4, ref('group_website_designer'))]"/>
|
|
<field name="perm_read" eval="True"/>
|
|
<field name="perm_write" eval="False"/>
|
|
<field name="perm_create" eval="False"/>
|
|
<field name="perm_unlink" eval="False"/>
|
|
</record>
|
|
<record id="website_group_system_edit_all_views" model="ir.rule">
|
|
<field name="name">Administration Settings: Manage all views</field>
|
|
<field name="model_id" ref="base.model_ir_ui_view"/>
|
|
<field name="domain_force">[(1, '=', 1)]</field>
|
|
<field name="groups" eval="[(4, ref('base.group_system'))]"/>
|
|
<field name="perm_read" eval="True"/>
|
|
<field name="perm_write" eval="True"/>
|
|
<field name="perm_create" eval="True"/>
|
|
<field name="perm_unlink" eval="True"/>
|
|
</record>
|
|
<record id="website_page_rule_public" model="ir.rule">
|
|
<field name="name">website.page: portal/public: read published pages</field>
|
|
<field name="model_id" ref="website.model_website_page"/>
|
|
<field name="domain_force">[('website_published', '=', True)]</field>
|
|
<field name="groups" eval="[(4, ref('base.group_portal')), (4, ref('base.group_public'))]"/>
|
|
</record>
|
|
</odoo>
|