Astik Singh
200ccf1b10
Prior this commit: In mail subtype, any users could have perform modification on it. After this commit: Now user have only access to read and only admin can do all the modifications. Task-3245940 closes odoo/odoo#127539 X-original-commit: 1b99f9b6608793612dda72007a4ca2258373a97f Signed-off-by: Stéphane Debauche (std) <std@odoo.com>
29 lines
1.1 KiB
Python
29 lines
1.1 KiB
Python
# -*- coding: utf-8 -*-
|
|
# Part of Odoo. See LICENSE file for full copyright and licensing details.
|
|
|
|
from odoo.addons.mail.tests.common import mail_new_test_user, MailCommon
|
|
from odoo.exceptions import AccessError
|
|
|
|
|
|
class TestSubtypeAccess(MailCommon):
|
|
|
|
def test_subtype_access(self):
|
|
"""
|
|
The function aims to formally verify the access restrictions on mail.message.subtype for
|
|
normal and admin users. It ensures that normal users are unable to modify it,
|
|
while admin users possess the necessary privileges to modify it successfully.
|
|
"""
|
|
|
|
test_subtype = self.env['mail.message.subtype'].create({
|
|
'name': 'Test',
|
|
'description': 'only description',
|
|
})
|
|
|
|
user = mail_new_test_user(self.env, 'Internal user', groups='base.group_user')
|
|
|
|
with self.assertRaises(AccessError):
|
|
test_subtype.with_user(user).write({'description': 'changing description'})
|
|
|
|
test_subtype.with_user(self.user_admin).write({'description': 'testing'})
|
|
self.assertEqual(test_subtype.description, 'testing')
|