Files
odoo_source/addons/hr_recruitment/security/ir.model.access.csv
T
Martin Trigaux 604a47ead8 [IMP] *: remove global ACL
THese are rarely intended for all users but often intended only for
employees.

account:
account.incoterms: only used within internal business models
account.journal.group: same as account.journal, add sudo in computed field

account_edi: need access to accounting objects

base_address_extended:
res.city: only employees should access address data

board: only employees uses this (old) module

crm:
crm.stage: internal users business object

hr_recruitment: employees can read

im_livechat: apply same as for the steps

l10n_ar: used on partner, not only invoices
l10n_ec: accessed only through account.move
l10n_latam: accessed on res.partner

mail:
publisher.warrenty.contract: no data, only static models
mail.channel: group_user has already his own rule
mail.group: group_user has already his own rule
mail.message.subtype: group_user has already his own rule
mail.message.all: remove, already has a portal and employee rule

partner_autocomplete: no interaction with public

project:
project.tags: only needed for project sharing

sale_management:
sale.order.option: same as sale.order

utm: employee already has write access

web_editor: test models that have nothing to do here
web_tour: only employees uses tours

website_sale:
product.ribbon: add sudo for access

base:
ir.default: only employees uses set (could probably be converted to group_system)
ir.ui.view.custom: same as ir.ui.view, add sudo when needed
report.*: portal users don't configure reports
res.users.log: create in sudo, no access needed (adapt test to use another model)
res.lang: still needed for public

closes odoo/odoo#118701

Related: odoo/enterprise#41285
Signed-off-by: Martin Trigaux (mat) <mat@odoo.com>
2023-06-12 22:39:26 +02:00

2.6 KiB

1idnamemodel_id:idgroup_id:idperm_readperm_writeperm_createperm_unlink
2access_hr_job_interviewerhr.job.interviewerhr.model_hr_jobgroup_hr_recruitment_interviewer1000
3access_hr_applicant_interviewerhr.applicant.interviewermodel_hr_applicantgroup_hr_recruitment_interviewer1100
4access_hr_applicant_userhr.applicant.usermodel_hr_applicantgroup_hr_recruitment_user1111
5access_hr_recruitment_stage_interviewerhr.recruitment.stage.interviewermodel_hr_recruitment_stagegroup_hr_recruitment_interviewer1000
6access_hr_recruitment_stage_userhr.recruitment.stage.usermodel_hr_recruitment_stagegroup_hr_recruitment_user1000
7access_hr_recruitment_stage_managerhr.recruitment.stage.managermodel_hr_recruitment_stagegroup_hr_recruitment_manager1111
8access_hr_recruitment_degreehr.recruitment.degreemodel_hr_recruitment_degreegroup_hr_recruitment_user1111
9access_hr_recruitment_refuse_reason_interviewerhr.applicant.refuse.reason.interviewermodel_hr_applicant_refuse_reasongroup_hr_recruitment_interviewer1000
10access_hr_recruitment_refuse_reasonhr.applicant.refuse.reasonmodel_hr_applicant_refuse_reasongroup_hr_recruitment_user1111
11access_res_partner_hr_userres.partner.userbase.model_res_partnergroup_hr_recruitment_user1111
12access_calendar_event_hrusercalendar.event.hrusercalendar.model_calendar_eventgroup_hr_recruitment_user1111
13access_hr_recruitment_source_hr_officerhr.recruitment.sourcemodel_hr_recruitment_sourcegroup_hr_recruitment_user1111
14access_hr_recruitment_source_allhr.recruitment.sourcemodel_hr_recruitment_sourcebase.group_user1000
15access_hr_applicant_categoryhr.applicant_categorymodel_hr_applicant_categorybase.group_user1110
16access_hr_applicant_category_managerhr.applicant_categorymodel_hr_applicant_categorygroup_hr_recruitment_user1111
17access_calendar_event_type_hr_officercalendar.event.type.officercalendar.model_calendar_event_typegroup_hr_recruitment_user1110
18access_applicant_get_refuse_reasonaccess.applicant.get.refuse.reasonmodel_applicant_get_refuse_reasonhr_recruitment.group_hr_recruitment_user1110
19access_applicant_get_refuse_reason_intervieweraccess.applicant.get.refuse.reason.interviewermodel_applicant_get_refuse_reasonhr_recruitment.group_hr_recruitment_interviewer1110
20access_applicant_send_mailaccess.applicant.send.mailmodel_applicant_send_mailhr_recruitment.group_hr_recruitment_user1110
21access_applicant_send_mail_intervieweraccess.applicant.send.mail.interviewermodel_applicant_send_mailhr_recruitment.group_hr_recruitment_interviewer1110