Files
odoo_source/addons/test_mail/security/ir.model.access.csv
T
Martin Trigaux 604a47ead8 [IMP] *: remove global ACL
THese are rarely intended for all users but often intended only for
employees.

account:
account.incoterms: only used within internal business models
account.journal.group: same as account.journal, add sudo in computed field

account_edi: need access to accounting objects

base_address_extended:
res.city: only employees should access address data

board: only employees uses this (old) module

crm:
crm.stage: internal users business object

hr_recruitment: employees can read

im_livechat: apply same as for the steps

l10n_ar: used on partner, not only invoices
l10n_ec: accessed only through account.move
l10n_latam: accessed on res.partner

mail:
publisher.warrenty.contract: no data, only static models
mail.channel: group_user has already his own rule
mail.group: group_user has already his own rule
mail.message.subtype: group_user has already his own rule
mail.message.all: remove, already has a portal and employee rule

partner_autocomplete: no interaction with public

project:
project.tags: only needed for project sharing

sale_management:
sale.order.option: same as sale.order

utm: employee already has write access

web_editor: test models that have nothing to do here
web_tour: only employees uses tours

website_sale:
product.ribbon: add sudo for access

base:
ir.default: only employees uses set (could probably be converted to group_system)
ir.ui.view.custom: same as ir.ui.view, add sudo when needed
report.*: portal users don't configure reports
res.users.log: create in sudo, no access needed (adapt test to use another model)
res.lang: still needed for public

closes odoo/odoo#118701

Related: odoo/enterprise#41285
Signed-off-by: Martin Trigaux (mat) <mat@odoo.com>
2023-06-12 22:39:26 +02:00

5.7 KiB

1idnamemodel_id:idgroup_id:idperm_readperm_writeperm_createperm_unlink
2access_mail_performance_threadaccess_mail_performance_threadmodel_mail_performance_threadbase.group_user1111
3access_mail_performance_tracking_usermail.performance.trackingmodel_mail_performance_trackingbase.group_user1111
4access_mail_test_simple_portalmail.test.simple.portalmodel_mail_test_simplebase.group_portal1000
5access_mail_test_simple_usermail.test.simple.usermodel_mail_test_simplebase.group_user1111
6access_mail_test_simple_unfollow_portalmail.test.simple.unfollow.portalmodel_mail_test_simple_unfollowbase.group_portal0000
7access_mail_test_simple_unfollow_usermail.test.simple.unfollow.usermodel_mail_test_simple_unfollowbase.group_user1111
8access_mail_test_simple_main_attachment_portalmail.test.simple.main.attachment.portalmodel_mail_test_simple_main_attachmentbase.group_portal1000
9access_mail_test_simple_main_attachment_usermail.test.simple.main.attachment.usermodel_mail_test_simple_main_attachmentbase.group_user1111
10access_mail_test_gateway_portalmail.test.gateway.portalmodel_mail_test_gatewaybase.group_portal1000
11access_mail_test_gateway_usermail.test.gateway.usermodel_mail_test_gatewaybase.group_user1111
12access_mail_test_gateway_groups_portalmail.test.gateway.groups.portalmodel_mail_test_gateway_groupsbase.group_portal1000
13access_mail_test_gateway_groups_usermail.test.gateway.groups.usermodel_mail_test_gateway_groupsbase.group_user1111
14access_mail_test_track_portalmail.test.track.portalmodel_mail_test_trackbase.group_portal0000
15access_mail_test_track_usermail.test.track.user.employeemodel_mail_test_trackbase.group_user1111
16access_mail_test_activity_portalmail.test.activity.portalmodel_mail_test_activitybase.group_portal1000
17access_mail_test_activity_usermail.test.activity.usermodel_mail_test_activitybase.group_user1111
18access_mail_test_field_type_portalmail.test.field.type.portalmodel_mail_test_field_typebase.group_portal0000
19access_mail_test_field_type_usermail.test.field.type.usermodel_mail_test_field_typebase.group_user1111
20access_mail_test_ticket_portalmail.test.ticket.portalmodel_mail_test_ticketbase.group_portal1000
21access_mail_test_ticket_usermail.test.ticket.usermodel_mail_test_ticketbase.group_user1111
22access_mail_test_ticket_el_portalmail.test.ticket.el.portalmodel_mail_test_ticket_elbase.group_portal1000
23access_mail_test_ticket_el_usermail.test.ticket.el.usermodel_mail_test_ticket_elbase.group_user1111
24access_mail_test_ticket_mc_portalmail.test.ticket.mc.portalmodel_mail_test_ticket_mcbase.group_portal1000
25access_mail_test_ticket_mc_usermail.test.ticket.mc.usermodel_mail_test_ticket_mcbase.group_user1111
26access_mail_test_composer_mixin_allmail.test.composer.mixin.allmodel_mail_test_composer_mixin0000
27access_mail_test_composer_mixin_usermail.test.composer.mixin.usermodel_mail_test_composer_mixinbase.group_user1111
28access_mail_test_composer_source_allmail.test.composer.source.allmodel_mail_test_composer_sourcebase.group_user1000
29access_mail_test_composer_source_usermail.test.composer.source.usermodel_mail_test_composer_sourcebase.group_user1111
30access_mail_test_container_portalmail.test.container_portalmodel_mail_test_containerbase.group_portal1000
31access_mail_test_container_usermail.test.container.usermodel_mail_test_containerbase.group_user1111
32access_mail_test_container_mc_portalmail.test.container.mc.portalmodel_mail_test_container_mcbase.group_portal1000
33access_mail_test_container_mc_usermail.test.container.mc.usermodel_mail_test_container_mcbase.group_user1111
34access_mail_test_cc_portalmail.test.cc.portalmodel_mail_test_ccbase.group_portal1000
35access_mail_test_cc_usermail.test.cc.usermodel_mail_test_ccbase.group_user1111
36access_mail_test_lang_portalmail.test.lang.portalmodel_mail_test_langbase.group_portal1000
37access_mail_test_lang_usermail.test.lang.usermodel_mail_test_langbase.group_user1111
38access_mail_test_multi_company_usermail.test.multi.company.usermodel_mail_test_multi_companybase.group_user1111
39access_mail_test_multi_company_portalmail.test.multi.company.portalmodel_mail_test_multi_companybase.group_portal1000
40access_mail_test_multi_company_read_usermail.test.multi.company.read.usermodel_mail_test_multi_company_readbase.group_user1111
41access_mail_test_multi_company_read_portalmail.test.multi.company.read.portalmodel_mail_test_multi_company_readbase.group_portal1000
42access_mail_test_multi_company_with_activity_usermail.test.multi.company.with.activity.usermodel_mail_test_multi_company_with_activitybase.group_user1111
43access_mail_test_multi_company_with_activity_portalmail.test.multi.company.with.activity.portalmodel_mail_test_multi_company_with_activitybase.group_portal1000
44access_mail_test_nothread_usermail.test.nothread.usermodel_mail_test_nothreadbase.group_user1111
45access_mail_test_nothread_portalmail.test.nothread.portalmodel_mail_test_nothreadbase.group_portal1000
46access_mail_test_track_allmail.test.track.allmodel_mail_test_track_allbase.group_user1111
47access_mail_test_track_computemail.test.track.computemodel_mail_test_track_computebase.group_user1111
48access_mail_test_track_monetarymail.test.track.monetarymodel_mail_test_track_monetarybase.group_user1111
49access_mail_test_track_selection_portalmail.test.track.selection.portalmodel_mail_test_track_selectionbase.group_portal0000
50access_mail_test_track_selection_usermail.test.track.selection.usermodel_mail_test_track_selectionbase.group_user1111
51access_mail_test_properties_usermail.test.properties.usermodel_mail_test_propertiesbase.group_user1111