Files
odoo_source/addons/survey/security/ir.model.access.csv
T
Thibault Delavallée e3d2957f98 [REF] survey: update ACLs and limit access to survey models
Purpose of this commit is to rewrite all access rights and rules of survey
models. Indeed this module is quite old and rules may give some strange
permissions to some people and does not enforce the use of real survey
user groups.

Specifications
 * survey manager: can CRUD everything;
 * survey users: can CRUD their own surveys, read all;
 * regular users: cannot access anything and will use dedicated controllers
   and routes;
 * portal, public: cannot access anything and will use dedicated controllers
   and routes;

This commit alone breaks some use of survey, notably its embedded portal.
Future commit will update code to use those new ACLs. It is done in several
commits in order to have smaller diff and avoid having too large diff in a
single commit.

This commit is linked to task ID 1911586 and PR #28986.
2019-01-14 15:22:18 +00:00

2.8 KiB

1idnamemodel_id:idgroup_id:idperm_readperm_writeperm_createperm_unlink
2access_survey_allsurvey.survey.allmodel_survey_survey0000
3access_survey_usersurvey.survey.usermodel_survey_surveybase.group_user0000
4access_survey_survey_usersurvey.survey.survey.usermodel_survey_surveygroup_survey_user1111
5access_survey_survey_managersurvey.survey.survey.managermodel_survey_surveygroup_survey_manager1111
6access_survey_stage_allsurvey.stage.allmodel_survey_stage0000
7access_survey_stage_usersurvey.stage.usermodel_survey_stagebase.group_user0000
8access_survey_stage_survey_usersurvey.stage.survey.usermodel_survey_stagegroup_survey_user1000
9access_survey_stage_survey_managersurvey.stage.survey.managermodel_survey_stagegroup_survey_manager1111
10access_survey_page_allsurvey.page.allmodel_survey_page0000
11access_survey_page_usersurvey.page.usermodel_survey_pagebase.group_user0000
12access_survey_page_survey_usersurvey.page.survey.usermodel_survey_pagegroup_survey_user1111
13access_survey_page_survey_managersurvey.page.survey.managermodel_survey_pagegroup_survey_manager1111
14access_survey_question_allsurvey.question.allmodel_survey_question0000
15access_survey_question_usersurvey.question.usermodel_survey_questionbase.group_user0000
16access_survey_question_survey_usersurvey.question.survey.usermodel_survey_questiongroup_survey_user1111
17access_survey_question_survey_managersurvey.question.survey.managermodel_survey_questiongroup_survey_manager1111
18access_survey_label_allsurvey.label.allmodel_survey_label0000
19access_survey_label_usersurvey.label.usermodel_survey_labelbase.group_user0000
20access_survey_label_survey_usersurvey.label.survey.usermodel_survey_labelgroup_survey_user1111
21access_survey_label_survey_managersurvey.label.survey.managermodel_survey_labelgroup_survey_manager1111
22access_survey_user_input_allsurvey.user_input.allmodel_survey_user_input0000
23access_survey_user_input_usersurvey.user_input.usermodel_survey_user_inputbase.group_user0000
24access_survey_user_input_survey_usersurvey.user_input.survey.usermodel_survey_user_inputgroup_survey_user1111
25access_survey_user_input_survey_managersurvey.user_input.survey.managermodel_survey_user_inputgroup_survey_manager1111
26access_survey_user_input_line_allsurvey.user_input_line.allmodel_survey_user_input_line0000
27access_survey_user_input_line_usersurvey.user_input_line.usermodel_survey_user_input_linebase.group_user0000
28access_survey_user_input_line_survey_usersurvey.user_input_line.survey.usermodel_survey_user_input_linegroup_survey_user1111
29access_survey_user_input_line_survey_managersurvey.user_input_line.survey.managermodel_survey_user_input_linegroup_survey_manager1111