Files
odoo_source/addons/website_event/security/ir.model.access.csv
T
Martin Trigaux cd2f330bec [IMP] *: remove glocal ACL
Specify explicit route for each ,, line
This is part of task 3230280 where global ir.model.access will be
forbidden.
The goal is to make access to public/portal explicit. Too often,
global access was granted with only employees in mind.

Remove ,,0,0,0,0 lines

mail:
employee already had read access to mail.group
still needed to subtypes as in ir.rule domain

mail_group: employee already had read access
pos_mercury: only needed for employees

membership:
move public access for website_membership as needed in the controllers

website_customer: employee already had read access

website_event_booth: no need for category
website_event_exhibitor: retrieved in sudo
website_event_track: not needed for location

Part-of: odoo/odoo#125216
2023-07-11 22:33:47 +02:00

30 lines
2.8 KiB
CSV

id,name,model_id:id,group_id:id,perm_read,perm_write,perm_create,perm_unlink
access_event_event_public,event.event,model_event_event,base.group_public,1,0,0,0
access_event_event_portal,event.event,model_event_event,base.group_portal,1,0,0,0
access_event_event_employee,event.event,model_event_event,base.group_user,1,0,0,0
access_event_event_ticket_public,event.event.ticket,event.model_event_event_ticket,base.group_public,1,0,0,0
access_event_event_ticket_portal,event.event.ticket,event.model_event_event_ticket,base.group_portal,1,0,0,0
access_event_event_ticket_employee,event.event.ticket,event.model_event_event_ticket,base.group_user,1,0,0,0
access_event_type,event.type,event.model_event_type,,0,0,0,0
access_event_tag_category_public,event.tag.category,event.model_event_tag_category,base.group_public,1,0,0,0
access_event_tag_category_portal,event.tag.category,event.model_event_tag_category,base.group_portal,1,0,0,0
access_event_tag_category_employee,event.tag.category,event.model_event_tag_category,base.group_user,1,0,0,0
access_event_tag_public,event.tag,event.model_event_tag,base.group_public,1,0,0,0
access_event_tag_portal,event.tag,event.model_event_tag,base.group_portal,1,0,0,0
access_event_tag_employee,event.tag,event.model_event_tag,base.group_user,1,0,0,0
access_website_event_menu_public,website.event.menu,model_website_event_menu,base.group_public,1,0,0,0
access_website_event_menu_portal,website.event.menu,model_website_event_menu,base.group_portal,1,0,0,0
access_website_event_menu_employee,website.event.menu,model_website_event_menu,base.group_user,1,0,0,0
access_website_event_menu_user,website.event.menu.user,model_website_event_menu,event.group_event_user,1,1,1,1
access_website_visitor_user,website.visitor.user,model_website_visitor,event.group_event_user,1,1,0,0
access_event_question_public,event.question,model_event_question,base.group_public,1,0,0,0
access_event_question_portal,event.question,model_event_question,base.group_portal,1,0,0,0
access_event_question_employee,event.question,model_event_question,base.group_user,1,0,0,0
access_event_question_user,event.question.user,model_event_question,event.group_event_user,1,1,1,1
access_event_question_answer_public,event.question.answer,model_event_question_answer,base.group_public,1,0,0,0
access_event_question_answer_portal,event.question.answer,model_event_question_answer,base.group_portal,1,0,0,0
access_event_question_answer_employee,event.question.answer,model_event_question_answer,base.group_user,1,0,0,0
access_event_question_answer_registration,event.question.answer.registration,model_event_question_answer,event.group_event_registration_desk,1,1,0,0
access_event_question_answer_user,event.question.answer.user,model_event_question_answer,event.group_event_user,1,1,1,1
access_event_registration_answer,event.registration.answer,model_event_registration_answer,event.group_event_registration_desk,1,1,1,1