Files
odoo_source/addons/website/security/ir.model.access.csv
T
Benjamin Vray 952b2eb390 [FIX] website: gives acces to ir.asset to the website admin
Before this commit, the users with the "editor and designer" role no
longer had access to the theme tab options (and also other flows like
assets regeneration in debug mode, etc). This is because when the
website assets have been changed to be handled by ir.asset records, in
this commit [1], the "editor and designer" rights were not updated to
have an access to ir.asset.

After this commit, the users with the "editor and designer" role have
the rights to access ir.asset (read, write, create, but not unlink
because the admin does not need it).

This mimick what is done with ir.ui.view, which is way more critical
than ir.asset, so it should be relatively safe to add this right to the
website admin for assets, as it is already the case for views.

We could have added sudo() everywhere (as no need of a -u, and which is
less risky that adding rights directly through csv but the ir.asset
rights covers too many different flows to do so.

[1]: https://github.com/odoo/odoo/commit/8cc066173dfb61bd95b8e1f0716f71f4e251810a

task-2748004

closes odoo/odoo#84847

X-original-commit: e3515a7b73c3e173a3ddf0bc48e4a888024c8817
Signed-off-by: Romain Derie (rde) <rde@odoo.com>
2022-02-18 10:47:01 +00:00

2.8 KiB

1idnamemodel_id:idgroup_id:idperm_readperm_writeperm_createperm_unlink
2access_website_publicwebsite.publicwebsite.model_website1000
3access_website_designerwebsite.website.designerwebsite.model_websitegroup_website_designer1111
4access_website_menuaccess_website_menumodel_website_menu1000
5access_website_menu_designerWeb Menu Managermodel_website_menugroup_website_designer1111
6access_website_rewriteaccess_website_rewritemodel_website_rewrite0000
7access_website_rewrite_designerWeb Rewrite Managermodel_website_rewritegroup_website_designer1111
8access_website_pageaccess_website_pagemodel_website_page0000
9access_website_page_designerWeb Page Managermodel_website_pagegroup_website_designer1111
10access_website_ir_ui_view_publisheraccess_website_ir_ui_view_publishermodel_ir_ui_viewgroup_website_publisher1000
11access_website_ir_ui_view_designeraccess_website_ir_ui_view_designermodel_ir_ui_viewgroup_website_designer1111
12access_website_ir_asset_designeraccess_website_ir_asset_designermodel_ir_assetgroup_website_designer1110
13access_seo_publicaccess_seo_publicmodel_website_seo_metadata1000
14access_seo_designeraccess_seo_designermodel_website_seo_metadatagroup_website_designer1111
15access_website_visitor_designeraccess_website_visitor_designermodel_website_visitorwebsite.group_website_designer1101
16access_website_visitor_systemaccess_website_visitor_systemmodel_website_visitorbase.group_system1101
17access_website_track_designeraccess_website_track_designermodel_website_trackwebsite.group_website_designer1111
18access_website_track_systemaccess_website_track_systemmodel_website_trackbase.group_system1111
19access_website_route_designeraccess_website_designer_routemodel_website_routegroup_website_designer1111
20access_theme_ir_ui_viewaccess_theme_ir_ui_viewmodel_theme_ir_ui_viewbase.group_system1111
21access_theme_ir_asset_group_systemtheme_ir_asset_group_systemmodel_theme_ir_assetbase.group_system1111
22access_theme_ir_attachmentaccess_theme_ir_attachmentmodel_theme_ir_attachmentbase.group_system1111
23access_theme_website_menuaccess_theme_website_menumodel_theme_website_menubase.group_system1111
24access_theme_website_pageaccess_theme_website_pagemodel_theme_website_pagebase.group_system1111
25access_website_robotsaccess.website.robotsmodel_website_robotswebsite.group_website_designer1110
26access_website_dynamic_filter_publicaccess_website_dynamic_filtermodel_website_snippet_filter0000
27access_website_dynamic_filter_systemaccess_website_dynamic_filtermodel_website_snippet_filterbase.group_system1111
28access_website_configurator_feature_designeraccess_website_configurator_feature_designermodel_website_configurator_featurewebsite.group_website_designer1000