Thibault Libioulle
b1f0e1a42a
This reverts commit odoo/odoo@7059b17. This commit translates tests introduced in this reverted commit to be aligned with the current workflow. This commit reverts functionality or business logic linked to the reverted commit : - odoo/odoo#47248 : You no longer have to be an allowed user to see the timesheets but only a message partner. - odoo/odoo#49021 : We no longer deal with allowed_user_ids or allowed_portal_user_ids - odoo/odoo@f2a1a00 : We no longer deal with the allowed users lists. This commit removes the button project_privacy_visibility for functional reasons. Closes: #65367 task-2439329 Related: odoo/upgrade#2128 Related: odoo/enterprise#16067 Signed-off-by: Yannick Tivisse (yti) <yti@odoo.com>
40 lines
2.3 KiB
Python
40 lines
2.3 KiB
Python
# -*- coding: utf-8 -*-
|
|
# Part of Odoo. See LICENSE file for full copyright and licensing details.
|
|
|
|
from odoo.addons.project.tests.test_access_rights import TestProjectPortalCommon
|
|
from odoo.exceptions import AccessError
|
|
from odoo.tools import mute_logger
|
|
|
|
|
|
class TestPortalProject(TestProjectPortalCommon):
|
|
@mute_logger('odoo.addons.base.models.ir_model')
|
|
def test_portal_project_access_rights(self):
|
|
pigs = self.project_pigs
|
|
pigs.write({'privacy_visibility': 'portal'})
|
|
|
|
# Do: Alfred reads project -> ok (employee ok public)
|
|
pigs.with_user(self.user_projectuser).read(['user_id'])
|
|
# Test: all project tasks visible
|
|
tasks = self.env['project.task'].with_user(self.user_projectuser).search([('project_id', '=', pigs.id)])
|
|
self.assertEqual(tasks, self.task_1 | self.task_2 | self.task_3 | self.task_4 | self.task_5 | self.task_6,
|
|
'access rights: project user should see all tasks of a portal project')
|
|
|
|
# Do: Bert reads project -> crash, no group
|
|
self.assertRaises(AccessError, pigs.with_user(self.user_noone).read, ['user_id'])
|
|
# Test: no project task searchable
|
|
self.assertRaises(AccessError, self.env['project.task'].with_user(self.user_noone).search, [('project_id', '=', pigs.id)])
|
|
|
|
# Data: task follower
|
|
pigs.with_user(self.user_projectmanager).message_subscribe(partner_ids=[self.user_portal.partner_id.id])
|
|
self.task_1.with_user(self.user_projectuser).message_subscribe(partner_ids=[self.user_portal.partner_id.id])
|
|
self.task_3.with_user(self.user_projectuser).message_subscribe(partner_ids=[self.user_portal.partner_id.id])
|
|
# Do: Chell reads project -> ok (portal ok public)
|
|
pigs.with_user(self.user_portal).read(['user_id'])
|
|
# Do: Donovan reads project -> ko (public ko portal)
|
|
self.assertRaises(AccessError, pigs.with_user(self.user_public).read, ['user_id'])
|
|
# Test: no access right to project.task
|
|
self.assertRaises(AccessError, self.env['project.task'].with_user(self.user_public).search, [])
|
|
# Data: task follower cleaning
|
|
self.task_1.with_user(self.user_projectuser).message_unsubscribe(partner_ids=[self.user_portal.partner_id.id])
|
|
self.task_3.with_user(self.user_projectuser).message_unsubscribe(partner_ids=[self.user_portal.partner_id.id])
|