Horacio Tellez
2b1e2abda3
Since 15.0, it is no longer possible to have partnerless transactions. Nonetheless, migrated databases could contain transactions without a `partner_id` set. This commit cleans existing rules to make those transactions are not accessible to unwanted users. We take the opportunity to clean the security of payment.transaction records globally. Now only admin and accounting users have access to payment.transaction records. The code of different applications has been adapted accordingly. Task - 3102824 closes odoo/odoo#113515 Related: odoo/upgrade#4564 Related: odoo/enterprise#40939 Signed-off-by: Masereel Pierre <pim@odoo.com>
945 B
945 B
| 1 | id | name | model_id:id | group_id:id | perm_read | perm_write | perm_create | perm_unlink |
|---|---|---|---|---|---|---|---|---|
| 2 | access_payment_link_wizard | access_payment_link_wizard | payment.model_payment_link_wizard | base.group_user | 0 | 0 | 0 | 0 |
| 3 | payment_capture_wizard_user | payment.capture.wizard | model_payment_capture_wizard | base.group_user | 1 | 1 | 1 | 0 |
| 4 | payment_provider_onboarding_wizard | payment.provider.onboarding.wizard | model_payment_provider_onboarding_wizard | base.group_system | 1 | 1 | 1 | 0 |
| 5 | payment_provider_system | payment.provider.system | model_payment_provider | base.group_system | 1 | 1 | 1 | 1 |
| 6 | payment_method_all | payment.method.all | model_payment_method | 1 | 0 | 0 | 0 | |
| 7 | payment_method_system | payment.method.system | model_payment_method | base.group_system | 1 | 1 | 1 | 1 |
| 8 | payment_token_all | payment.token.all | model_payment_token | 1 | 0 | 0 | 0 | |
| 9 | payment_token_system | payment.token.system | model_payment_token | base.group_system | 1 | 1 | 1 | 1 |
| 10 | payment_transaction_system | payment.transaction.system | model_payment_transaction | base.group_system | 1 | 1 | 1 | 1 |