Files
odoo_source/addons/event/security/ir.model.access.csv
T
Thibault Delavallée 6b87c731fb [FIX] event: fix access right issues
* Limitate rights of event user to reading an event

Event user should not be able to create events. Its rights should be limited
to reading events, creating and updating registrations. Only event managers
are allowed to create and modify events.

* Sudo access on ir.values in event config settings

Configuring events imply modifying auto confirmation parameter which is stored
into an ir.values. As this model is limited to values with user_id = uid we
have to sudo the access here as it is not a user-defined value.

* Add some tests for the various fixed issues
2016-08-18 15:09:40 +02:00

1.2 KiB

1idnamemodel_id:idgroup_id:idperm_readperm_writeperm_createperm_unlink
2access_event_typeevent.typemodel_event_typeevent.group_event_user1000
3access_event_type_managerevent.type managermodel_event_typeevent.group_event_manager1111
4access_event_event_portalevent.event.portalmodel_event_event1000
5access_event_event_userevent.event.usermodel_event_eventevent.group_event_user1000
6access_event_event_managerevent.event.managermodel_event_eventevent.group_event_manager1111
7access_event_registrationevent.registrationmodel_event_registrationevent.group_event_user1111
8access_event_registration_portalevent.registrationmodel_event_registration1000
9access_event_mailevent.mailmodel_event_mailevent.group_event_user1000
10access_event_mail_managerevent.mail managermodel_event_mailevent.group_event_manager1111
11access_event_mail_registrationevent.mail.registrationmodel_event_mail_registrationevent.group_event_user1000
12access_event_mail_registration_managerevent.mail.registration.managermodel_event_mail_registrationevent.group_event_manager1111
13access_report_event_registrationreport.event.registrationmodel_report_event_registrationevent.group_event_user1111