Files
odoo_source/addons/website_livechat/security/ir.model.access.csv
T
David Beguin 5e605f589d [FIX-IMP] website, website_livechat : disable create visitor and review ACLS
This commit applies the following ACLs rules:

C : nobody can create visitor (except system)
R : everyone that should access to this model
U : website_designer can update (even if only few fields are editable),
    mainly useful for language (+ system obviously)
    + livechat users as they are the guys who directly speaks with the visitors
D : system + website_designer can delete, mainly useful to clean if necessary

Remove the no_create from all visitor views as handled by ACLs.

This fixes the 'can create' that should not be done by any users
except system + admin

Task ID: 2092502
PR #40439

closes odoo/odoo#40865

X-original-commit: 23f3324830adf31edb0a12c7009fcb65b0f54614
Signed-off-by: Thibault Delavallee (tde) <tde@openerp.com>
2019-11-28 14:31:29 +00:00

455 B

1idnamemodel_id:idgroup_id:idperm_readperm_writeperm_createperm_unlink
2access_im_livechat_channel_publicim_livechat.channel.publicim_livechat.model_im_livechat_channel1000
3access_website_visitor_livechat_userswebsite.visitor.livechat.usersmodel_website_visitorim_livechat.im_livechat_group_user1100
4access_website_track_livechat_userswebsite.track.livechat.userswebsite.model_website_trackim_livechat.im_livechat_group_user1000