Files
odoo_source/addons/account/security/ir.model.access.csv
T
Martin Trigaux 604a47ead8 [IMP] *: remove global ACL
THese are rarely intended for all users but often intended only for
employees.

account:
account.incoterms: only used within internal business models
account.journal.group: same as account.journal, add sudo in computed field

account_edi: need access to accounting objects

base_address_extended:
res.city: only employees should access address data

board: only employees uses this (old) module

crm:
crm.stage: internal users business object

hr_recruitment: employees can read

im_livechat: apply same as for the steps

l10n_ar: used on partner, not only invoices
l10n_ec: accessed only through account.move
l10n_latam: accessed on res.partner

mail:
publisher.warrenty.contract: no data, only static models
mail.channel: group_user has already his own rule
mail.group: group_user has already his own rule
mail.message.subtype: group_user has already his own rule
mail.message.all: remove, already has a portal and employee rule

partner_autocomplete: no interaction with public

project:
project.tags: only needed for project sharing

sale_management:
sale.order.option: same as sale.order

utm: employee already has write access

web_editor: test models that have nothing to do here
web_tour: only employees uses tours

website_sale:
product.ribbon: add sudo for access

base:
ir.default: only employees uses set (could probably be converted to group_system)
ir.ui.view.custom: same as ir.ui.view, add sudo when needed
report.*: portal users don't configure reports
res.users.log: create in sudo, no access needed (adapt test to use another model)
res.lang: still needed for public

closes odoo/odoo#118701

Related: odoo/enterprise#41285
Signed-off-by: Martin Trigaux (mat) <mat@odoo.com>
2023-06-12 22:39:26 +02:00

15 KiB

1idnamemodel_id:idgroup_id:idperm_readperm_writeperm_createperm_unlink
2access_account_cash_rounding_readonlyaccount.cash.roundingmodel_account_cash_roundingaccount.group_account_readonly1000
3access_account_cash_rounding_uinvoiceaccount.cash.roundingmodel_account_cash_roundingaccount.group_account_invoice1111
4access_res_partner_group_account_managerres_partner group_account_managermodel_res_partneraccount.group_account_manager1000
5access_res_currency_account_managerres.currency account managerbase.model_res_currencygroup_account_manager1111
6access_res_currency_rate_account_managerres.currency.rate account managerbase.model_res_currency_rategroup_account_manager1111
7access_account_invoice_report_readonlyaccount.invoice.report_usermodel_account_invoice_reportaccount.group_account_readonly1000
8access_account_invoice_report_billingaccount.invoice.report_billingmodel_account_invoice_reportaccount.group_account_invoice1000
9access_account_invoice_reportaccount.invoice.reportmodel_account_invoice_reportaccount.group_account_manager1111
10access_account_incoterms_allaccount.incoterms allmodel_account_incotermsbase.group_user1000
11access_account_incoterms_manageraccount.incoterms managermodel_account_incotermsaccount.group_account_manager1111
12access_account_fiscal_position_product_manageraccount.fiscal.position account.managermodel_account_fiscal_positionaccount.group_account_manager1111
13access_account_fiscal_position_tax_product_manageraccount.fiscal.position.tax account.managermodel_account_fiscal_position_taxaccount.group_account_manager1111
14access_account_fiscal_position_account_product_manageraccount.fiscal.position account.managermodel_account_fiscal_position_accountaccount.group_account_manager1111
15access_account_fiscal_positionaccount.fiscal.position allmodel_account_fiscal_positionbase.group_user1000
16access_account_fiscal_position_taxaccount.fiscal.position.tax allmodel_account_fiscal_position_taxbase.group_user1000
17access_account_fiscal_position_accountaccount.fiscal.position allmodel_account_fiscal_position_accountbase.group_user1000
18access_product_product_account_userproduct.product.account.userproduct.model_product_productgroup_account_readonly1000
19access_product_product_account_managerproduct.product.account.managerproduct.model_product_productaccount.group_account_manager1111
20access_account_bank_statement_group_readonlyaccount.bank.statement.group.invoicemodel_account_bank_statementaccount.group_account_readonly1000
21access_account_bank_statement_group_invoiceaccount.bank.statement.group.invoicemodel_account_bank_statementaccount.group_account_invoice1000
22access_account_bank_statement_line_group_readonlyaccount.bank.statement.line.group.invoicemodel_account_bank_statement_lineaccount.group_account_readonly1000
23access_account_bank_statement_line_group_invoiceaccount.bank.statement.line.group.invoicemodel_account_bank_statement_lineaccount.group_account_invoice1000
24access_account_bank_statementaccount.bank.statementmodel_account_bank_statementaccount.group_account_user1111
25access_account_bank_statement_lineaccount.bank.statement.linemodel_account_bank_statement_lineaccount.group_account_user1111
26access_account_move_line_manageraccount.move.line managermodel_account_move_lineaccount.group_account_manager1000
27access_account_move_manageraccount.move managermodel_account_moveaccount.group_account_manager1000
28access_account_move_readonlyaccount.move readonlymodel_account_moveaccount.group_account_readonly1000
29access_account_move_uinvoiceaccount.movemodel_account_moveaccount.group_account_invoice1111
30access_account_move_line_readonlyaccount.move.line readonlymodel_account_move_lineaccount.group_account_readonly1000
31access_account_move_line_uinvoiceaccount.move.line invoicemodel_account_move_lineaccount.group_account_invoice1111
32access_account_invoice_portalaccount.move.portalaccount.model_account_movebase.group_portal1000
33access_account_invoice_line_portalaccount.move.line.portalaccount.model_account_move_linebase.group_portal1000
34access_account_analytic_line_manageraccount.analytic.line managermodel_account_analytic_lineaccount.group_account_manager1000
35access_account_analytic_accountaccount.analytic.accountanalytic.model_account_analytic_accountbase.group_user1000
36access_account_analytic_line_readonlyaccount.analytic.line invoicemodel_account_analytic_lineaccount.group_account_readonly1000
37access_account_analytic_line_invoiceaccount.analytic.line invoicemodel_account_analytic_lineaccount.group_account_invoice1111
38access_account_analytic_accountantaccount.analytic.account accountantanalytic.model_account_analytic_accountaccount.group_account_user1111
39access_account_analytic_plan_accountantaccount.analytic.plan accountantanalytic.model_account_analytic_planaccount.group_account_user1111
40access_account_analytic_distribution_readonlyaccount.analytic.distribution invoiceanalytic.model_account_analytic_distribution_modelaccount.group_account_readonly1000
41access_account_analytic_distribution_invoiceaccount.analytic.distribution invoiceanalytic.model_account_analytic_distribution_modelaccount.group_account_invoice1111
42access_account_journal_readonlyaccount.journalmodel_account_journalaccount.group_account_readonly1000
43access_account_journal_manageraccount.journalmodel_account_journalaccount.group_account_manager1111
44access_account_journal_invoiceaccount.journal invoicemodel_account_journalaccount.group_account_invoice1000
45access_account_journal_group_allaccount.journal.group allmodel_account_journal_groupaccount.group_account_readonly1000
46access_account_journal_group_manageraccount.journal.group managermodel_account_journal_groupaccount.group_account_manager1111
47access_account_group_manageraccount.groupmodel_account_groupaccount.group_account_manager1111
48access_account_groupaccount.groupmodel_account_groupaccount.group_account_readonly1000
49access_account_root_manageraccount.rootmodel_account_rootaccount.group_account_manager1000
50access_account_rootaccount.rootmodel_account_rootaccount.group_account_readonly1000
51access_account_account_manageraccount.accountmodel_account_accountaccount.group_account_manager1111
52access_account_accountaccount.account.readonlymodel_account_accountaccount.group_account_readonly1000
53access_account_account_useraccount.account usermodel_account_accountbase.group_user1000
54access_account_account_partner_manageraccount.account partner managermodel_account_accountbase.group_partner_manager1000
55access_account_account_invoiceaccount.account invoicemodel_account_accountaccount.group_account_invoice1000
56access_account_tax_internal_useraccount.tax internal usermodel_account_taxbase.group_user1000
57access_account_tax_readonlyaccount.taxmodel_account_taxaccount.group_account_readonly1000
58access_account_tax_invoiceaccount.taxmodel_account_taxaccount.group_account_invoice1000
59access_account_tax_manageraccount.taxmodel_account_taxaccount.group_account_manager1111
60access_account_account_taxaccount.account.tagmodel_account_account_tagaccount.group_account_user1111
61access_account_account_tax_readonlyaccount.account.tagmodel_account_account_tagaccount.group_account_readonly1000
62access_account_account_tax_useraccount.account.tagmodel_account_account_tagaccount.group_account_invoice1000
63access_account_tax_repartition_line_useraccount.tax repartition.line.usermodel_account_tax_repartition_linebase.group_user1000
64access_account_tax_repartition_line_readonlyaccount.tax repartition.line.invoicemodel_account_tax_repartition_lineaccount.group_account_readonly1000
65access_account_tax_repartition_line_invoiceaccount.tax repartition.line.invoicemodel_account_tax_repartition_lineaccount.group_account_invoice1000
66access_account_tax_repartition_line_manageraccount.tax repartition.line.managermodel_account_tax_repartition_lineaccount.group_account_manager1111
67access_account_tax_group_internal_useraccount.tax.group internal usermodel_account_tax_groupbase.group_user1000
68access_account_tax_group_readonlyaccount.tax.groupmodel_account_tax_groupaccount.group_account_readonly1000
69access_account_tax_groupaccount.tax.groupmodel_account_tax_groupaccount.group_account_invoice1000
70access_account_tax_group_manageraccount.tax.groupmodel_account_tax_groupaccount.group_account_manager1111
71access_account_reconcile_model_readonlyaccount.reconcile.model.readonlymodel_account_reconcile_modelaccount.group_account_readonly1000
72access_account_reconcile_model_billingaccount.reconcile.model.billingmodel_account_reconcile_modelaccount.group_account_invoice1010
73access_account_reconcile_modelaccount.reconcile.modelmodel_account_reconcile_modelaccount.group_account_user1111
74access_account_reconcile_model_line_readonlyaccount.reconcile.model.line.readonlymodel_account_reconcile_model_lineaccount.group_account_readonly1000
75access_account_reconcile_model_line_billingaccount.reconcile.model.line.billingmodel_account_reconcile_model_lineaccount.group_account_invoice1010
76access_account_reconcile_model_lineaccount.reconcile.model.linemodel_account_reconcile_model_lineaccount.group_account_user1111
77access_account_reconcile_model_partner_mapping_readonlyaccount.reconcile.model.partner.mapping.readonlymodel_account_reconcile_model_partner_mappingaccount.group_account_readonly1000
78access_account_reconcile_model_partner_mapping_billingaccount.reconcile.model.partner.mapping.billingmodel_account_reconcile_model_partner_mappingaccount.group_account_invoice1010
79access_account_reconcile_model_partner_mappingaccount.reconcile.model.partner.mappingmodel_account_reconcile_model_partner_mappingaccount.group_account_user1111
80access_account_partial_reconcile_readonlyaccount.partial.reconcile.readonlymodel_account_partial_reconcileaccount.group_account_readonly1000
81access_account_partial_reconcile_group_invoiceaccount.partial.reconcile.group.invoicemodel_account_partial_reconcileaccount.group_account_invoice1111
82access_account_partial_reconcileaccount.partial.reconcilemodel_account_partial_reconcileaccount.group_account_user1111
83access_account_full_reconcile_group_readonlyaccount.full.reconcile.group.invoicemodel_account_full_reconcileaccount.group_account_readonly1000
84access_account_full_reconcile_group_invoiceaccount.full.reconcile.group.invoicemodel_account_full_reconcileaccount.group_account_invoice1111
85access_account_full_reconcileaccount.full.reconcilemodel_account_full_reconcileaccount.group_account_user1111
86access_account_payment_term_partner_manageraccount.payment.term partner managermodel_account_payment_termbase.group_user1000
87access_account_payment_term_manageraccount.payment.termmodel_account_payment_termaccount.group_account_manager1111
88access_account_payment_term_line_partner_manageraccount.payment.term.line partner managermodel_account_payment_term_linebase.group_user1000
89access_account_payment_term_line_manageraccount.payment.term.linemodel_account_payment_term_lineaccount.group_account_manager1111
90access_account_payment_method_line_readonlyaccount.payment.method.linemodel_account_payment_method_linebase.group_user1000
91access_account_payment_method_lineaccount.payment.method.linemodel_account_payment_method_lineaccount.group_account_invoice1111
92access_account_payment_method_readonlyaccount.payment.methodmodel_account_payment_methodbase.group_user1000
93access_account_payment_methodaccount.payment.methodmodel_account_payment_methodaccount.group_account_invoice1101
94access_account_payment_readonlyaccount.paymentmodel_account_paymentaccount.group_account_readonly1000
95access_account_paymentaccount.paymentmodel_account_paymentaccount.group_account_invoice1111
96access_account_payment_registeraccess.account.payment.registermodel_account_payment_registeraccount.group_account_invoice1110
97access_account_automatic_entry_wizardaccess.account.automatic.entry.wizardmodel_account_automatic_entry_wizardaccount.group_account_user1110
98access_account_unreconcileaccess.account.unreconcilemodel_account_unreconcileaccount.group_account_user1110
99access_account_resequenceaccess.account.resequence.wizardmodel_account_resequence_wizardaccount.group_account_manager1110
100access_validate_account_moveaccess.validate.account.movemodel_validate_account_moveaccount.group_account_invoice1110
101access_account_move_reversalaccess.account.move.reversalmodel_account_move_reversalaccount.group_account_invoice1110
102access_account_financial_year_opaccess.account.financial.year.opmodel_account_financial_year_opaccount.group_account_manager1110
103access_account_setup_bank_manual_configaccess.account.setup.bank.manual.configmodel_account_setup_bank_manual_configaccount.group_account_manager1110
104access_account_move_sendaccess.account.move.sendmodel_account_move_sendaccount.group_account_invoice1111
105access_account_tour_upload_billaccount.tour.upload.billmodel_account_tour_upload_billaccount.group_account_manager1110
106access_account_tour_upload_bill_email_confirmaccount.tour.upload.bill.email.confirmmodel_account_tour_upload_bill_email_confirmaccount.group_account_manager1110
107access_account_accrued_orders_wizardaccount.account.accrued.orders.wizardaccount.model_account_accrued_orders_wizardgroup_account_user1110
108access_account_report_readonlyaccount.report.readonlymodel_account_reportaccount.group_account_readonly1000
109access_account_report_ac_useraccount.report.ac.usermodel_account_reportaccount.group_account_manager1111
110access_account_report_line_readonlyaccount.report.line.readonlymodel_account_report_lineaccount.group_account_readonly1000
111access_account_report_line_ac_useraccount.report.line.ac.usermodel_account_report_lineaccount.group_account_manager1111
112access_account_report_expression_readonlyaccount.report.expression.readonlymodel_account_report_expressionaccount.group_account_readonly1000
113access_account_report_expression_ac_useraccount.report.expression.ac.usermodel_account_report_expressionaccount.group_account_manager1111
114access_account_report_column_readonlyaccount.report.column.readonlymodel_account_report_columnaccount.group_account_readonly1000
115access_account_report_column_ac_useraccount.report.column.ac.usermodel_account_report_columnaccount.group_account_manager1111
116access_account_report_external_value_readonlyaccount.report.external.value.readonlymodel_account_report_external_valueaccount.group_account_readonly1000
117access_account_report_external_value_ac_useraccount.report.external.value.ac.usermodel_account_report_external_valueaccount.group_account_manager1111