Files
odoo_source/addons/mail/security/ir.model.access.csv
T
Martin Trigaux 604a47ead8 [IMP] *: remove global ACL
THese are rarely intended for all users but often intended only for
employees.

account:
account.incoterms: only used within internal business models
account.journal.group: same as account.journal, add sudo in computed field

account_edi: need access to accounting objects

base_address_extended:
res.city: only employees should access address data

board: only employees uses this (old) module

crm:
crm.stage: internal users business object

hr_recruitment: employees can read

im_livechat: apply same as for the steps

l10n_ar: used on partner, not only invoices
l10n_ec: accessed only through account.move
l10n_latam: accessed on res.partner

mail:
publisher.warrenty.contract: no data, only static models
mail.channel: group_user has already his own rule
mail.group: group_user has already his own rule
mail.message.subtype: group_user has already his own rule
mail.message.all: remove, already has a portal and employee rule

partner_autocomplete: no interaction with public

project:
project.tags: only needed for project sharing

sale_management:
sale.order.option: same as sale.order

utm: employee already has write access

web_editor: test models that have nothing to do here
web_tour: only employees uses tours

website_sale:
product.ribbon: add sudo for access

base:
ir.default: only employees uses set (could probably be converted to group_system)
ir.ui.view.custom: same as ir.ui.view, add sudo when needed
report.*: portal users don't configure reports
res.users.log: create in sudo, no access needed (adapt test to use another model)
res.lang: still needed for public

closes odoo/odoo#118701

Related: odoo/enterprise#41285
Signed-off-by: Martin Trigaux (mat) <mat@odoo.com>
2023-06-12 22:39:26 +02:00

6.6 KiB

1idnamemodel_id:idgroup_id:idperm_readperm_writeperm_createperm_unlink
2access_fetchmail_serverfetchmail.servermodel_fetchmail_serverbase.group_system1111
3access_mail_message_allmail.message.allmodel_mail_messagebase.group_public1000
4access_mail_message_portalmail.message.portalmodel_mail_messagebase.group_portal1111
5access_mail_message_usermail.message.usermodel_mail_messagebase.group_user1111
6access_mail_message_scheduled_allmail.message.scheduled.allmodel_mail_message_schedule0000
7access_mail_message_scheduled_systemmail.message.scheduled.systemmodel_mail_message_schedulebase.group_system1111
8access_mail_mail_allmail.mail.allmodel_mail_mail0000
9access_mail_mail_portalmail.mail.portalmodel_mail_mailbase.group_portal0000
10access_mail_mail_usermail.mail.usermodel_mail_mailbase.group_user0000
11access_mail_mail_systemmail.mail.systemmodel_mail_mailbase.group_system1111
12access_mail_followers_allmail.followers.allmodel_mail_followers0000
13access_mail_followers_usermail.followers.usermodel_mail_followersbase.group_user1000
14access_mail_followers_systemmail.followers.systemmodel_mail_followersbase.group_system1111
15access_mail_notification_portalmail.notification.portalmodel_mail_notificationbase.group_portal1000
16access_mail_notification_usermail.notification.usermodel_mail_notificationbase.group_user1110
17access_mail_notification_systemmail.notification.systemmodel_mail_notificationbase.group_system1111
18access_discuss_channel_alldiscuss.channel.allmodel_discuss_channel1000
19access_discuss_channel_userdiscuss.channel.usermodel_discuss_channelbase.group_user1110
20access_discuss_channel_admindiscuss.channel.systemmodel_discuss_channelbase.group_system1111
21access_discuss_channel_member_publicdiscuss.channel.member.publicmodel_discuss_channel_memberbase.group_public1000
22access_discuss_channel_member_portaldiscuss.channel.member.portalmodel_discuss_channel_memberbase.group_portal1111
23access_discuss_channel_member_userdiscuss.channel.member.usermodel_discuss_channel_memberbase.group_user1111
24access_discuss_channel_rtc_session_alldiscuss.channel.rtc.session.allmodel_discuss_channel_rtc_session0000
25access_discuss_channel_rtc_session_systemdiscuss.channel.rtc.session.systemmodel_discuss_channel_rtc_sessionbase.group_system1111
26access_mail_alias_allmail.alias.allmodel_mail_alias0000
27access_mail_alias_usermail.alias.usermodel_mail_aliasbase.group_user1000
28access_mail_alias_systemmail.alias.systemmodel_mail_aliasbase.group_system1111
29access_mail_gateway_allowed_systemmail.gateway.allowed.systemmodel_mail_gateway_allowedbase.group_system1111
30access_mail_message_reaction_allmail.message.reaction.allmodel_mail_message_reaction0000
31access_mail_message_reaction_systemmail.message.reaction.systemmodel_mail_message_reactionbase.group_system1111
32access_mail_message_subtype_allmail.message.subtype.allmodel_mail_message_subtype1000
33access_mail_message_subtype_usermail.message.subtype.usermodel_mail_message_subtypebase.group_user1111
34access_mail_tracking_value_allmail.tracking.value.allmodel_mail_tracking_value0000
35access_mail_tracking_value_portalmail.tracking.value.portalmodel_mail_tracking_valuebase.group_portal0000
36access_mail_tracking_value_usermail.tracking.value.usermodel_mail_tracking_valuebase.group_user0000
37access_mail_tracking_value_systemmail.tracking.value.systemmodel_mail_tracking_valuebase.group_system1111
38access_publisher_warranty_contract_allpublisher.warranty.contract.allmodel_publisher_warranty_contractbase.group_system1111
39access_mail_templatemail.templatemodel_mail_templatebase.group_user1111
40access_mail_template_editormail.template_editormodel_mail_templatemail.group_mail_template_editor1111
41access_mail_template_systemmail.template_systemmodel_mail_templatebase.group_system1111
42access_mail_shortcodemail.shortcodemodel_mail_shortcodebase.group_user1111
43access_mail_shortcode_portalmail.shortcode.portalmodel_mail_shortcodebase.group_portal1000
44access_mail_activity_allmail.activity.allmodel_mail_activity0000
45access_mail_activity_usermail.activity.usermodel_mail_activitybase.group_user1111
46access_mail_activity_type_allmail.activity.type.allmodel_mail_activity_type0000
47access_mail_activity_type_usermail.activity.type.usermodel_mail_activity_typebase.group_user1000
48access_mail_activity_type_systemmail.activity.type.systemmodel_mail_activity_typebase.group_system1111
49access_mail_blacklist_systemaccess_mail_blacklist_systemmodel_mail_blacklistbase.group_system1111
50access_mail_wizard_inviteaccess.mail.wizard.invitemodel_mail_wizard_invitebase.group_user1110
51access_mail_compose_messageaccess.mail.compose.messagemodel_mail_compose_messagebase.group_user1110
52access_mail_compose_message_portalaccess.mail.compose.message.portalmodel_mail_compose_messagebase.group_portal1110
53access_mail_resend_messageaccess.mail.resend.messagemodel_mail_resend_messagebase.group_user1110
54access_mail_resend_partneraccess.mail.resend.partnermodel_mail_resend_partnerbase.group_user1110
55access_mail_template_previewaccess.mail.template.previewmodel_mail_template_previewbase.group_user1110
56access_mail_blacklist_remove_systemacesss.mail.blacklist.remove.systemmodel_mail_blacklist_removebase.group_system1111
57access_mail_guest_allmail.guestmodel_mail_guest0000
58access_mail_guest_usermail.guestmodel_mail_guestbase.group_user1000
59access_mail_guest_systemmail.guestmodel_mail_guestbase.group_system1111
60access_mail_ice_server_allmail.ice.server.allmodel_mail_ice_server0000
61access_mail_ice_server_systemmail.ice.server.systemmodel_mail_ice_serverbase.group_system1111
62access_res_users_settings_allres.users.settingsmodel_res_users_settings0000
63access_res_users_settings_userres.users.settingsmodel_res_users_settingsbase.group_user1111
64access_res_users_settings_volumes_allres.users.settings.volumesmodel_res_users_settings_volumes0000
65access_res_users_settings_volumes_userres.users.settings.volumesmodel_res_users_settings_volumesbase.group_user1111
66access_mail_template_resetaccess.mail.template.resetmodel_mail_template_resetmail.group_mail_template_editor1111
67ir_actions_report_access_userir.actions.report.access.userbase.model_ir_actions_reportbase.group_user1000
68access_mail_link_preview_adminmail.link.preview.adminmodel_mail_link_previewbase.group_erp_manager1111