Files
odoo_source/addons/project/security/ir.model.access.csv
T
Martin Trigaux 604a47ead8 [IMP] *: remove global ACL
THese are rarely intended for all users but often intended only for
employees.

account:
account.incoterms: only used within internal business models
account.journal.group: same as account.journal, add sudo in computed field

account_edi: need access to accounting objects

base_address_extended:
res.city: only employees should access address data

board: only employees uses this (old) module

crm:
crm.stage: internal users business object

hr_recruitment: employees can read

im_livechat: apply same as for the steps

l10n_ar: used on partner, not only invoices
l10n_ec: accessed only through account.move
l10n_latam: accessed on res.partner

mail:
publisher.warrenty.contract: no data, only static models
mail.channel: group_user has already his own rule
mail.group: group_user has already his own rule
mail.message.subtype: group_user has already his own rule
mail.message.all: remove, already has a portal and employee rule

partner_autocomplete: no interaction with public

project:
project.tags: only needed for project sharing

sale_management:
sale.order.option: same as sale.order

utm: employee already has write access

web_editor: test models that have nothing to do here
web_tour: only employees uses tours

website_sale:
product.ribbon: add sudo for access

base:
ir.default: only employees uses set (could probably be converted to group_system)
ir.ui.view.custom: same as ir.ui.view, add sudo when needed
report.*: portal users don't configure reports
res.users.log: create in sudo, no access needed (adapt test to use another model)
res.lang: still needed for public

closes odoo/odoo#118701

Related: odoo/enterprise#41285
Signed-off-by: Martin Trigaux (mat) <mat@odoo.com>
2023-06-12 22:39:26 +02:00

5.3 KiB

1idnamemodel_id:idgroup_id:idperm_readperm_writeperm_createperm_unlink
2access_project_projectproject.projectmodel_project_projectproject.group_project_user1000
3access_project_project_managerproject.projectmodel_project_projectproject.group_project_manager1111
4access_project_project_stageproject.project_stagemodel_project_project_stagebase.group_user1000
5access_project_project_stage_managerproject.project_stage.managermodel_project_project_stageproject.group_project_manager1111
6access_project_task_type_userproject.task.type.usermodel_project_task_typebase.group_user1000
7access_project_task_type_project_userproject.task.type.project.usermodel_project_task_typeproject.group_project_user1111
8access_project_task_type_managerproject.task.type managermodel_project_task_typeproject.group_project_manager1111
9access_project_task_type_portaltask_type_portalproject.model_project_task_typebase.group_portal1000
10access_project_taskproject.taskmodel_project_taskproject.group_project_user1111
11access_report_project_task_userreport.project.task.usermodel_report_project_task_userproject.group_project_manager1111
12access_report_project_task_user_project_userreport.project.task.user.project.usermodel_report_project_task_userproject.group_project_user1000
13access_partner_task_userbase.res.partner userbase.model_res_partnerproject.group_project_user1000
14access_task_on_partnerproject.task on partnersmodel_project_taskbase.group_user1000
15access_task_portaltask_portalproject.model_project_taskbase.group_portal1000
16access_project_userproject.project on partnersmodel_project_projectbase.group_user1000
17access_project_portalproject_portalproject.model_project_projectbase.group_portal1000
18access_resource_calendarproject.resource_calendar userresource.model_resource_calendarproject.group_project_user1000
19access_resource_calendar_attendanceproject.resource_calendar_attendance userresource.model_resource_calendar_attendanceproject.group_project_user1000
20access_resource_calendar_leaves_userresource.calendar.leaves userresource.model_resource_calendar_leavesproject.group_project_user1111
21access_project_tags_allproject.project_tags_allmodel_project_tagsbase.group_user1000
22access_project_tags_managerproject.project_tags_managermodel_project_tagsproject.group_project_manager1111
23access_project_tags_portalproject_tags_portalproject.model_project_tagsbase.group_portal1000
24access_mail_activity_type_project_managermail.activity.type.project.managermail.model_mail_activity_typeproject.group_project_manager1111
25access_account_analytic_account_useraccount.analytic.accountanalytic.model_account_analytic_accountproject.group_project_user1000
26access_account_analytic_account_manageraccount.analytic.accountanalytic.model_account_analytic_accountproject.group_project_manager1111
27access_account_analytic_line_projectaccount.analytic.line projectanalytic.model_account_analytic_lineproject.group_project_manager1111
28access_project_task_type_delete_wizardproject.task.type.delete.wizardmodel_project_task_type_delete_wizardproject.group_project_manager1111
29access_project_project_stage_delete_wizardproject.project.stage.delete.wizardmodel_project_project_stage_delete_wizardproject.group_project_manager1111
30access_project_task_recurrenceproject.task.recurrencemodel_project_task_recurrenceproject.group_project_user1111
31project.access_project_task_burndown_chart_reportaccess_project_task_burndown_chart_reportproject.model_project_task_burndown_chart_reportproject.group_project_manager1111
32project.access_project_task_burndown_chart_report_useraccess_project_task_burndown_chart_report_userproject.model_project_task_burndown_chart_reportproject.group_project_user1000
33access_project_update_userproject.update.usermodel_project_updatebase.group_user1000
34access_project_update_portalproject.update.portalmodel_project_updatebase.group_portal0000
35access_project_update_project_userproject.update.project.usermodel_project_updateproject.group_project_user1111
36access_project_update_project_managerproject.update.project.managermodel_project_updateproject.group_project_manager1111
37access_project_milestone_userproject.milestone.usermodel_project_milestonebase.group_user1000
38access_project_milestone_portalproject.milestone.portalmodel_project_milestonebase.group_portal0000
39access_project_milestone_project_userproject.milestone.project.usermodel_project_milestoneproject.group_project_user1111
40access_project_milestone_project_managerproject.milestone.project.managermodel_project_milestoneproject.group_project_manager1111
41access_project_collaborator_managerproject.collaborator.managermodel_project_collaboratorproject.group_project_manager1111
42access_project_collaborator_userproject.collaborator.usermodel_project_collaboratorproject.group_project_user1000
43access_project_collaborator_portalproject.collaborator.portalmodel_project_collaboratorbase.group_portal1000
44access_project_share_managerproject.share.wizard.managermodel_project_share_wizardproject.group_project_manager1110
45access_project_personal_stageproject.personal.stage.usermodel_project_task_stage_personalbase.group_user1111