Jérémy Hennecart
7a02ea0856
sms.template model has several record rules to give access to templates linked to models managed by certain groups (like crm.lead for sales managers) These record rules were meant to restrict access to certain model to create, write and unlink, but not read. This is leading to issues when trying to read a template on other models. Indeed people should always be able read sms.template content. Unit test were also added to the sms module to ensure that a member of group_user can always read a sms template. Unit test is added to ensure admin always has full control on sms.templates. Task ID-2191254 COM PR odoo/odoo#68445 ENT PR odoo/enterprise#17340 X-original-commit: 6a00157f79be30a6efd6d039504c57be07c449fd
61 lines
2.6 KiB
Python
61 lines
2.6 KiB
Python
# -*- coding: utf-8 -*-
|
|
# Part of Odoo. See LICENSE file for full copyright and licensing details.
|
|
|
|
from odoo.tests.common import TransactionCase, users
|
|
from odoo.addons.mail.tests.common import mail_new_test_user
|
|
from odoo.tests import tagged
|
|
from odoo.exceptions import AccessError
|
|
|
|
|
|
@tagged('post_install')
|
|
class TestSmsTemplateAccessRights(TransactionCase):
|
|
|
|
@classmethod
|
|
def setUpClass(cls):
|
|
super().setUpClass()
|
|
cls.user_admin = mail_new_test_user(cls.env, login='user_system', groups='base.group_system')
|
|
cls.basic_user = mail_new_test_user(cls.env, login='user_employee', groups='base.group_user')
|
|
sms_enabled_models = cls.env['ir.model'].search([('is_mail_thread_sms', '=', True), ('transient', '=', False)])
|
|
vals = []
|
|
for model in sms_enabled_models:
|
|
vals.append({
|
|
'name': 'SMS Template ' + model.name,
|
|
'body': 'Body Test',
|
|
'model_id': model.id,
|
|
})
|
|
cls.sms_templates = cls.env['sms.template'].create(vals)
|
|
|
|
@users('user_employee')
|
|
def test_access_rights_user_sms_template(self):
|
|
# Check if a member of group_user can only read on sms.template
|
|
for sms_template in self.env['sms.template'].browse(self.sms_templates.ids):
|
|
self.assertTrue(bool(sms_template.name))
|
|
with self.assertRaises(AccessError):
|
|
sms_template.write({'name': 'Update Template'})
|
|
with self.assertRaises(AccessError):
|
|
self.env['sms.template'].create({
|
|
'name': 'New SMS Template ' + sms_template.model_id.name,
|
|
'body': 'Body Test',
|
|
'model_id': sms_template.model_id.id,
|
|
})
|
|
with self.assertRaises(AccessError):
|
|
sms_template.unlink()
|
|
|
|
@users('user_system')
|
|
def test_access_rights_manager_sms_template(self):
|
|
admin = self.env.ref('base.user_admin')
|
|
for sms_template in self.env['sms.template'].browse(self.sms_templates.ids):
|
|
self.assertTrue(bool(sms_template.name))
|
|
sms_template.write({'body': 'New body from admin'})
|
|
self.env['sms.template'].create({
|
|
'name': 'New SMS Template ' + sms_template.model_id.name,
|
|
'body': 'Body Test',
|
|
'model_id': sms_template.model_id.id,
|
|
})
|
|
|
|
# check admin is allowed to read all templates since he can be a member of
|
|
# other groups applying restrictions based on the model
|
|
self.assertTrue(bool(self.env['sms.template'].with_user(admin).browse(sms_template.ids).name))
|
|
|
|
sms_template.unlink()
|