Files
odoo_source/addons/website_event/security/ir.model.access.csv
T
Martin Trigaux cd2f330bec [IMP] *: remove glocal ACL
Specify explicit route for each ,, line
This is part of task 3230280 where global ir.model.access will be
forbidden.
The goal is to make access to public/portal explicit. Too often,
global access was granted with only employees in mind.

Remove ,,0,0,0,0 lines

mail:
employee already had read access to mail.group
still needed to subtypes as in ir.rule domain

mail_group: employee already had read access
pos_mercury: only needed for employees

membership:
move public access for website_membership as needed in the controllers

website_customer: employee already had read access

website_event_booth: no need for category
website_event_exhibitor: retrieved in sudo
website_event_track: not needed for location

Part-of: odoo/odoo#125216
2023-07-11 22:33:47 +02:00

2.8 KiB

1idnamemodel_id:idgroup_id:idperm_readperm_writeperm_createperm_unlink
2access_event_event_publicevent.eventmodel_event_eventbase.group_public1000
3access_event_event_portalevent.eventmodel_event_eventbase.group_portal1000
4access_event_event_employeeevent.eventmodel_event_eventbase.group_user1000
5access_event_event_ticket_publicevent.event.ticketevent.model_event_event_ticketbase.group_public1000
6access_event_event_ticket_portalevent.event.ticketevent.model_event_event_ticketbase.group_portal1000
7access_event_event_ticket_employeeevent.event.ticketevent.model_event_event_ticketbase.group_user1000
8access_event_typeevent.typeevent.model_event_type0000
9access_event_tag_category_publicevent.tag.categoryevent.model_event_tag_categorybase.group_public1000
10access_event_tag_category_portalevent.tag.categoryevent.model_event_tag_categorybase.group_portal1000
11access_event_tag_category_employeeevent.tag.categoryevent.model_event_tag_categorybase.group_user1000
12access_event_tag_publicevent.tagevent.model_event_tagbase.group_public1000
13access_event_tag_portalevent.tagevent.model_event_tagbase.group_portal1000
14access_event_tag_employeeevent.tagevent.model_event_tagbase.group_user1000
15access_website_event_menu_publicwebsite.event.menumodel_website_event_menubase.group_public1000
16access_website_event_menu_portalwebsite.event.menumodel_website_event_menubase.group_portal1000
17access_website_event_menu_employeewebsite.event.menumodel_website_event_menubase.group_user1000
18access_website_event_menu_userwebsite.event.menu.usermodel_website_event_menuevent.group_event_user1111
19access_website_visitor_userwebsite.visitor.usermodel_website_visitorevent.group_event_user1100
20access_event_question_publicevent.questionmodel_event_questionbase.group_public1000
21access_event_question_portalevent.questionmodel_event_questionbase.group_portal1000
22access_event_question_employeeevent.questionmodel_event_questionbase.group_user1000
23access_event_question_userevent.question.usermodel_event_questionevent.group_event_user1111
24access_event_question_answer_publicevent.question.answermodel_event_question_answerbase.group_public1000
25access_event_question_answer_portalevent.question.answermodel_event_question_answerbase.group_portal1000
26access_event_question_answer_employeeevent.question.answermodel_event_question_answerbase.group_user1000
27access_event_question_answer_registrationevent.question.answer.registrationmodel_event_question_answerevent.group_event_registration_desk1100
28access_event_question_answer_userevent.question.answer.usermodel_event_question_answerevent.group_event_user1111
29access_event_registration_answerevent.registration.answermodel_event_registration_answerevent.group_event_registration_desk1111