Thibault Delavallée
6b87c731fb
* Limitate rights of event user to reading an event Event user should not be able to create events. Its rights should be limited to reading events, creating and updating registrations. Only event managers are allowed to create and modify events. * Sudo access on ir.values in event config settings Configuring events imply modifying auto confirmation parameter which is stored into an ir.values. As this model is limited to values with user_id = uid we have to sudo the access here as it is not a user-defined value. * Add some tests for the various fixed issues
13 lines
1.2 KiB
CSV
13 lines
1.2 KiB
CSV
id,name,model_id:id,group_id:id,perm_read,perm_write,perm_create,perm_unlink
|
|
access_event_type,event.type,model_event_type,event.group_event_user,1,0,0,0
|
|
access_event_type_manager,event.type manager,model_event_type,event.group_event_manager,1,1,1,1
|
|
access_event_event_portal,event.event.portal,model_event_event,,1,0,0,0
|
|
access_event_event_user,event.event.user,model_event_event,event.group_event_user,1,0,0,0
|
|
access_event_event_manager,event.event.manager,model_event_event,event.group_event_manager,1,1,1,1
|
|
access_event_registration,event.registration,model_event_registration,event.group_event_user,1,1,1,1
|
|
access_event_registration_portal,event.registration,model_event_registration,,1,0,0,0
|
|
access_event_mail,event.mail,model_event_mail,event.group_event_user,1,0,0,0
|
|
access_event_mail_manager,event.mail manager,model_event_mail,event.group_event_manager,1,1,1,1
|
|
access_event_mail_registration,event.mail.registration,model_event_mail_registration,event.group_event_user,1,0,0,0
|
|
access_event_mail_registration_manager,event.mail.registration.manager,model_event_mail_registration,event.group_event_manager,1,1,1,1
|
|
access_report_event_registration,report.event.registration,model_report_event_registration,event.group_event_user,1,1,1,1 |