This commit's purpose is to give back to the portal user the access rigth to read on the model project.milestone. This access was removed because it was judge that it was not needed to give access to portal user to an entire model. The issue it created is that while the name_get still works, it is no longer possible to do a search on the milestone field on the portal sharing step to reproduce : - install db with project and demo data - log in with mitchel admin - open the project app - click on the 'share' option of the deco addict project - select 'edit' and type 'joel' in the partner section. Select the suggested portal user 'my company joel willis' - click on 'send invitation' - log out and log in with the portal user - select the project menu - click on the shared project 'deco addict' - start typing in the search bar and select the 'milestone' option An access right error is raised. source of the issue : The name_search function is not executed in sudo and since the portal user has no read access on the project.milestone model, an access right error is raised. Solution : Give the read access to the project.milestone model to portal user. Ideally, that is something we'd like to avoid, but since the other option is to execute the name_search in sudo, giving read access is the better option. An ir.rule was also added to ensure that the portal user has only access to the milestone linked to his shared project. A local script was added, and the version of the manifest was changed in order to trigger the script when the module is updated. Some tests were added. affected version 16.0 -> 17.0 (another fix will be applied in master) ticket - https://www.odoo.com/web#id=3548142&cids=1&model=project.task&view_type=form closes odoo/odoo#144525 X-original-commit: d74a6ca46d208fbbe5142bcbb39d8985ee1e1f23 Signed-off-by: Xavier Bol (xbo) <xbo@odoo.com>
5.6 KiB
5.6 KiB
| 1 | id | name | model_id:id | group_id:id | perm_read | perm_write | perm_create | perm_unlink |
|---|---|---|---|---|---|---|---|---|
| 2 | access_project_project | project.project | model_project_project | project.group_project_user | 1 | 0 | 0 | 0 |
| 3 | access_project_project_manager | project.project | model_project_project | project.group_project_manager | 1 | 1 | 1 | 1 |
| 4 | access_project_project_stage | project.project_stage | model_project_project_stage | base.group_user | 1 | 0 | 0 | 0 |
| 5 | access_project_project_stage_manager | project.project_stage.manager | model_project_project_stage | project.group_project_manager | 1 | 1 | 1 | 1 |
| 6 | access_project_task_type_user | project.task.type.user | model_project_task_type | base.group_user | 1 | 0 | 0 | 0 |
| 7 | access_project_task_type_project_user | project.task.type.project.user | model_project_task_type | project.group_project_user | 1 | 1 | 1 | 1 |
| 8 | access_project_task_type_manager | project.task.type manager | model_project_task_type | project.group_project_manager | 1 | 1 | 1 | 1 |
| 9 | access_project_task_type_portal | task_type_portal | project.model_project_task_type | base.group_portal | 1 | 0 | 0 | 0 |
| 10 | access_project_task | project.task | model_project_task | project.group_project_user | 1 | 1 | 1 | 1 |
| 11 | access_report_project_task_user | report.project.task.user | model_report_project_task_user | project.group_project_manager | 1 | 0 | 0 | 0 |
| 12 | access_report_project_task_user_project_user | report.project.task.user.project.user | model_report_project_task_user | project.group_project_user | 1 | 0 | 0 | 0 |
| 13 | access_partner_task_user | base.res.partner user | base.model_res_partner | project.group_project_user | 1 | 0 | 0 | 0 |
| 14 | access_task_on_partner | project.task on partners | model_project_task | base.group_user | 1 | 0 | 0 | 0 |
| 15 | access_task_portal | task_portal | project.model_project_task | base.group_portal | 1 | 0 | 0 | 0 |
| 16 | access_project_user | project.project on partners | model_project_project | base.group_user | 1 | 0 | 0 | 0 |
| 17 | access_project_portal | project_portal | project.model_project_project | base.group_portal | 1 | 0 | 0 | 0 |
| 18 | access_resource_calendar | project.resource_calendar user | resource.model_resource_calendar | project.group_project_user | 1 | 0 | 0 | 0 |
| 19 | access_resource_calendar_attendance | project.resource_calendar_attendance user | resource.model_resource_calendar_attendance | project.group_project_user | 1 | 0 | 0 | 0 |
| 20 | access_resource_calendar_leaves_user | resource.calendar.leaves user | resource.model_resource_calendar_leaves | project.group_project_user | 1 | 1 | 1 | 1 |
| 21 | access_project_tags_all | project.project_tags_all | model_project_tags | base.group_user | 1 | 0 | 0 | 0 |
| 22 | access_project_tags_manager | project.project_tags_manager | model_project_tags | project.group_project_manager | 1 | 1 | 1 | 1 |
| 23 | access_project_tags_portal | project_tags_portal | project.model_project_tags | base.group_portal | 1 | 0 | 0 | 0 |
| 24 | access_mail_activity_type_project_manager | mail.activity.type.project.manager | mail.model_mail_activity_type | project.group_project_manager | 1 | 1 | 1 | 1 |
| 25 | access_account_analytic_account_user | account.analytic.account | analytic.model_account_analytic_account | project.group_project_user | 1 | 0 | 0 | 0 |
| 26 | access_account_analytic_account_manager | account.analytic.account | analytic.model_account_analytic_account | project.group_project_manager | 1 | 1 | 1 | 1 |
| 27 | access_account_analytic_line_project | account.analytic.line project | analytic.model_account_analytic_line | project.group_project_manager | 1 | 1 | 1 | 1 |
| 28 | access_project_task_type_delete_wizard | project.task.type.delete.wizard | model_project_task_type_delete_wizard | project.group_project_manager | 1 | 1 | 1 | 1 |
| 29 | access_project_project_stage_delete_wizard | project.project.stage.delete.wizard | model_project_project_stage_delete_wizard | project.group_project_manager | 1 | 1 | 1 | 1 |
| 30 | access_project_task_recurrence | project.task.recurrence | model_project_task_recurrence | project.group_project_user | 1 | 1 | 1 | 1 |
| 31 | project.access_project_task_burndown_chart_report | access_project_task_burndown_chart_report | project.model_project_task_burndown_chart_report | project.group_project_manager | 1 | 1 | 1 | 1 |
| 32 | project.access_project_task_burndown_chart_report_user | access_project_task_burndown_chart_report_user | project.model_project_task_burndown_chart_report | project.group_project_user | 1 | 0 | 0 | 0 |
| 33 | access_project_update_user | project.update.user | model_project_update | base.group_user | 1 | 0 | 0 | 0 |
| 34 | access_project_update_portal | project.update.portal | model_project_update | base.group_portal | 0 | 0 | 0 | 0 |
| 35 | access_project_update_project_user | project.update.project.user | model_project_update | project.group_project_user | 1 | 1 | 1 | 1 |
| 36 | access_project_update_project_manager | project.update.project.manager | model_project_update | project.group_project_manager | 1 | 1 | 1 | 1 |
| 37 | access_project_milestone_user | project.milestone.user | model_project_milestone | base.group_user | 1 | 0 | 0 | 0 |
| 38 | access_project_milestone_portal | project.milestone.portal | model_project_milestone | base.group_portal | 1 | 0 | 0 | 0 |
| 39 | access_project_milestone_project_user | project.milestone.project.user | model_project_milestone | project.group_project_user | 1 | 1 | 1 | 1 |
| 40 | access_project_milestone_project_manager | project.milestone.project.manager | model_project_milestone | project.group_project_manager | 1 | 1 | 1 | 1 |
| 41 | access_project_collaborator_manager | project.collaborator.manager | model_project_collaborator | project.group_project_manager | 1 | 1 | 1 | 1 |
| 42 | access_project_collaborator_user | project.collaborator.user | model_project_collaborator | project.group_project_user | 1 | 0 | 0 | 0 |
| 43 | access_project_collaborator_portal | project.collaborator.portal | model_project_collaborator | base.group_portal | 1 | 0 | 0 | 0 |
| 44 | access_project_share_manager | project.share.wizard.manager | model_project_share_wizard | project.group_project_manager | 1 | 1 | 1 | 0 |
| 45 | access_project_personal_stage | project.personal.stage.user | model_project_task_stage_personal | base.group_user | 1 | 1 | 1 | 1 |
| 46 | access_mail_activity_plan_project_manager | mail.activity.plan.project.manager | mail.model_mail_activity_plan | project.group_project_manager | 1 | 1 | 1 | 1 |
| 47 | access_mail_activity_plan_template_project_manager | mail.activity.plan.template.project.manager | mail.model_mail_activity_plan_template | project.group_project_manager | 1 | 1 | 1 | 1 |