Hugo Carlier (Huca)
5aa9a69b56
Since the introduction of project_todo, access to the model project.task for interal users has been extended to read/write/create/unlink. The basic record rule for task visibility does in consequence need to manage only the read access. A new record rule was introduced to manage write/create/unlink access for project users. However, the read access for this group was also managed by this new rule, which led to evaluation of both ir.rule for project user. related-https://github.com/odoo/odoo/pull/115390 closes odoo/odoo#129058 X-original-commit: 0808286feb463f7618fdc2e72f010d151db8c9a3 Signed-off-by: Xavier Bol (xbo) <xbo@odoo.com>
46 lines
1.9 KiB
XML
46 lines
1.9 KiB
XML
<?xml version="1.0" encoding="utf-8"?>
|
|
<odoo>
|
|
|
|
<record id="group_onboarding_todo" model="res.groups">
|
|
<field name="name">Onboarding todo already generated for those users</field>
|
|
<field name="category_id" ref="base.module_category_hidden"/>
|
|
</record>
|
|
|
|
<data noupdate="1">
|
|
|
|
<record model="ir.rule" id="project.task_visibility_rule">
|
|
<field name="perm_create" eval="False"/>
|
|
<field name="perm_unlink" eval="False"/>
|
|
<field name="perm_write" eval="False"/>
|
|
<field name="groups" eval="[(4,ref('base.group_user'))]"/>
|
|
</record>
|
|
|
|
<record model="ir.rule" id="task_edition_rule_internal">
|
|
<field name="name">Project/Task: employees: Full access to own private task only</field>
|
|
<field name="model_id" ref="project.model_project_task"/>
|
|
<field name="domain_force">[('project_id', '=', False), ('user_ids', 'in', user.id), ('parent_id', '=', False)]</field>
|
|
<field name="groups" eval="[(4,ref('base.group_user'))]"/>
|
|
</record>
|
|
|
|
<record model="ir.rule" id="task_visibility_rule_project_user">
|
|
<field name="name">Project/Task: project users: follow required for follower-only projects</field>
|
|
<field name="model_id" ref="project.model_project_task"/>
|
|
<field name="domain_force">[
|
|
'|',
|
|
'&',
|
|
('project_id', '!=', False),
|
|
'|',
|
|
('project_id.privacy_visibility', '!=', 'followers'),
|
|
('project_id.message_partner_ids', 'in', [user.partner_id.id]),
|
|
'|',
|
|
('message_partner_ids', 'in', [user.partner_id.id]),
|
|
# to subscribe check access to the record, follower is not enough at creation
|
|
('user_ids', 'in', user.id)
|
|
]</field>
|
|
<field name="perm_read" eval="False"/>
|
|
<field name="groups" eval="[(4,ref('project.group_project_user'))]"/>
|
|
</record>
|
|
|
|
</data>
|
|
</odoo>
|