odoo
/
odoo
2
0
Fork 0
Code Pull Requests Releases Activity

[FIX] portal_sale: remove more access rights, add pricelist access 

Pricelist access is necessary for being able to read
the unit price of sale order lines, and does not
pose major security risks, as it does not permit
reading the actual pricelist definition.
This commit is contained in:
Olivier Dony 2014-08-13 17:20:49 +02:00
parent d03ae8980a
commit 23cffab1f8
1 changed files with 2 additions and 3 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

5
addons/portal_sale/security/ir.model.access.csv
View File

@ -5,9 +5,8 @@ access_account_invoice,account.invoice,account.model_account_invoice,portal.grou
access_account_invoice_tax,account.invoice.tax,account.model_account_invoice_tax,portal.group_portal,1,0,0,0
access_account_invoice_line,account.invoice.line,account.model_account_invoice_line,portal.group_portal,1,0,0,0
access_account_journal,account.journal,account.model_account_journal,portal.group_portal,1,0,0,0
access_account_voucher,account.voucher,account_voucher.model_account_voucher,portal.group_portal,1,0,0,0
access_account_voucher_line,account.voucher.line,account_voucher.model_account_voucher_line,portal.group_portal,1,0,0,0
access_sale_shop,sale.shop,sale.model_sale_shop,portal.group_portal,1,0,0,0
access_product_list,product.pricelist,product.model_product_pricelist,portal.group_portal,1,0,0,0
access_res_partner,res.partner,base.model_res_partner,portal.group_portal,1,0,0,0
access_account_tax,account.tax,account.model_account_tax,portal.group_portal,1,0,0,0
access_res_partner_category,res.partner.category,base.model_res_partner_category,portal.group_portal,1,0,0,0
access_res_partner_category,res.partner.category,base.model_res_partner_category,portal.group_portal,1,0,0,0
1 id name model_id:id group_id:id perm_read perm_write perm_create perm_unlink
5 access_account_invoice_tax account.invoice.tax account.model_account_invoice_tax portal.group_portal 1 0 0 0
6 access_account_invoice_line account.invoice.line account.model_account_invoice_line portal.group_portal 1 0 0 0
7 access_account_journal account.journal account.model_account_journal portal.group_portal 1 0 0 0
access_account_voucher account.voucher account_voucher.model_account_voucher portal.group_portal 1 0 0 0
access_account_voucher_line account.voucher.line account_voucher.model_account_voucher_line portal.group_portal 1 0 0 0
8 access_sale_shop sale.shop sale.model_sale_shop portal.group_portal 1 0 0 0
9 access_product_list product.pricelist product.model_product_pricelist portal.group_portal 1 0 0 0
10 access_res_partner res.partner base.model_res_partner portal.group_portal 1 0 0 0
11 access_account_tax account.tax account.model_account_tax portal.group_portal 1 0 0 0
12 access_res_partner_category res.partner.category base.model_res_partner_category portal.group_portal 1 0 0 0