From 23cffab1f8cab7f456df56e6f1b002f4fa9b2ef0 Mon Sep 17 00:00:00 2001 From: Olivier Dony Date: Wed, 13 Aug 2014 17:20:49 +0200 Subject: [PATCH] [FIX] portal_sale: remove more access rights, add pricelist access Pricelist access is necessary for being able to read the unit price of sale order lines, and does not pose major security risks, as it does not permit reading the actual pricelist definition. --- addons/portal_sale/security/ir.model.access.csv | 5 ++--- 1 file changed, 2 insertions(+), 3 deletions(-) diff --git a/addons/portal_sale/security/ir.model.access.csv b/addons/portal_sale/security/ir.model.access.csv index 445f1438fb8..6e75cb1a711 100644 --- a/addons/portal_sale/security/ir.model.access.csv +++ b/addons/portal_sale/security/ir.model.access.csv @@ -5,9 +5,8 @@ access_account_invoice,account.invoice,account.model_account_invoice,portal.grou access_account_invoice_tax,account.invoice.tax,account.model_account_invoice_tax,portal.group_portal,1,0,0,0 access_account_invoice_line,account.invoice.line,account.model_account_invoice_line,portal.group_portal,1,0,0,0 access_account_journal,account.journal,account.model_account_journal,portal.group_portal,1,0,0,0 -access_account_voucher,account.voucher,account_voucher.model_account_voucher,portal.group_portal,1,0,0,0 -access_account_voucher_line,account.voucher.line,account_voucher.model_account_voucher_line,portal.group_portal,1,0,0,0 access_sale_shop,sale.shop,sale.model_sale_shop,portal.group_portal,1,0,0,0 +access_product_list,product.pricelist,product.model_product_pricelist,portal.group_portal,1,0,0,0 access_res_partner,res.partner,base.model_res_partner,portal.group_portal,1,0,0,0 access_account_tax,account.tax,account.model_account_tax,portal.group_portal,1,0,0,0 -access_res_partner_category,res.partner.category,base.model_res_partner_category,portal.group_portal,1,0,0,0 +access_res_partner_category,res.partner.category,base.model_res_partner_category,portal.group_portal,1,0,0,0 \ No newline at end of file