[FIX] portal_sale: remove more access rights, add pricelist access
Pricelist access is necessary for being able to read the unit price of sale order lines, and does not pose major security risks, as it does not permit reading the actual pricelist definition.
This commit is contained in:
parent
d03ae8980a
commit
23cffab1f8
|
@ -5,9 +5,8 @@ access_account_invoice,account.invoice,account.model_account_invoice,portal.grou
|
|||
access_account_invoice_tax,account.invoice.tax,account.model_account_invoice_tax,portal.group_portal,1,0,0,0
|
||||
access_account_invoice_line,account.invoice.line,account.model_account_invoice_line,portal.group_portal,1,0,0,0
|
||||
access_account_journal,account.journal,account.model_account_journal,portal.group_portal,1,0,0,0
|
||||
access_account_voucher,account.voucher,account_voucher.model_account_voucher,portal.group_portal,1,0,0,0
|
||||
access_account_voucher_line,account.voucher.line,account_voucher.model_account_voucher_line,portal.group_portal,1,0,0,0
|
||||
access_sale_shop,sale.shop,sale.model_sale_shop,portal.group_portal,1,0,0,0
|
||||
access_product_list,product.pricelist,product.model_product_pricelist,portal.group_portal,1,0,0,0
|
||||
access_res_partner,res.partner,base.model_res_partner,portal.group_portal,1,0,0,0
|
||||
access_account_tax,account.tax,account.model_account_tax,portal.group_portal,1,0,0,0
|
||||
access_res_partner_category,res.partner.category,base.model_res_partner_category,portal.group_portal,1,0,0,0
|
|
Loading…
Reference in New Issue