diff --git a/addons/product/product.py b/addons/product/product.py index f82b13fb134..4e158e8e7f6 100644 --- a/addons/product/product.py +++ b/addons/product/product.py @@ -23,6 +23,7 @@ import math import re from _common import rounding +from openerp import SUPERUSER_ID from openerp import tools from openerp.osv import osv, fields @@ -735,8 +736,13 @@ class product_product(osv.osv): partner_id = context.get('partner_id', False) + # all user don't have access to seller and partner + # check access and use superuser + self.check_access_rights(cr, user, "read") + self.check_access_rule(cr, user, ids, "read", context=context) + result = [] - for product in self.browse(cr, user, ids, context=context): + for product in self.browse(cr, SUPERUSER_ID, ids, context=context): sellers = filter(lambda x: x.name.id == partner_id, product.seller_ids) if sellers: for s in sellers: diff --git a/addons/website_sale/__openerp__.py b/addons/website_sale/__openerp__.py index 748fa3a4152..08257226777 100644 --- a/addons/website_sale/__openerp__.py +++ b/addons/website_sale/__openerp__.py @@ -9,7 +9,7 @@ OpenERP E-Commerce """, 'author': 'OpenERP SA', - 'depends': ['website', 'sale', 'product', 'payment_acquirer'], + 'depends': ['website', 'sale', 'payment_acquirer'], 'data': [ 'data/website_sale_data.xml', 'views/website_sale.xml', diff --git a/addons/website_sale/security/ir.model.access.csv b/addons/website_sale/security/ir.model.access.csv index a64fc2cde73..8b3318af094 100644 --- a/addons/website_sale/security/ir.model.access.csv +++ b/addons/website_sale/security/ir.model.access.csv @@ -11,4 +11,4 @@ access_product_attribute,product.attribute.public,website_sale.model_product_att access_product_attribute_value,product.attribute.value.public,website_sale.model_product_attribute_value,,1,0,0,0 access_product_attribute_product,product.attribute.product.public,website_sale.model_product_attribute_product,,1,0,0,0 access_website_product_style,website.product.style.public,website_sale.model_website_product_style,,1,0,0,0 -access_product_supplierinfo,product.supplierinfo.public,product.model_product_supplierinfo,,1,0,0,0 +access_product_supplierinfo,product.supplierinfo.public,product.model_product_supplierinfo,base.group_public,1,0,0,0