odoo
/
odoo
2
0
Fork 0
Code Pull Requests Releases Activity

[FIX] project_issue_sheet: restrict inherited view access 

The field timesheet_ids (hr.analytic.timesheet) and analytic_account_id
(account.analytic.account) should not be accessible by the portal user.

Fixes #8338
Closes #8354
This commit is contained in:
Nicolas Mac Rouillon 2015-09-03 08:54:31 -03:00 committed by Martin Trigaux
parent 25634df8f2
commit 4400da6ca4
1 changed files with 1 additions and 0 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

1
addons/project_issue_sheet/project_issue_sheet_view.xml
View File

@ -4,6 +4,7 @@
<record model="ir.ui.view" id="project_issue_form_view">
<field name="name">Project Issue Tracker Form</field>
<field name="model">project.issue</field>
<field name="groups_id" eval="[(4, ref('base.group_user'))]"/>
<field name="inherit_id" ref="project_issue.project_issue_form_view" />
<field name="arch" type="xml">
<field name="project_id" position="attributes">