odoo
/
odoo
2
0
Fork 0
Code Pull Requests Releases Activity

[FIX] base: put back access rules related to res.partner.address (we must keep access rights as lmong as the model still exists otherwise it's a security hole) 

bzr revid: qdp-launchpad@openerp.com-20120319105006-tqk337epajcs1hho
This commit is contained in:
Quentin (OpenERP) 2012-03-19 11:50:06 +01:00
parent 1a887a5f0c
commit 81d6591212
3 changed files with 6 additions and 1 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

1
openerp/addons/base/__openerp__.py
View File

@ -75,6 +75,7 @@
'security/base_security.xml',
'publisher_warranty/publisher_warranty_view.xml',
'security/ir.model.access.csv',
'security/ir.model.access-1.csv', # res.partner.address is deprecated; it is still there for backward compability only and will be removed in next version
'res/res_widget_view.xml',
'res/res_widget_data.xml',
'publisher_warranty/publisher_warranty_data.xml',

2
openerp/addons/base/res/res_partner.py
View File

@ -420,7 +420,7 @@ class res_partner(osv.osv):
# res.partner.address is deprecated; it is still there for backward compability only
# res.partner.address is deprecated; it is still there for backward compability only and will be removed in next version
class res_partner_address(osv.osv):
_table = "res_partner"
_name = 'res.partner.address'

4
openerp/addons/base/security/ir.model.access-1.csv Normal file
View File

@ -0,0 +1,4 @@
"id","name","model_id:id","group_id:id","perm_read","perm_write","perm_create","perm_unlink"
"access_res_partner_address_group_partner_manager","res_partner_address group_partner_manager","model_res_partner_address","group_partner_manager",1,1,1,1
"access_res_partner_address_group_user","res_partner_address group_user","model_res_partner_address","group_user",1,0,0,0
"access_res_partner_address","res.partner.address","model_res_partner_address","group_system",1,1,1,1
1 id name model_id:id group_id:id perm_read perm_write perm_create perm_unlink
2 access_res_partner_address_group_partner_manager res_partner_address group_partner_manager model_res_partner_address group_partner_manager 1 1 1 1
3 access_res_partner_address_group_user res_partner_address group_user model_res_partner_address group_user 1 0 0 0
4 access_res_partner_address res.partner.address model_res_partner_address group_system 1 1 1 1