From b958ece1df6a54b1ba29ccabda21dec21e003681 Mon Sep 17 00:00:00 2001 From: Christophe Matthieu Date: Fri, 15 Nov 2013 16:27:16 +0100 Subject: [PATCH] [IMP] website_sale: access rights bzr revid: chm@openerp.com-20131115152716-86wb7yxq2s4hr633 --- addons/website/models/website.py | 9 ++++++++- addons/website/views/website_templates.xml | 6 +++--- .../website_event/security/website_event.xml | 12 +++--------- .../security/website_membership.xml | 8 ++++---- addons/website_sale/controllers/main.py | 19 ++++++++++++++----- addons/website_sale/security/website_sale.xml | 13 ++++--------- addons/website_sale/views/website_sale.xml | 6 +++--- 7 files changed, 39 insertions(+), 34 deletions(-) diff --git a/addons/website/models/website.py b/addons/website/models/website.py index 33f2105c35f..19beffc93cc 100644 --- a/addons/website/models/website.py +++ b/addons/website/models/website.py @@ -136,6 +136,12 @@ class website(osv.osv): is_public_user = request.uid == self.get_public_user(cr, uid, context).id + try: + self.pool.get("ir.ui.view").check_access_rights(request.cr, request.uid, 'write') + editable = True + except: + editable = False + # Select current language if hasattr(request, 'route_lang'): lang = request.route_lang @@ -152,7 +158,8 @@ class website(osv.osv): 'multilang': request.multilang, 'is_public_user': is_public_user, 'is_master_lang': is_master_lang, - 'editable': not is_public_user, + 'has_access_write': True, + 'editable': editable, 'translatable': not is_public_user and not is_master_lang and request.multilang, }) diff --git a/addons/website/views/website_templates.xml b/addons/website/views/website_templates.xml index a9e26636ed8..0d5a8874ebe 100644 --- a/addons/website/views/website_templates.xml +++ b/addons/website/views/website_templates.xml @@ -107,7 +107,7 @@ - +
@@ -265,7 +265,7 @@