From c73be555bfd9486805750610e43302969ebb4477 Mon Sep 17 00:00:00 2001 From: Denis Ledoux Date: Tue, 20 Jan 2015 16:54:43 +0100 Subject: [PATCH] [FIX] website_sale: product attribute, value, price ACLs When a model is regarded as public readable, no group should be set on the ACL, to allow ANYONE to read the model, not just the users within the public group. --- addons/website_sale/security/ir.model.access.csv | 8 ++++---- 1 file changed, 4 insertions(+), 4 deletions(-) diff --git a/addons/website_sale/security/ir.model.access.csv b/addons/website_sale/security/ir.model.access.csv index c1774fffe2c..2101397bf60 100644 --- a/addons/website_sale/security/ir.model.access.csv +++ b/addons/website_sale/security/ir.model.access.csv @@ -10,7 +10,7 @@ access_product_pricelist_item_public,product.pricelist.item.public,product.model access_product_product_price_type_public,product.price.type.public,product.model_product_price_type,,1,0,0,0 access_product_style,product.style.public,website_sale.model_product_style,,1,0,0,0 access_product_supplierinfo,product.supplierinfo.public,product.model_product_supplierinfo,,1,0,0,0 -access_product_attribute_public,product.attribute public,product.model_product_attribute,base.group_public,1,0,0,0 -access_product_attribute_value_public,product.attribute value public,product.model_product_attribute_value,base.group_public,1,0,0,0 -access_product_attribute_price_public,product.attribute price public,product.model_product_attribute_price,base.group_public,1,0,0,0 -access_product_attribute_line_public,product.attribute line public,product.model_product_attribute_line,base.group_public,1,0,0,0 +access_product_attribute_public,product.attribute public,product.model_product_attribute,,1,0,0,0 +access_product_attribute_value_public,product.attribute value public,product.model_product_attribute_value,,1,0,0,0 +access_product_attribute_price_public,product.attribute price public,product.model_product_attribute_price,,1,0,0,0 +access_product_attribute_line_public,product.attribute line public,product.model_product_attribute_line,,1,0,0,0