odoo
/
odoo
2
0
Fork 0
Code Pull Requests Releases Activity

[FIX] website_blog: portal users should not be able to read unpublished blog posts

This commit is contained in:
Denis Ledoux 2014-09-22 16:33:09 +02:00
parent 4c031b95d0
commit caf1ad8a62
1 changed files with 1 additions and 1 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

2
addons/website_blog/security/website_blog.xml
View File

@ -6,7 +6,7 @@
<field name="name">Blog Post: public: published only</field>
<field name="model_id" ref="model_blog_post"/>
<field name="domain_force">[('website_published', '=', True)]</field>
<field name="groups" eval="[(4, ref('base.group_public'))]"/>
<field name="groups" eval="[(4, ref('base.group_public')), (4, ref('base.group_portal'))]"/>
</record>
</data>