diff --git a/addons/stock/security/ir.model.access.csv b/addons/stock/security/ir.model.access.csv index cb86ab13bfc..551c813e609 100644 --- a/addons/stock/security/ir.model.access.csv +++ b/addons/stock/security/ir.model.access.csv @@ -45,8 +45,8 @@ access_product_pricelist_item_stock_manager,product.pricelist.item stock_manager access_board_stock_user,board.board user,board.model_board_board,stock.group_stock_user,1,1,0,0 access_stock_warehouse_orderpoint,stock.warehouse.orderpoint,model_stock_warehouse_orderpoint,stock.group_stock_user,1,0,0,0 access_stock_warehouse_orderpoint_system,stock.warehouse.orderpoint system,model_stock_warehouse_orderpoint,stock.group_stock_manager,1,1,1,1 -access_stock_quant_manager,stock.quant manager,model_stock_quant,stock.group_stock_manager,1,0,0,0 -access_stock_quant_user,stock.quant user,model_stock_quant,stock.group_stock_user,1,0,0,0 +access_stock_quant_manager,stock.quant manager,model_stock_quant,stock.group_stock_manager,1,1,0,0 +access_stock_quant_user,stock.quant user,model_stock_quant,stock.group_stock_user,1,1,0,0 access_stock_quant_all,stock.quant all users,model_stock_quant,base.group_user,1,0,0,0 access_stock_pack_operation_manager,stock.pack.operation manager,model_stock_pack_operation,stock.group_stock_manager,1,1,1,1 access_stock_pack_operation_user,stock.pack.operation user,model_stock_pack_operation,stock.group_stock_user,1,1,1,1 diff --git a/addons/stock/stock.py b/addons/stock/stock.py index 6e8ef8d5669..1e1e2132f5e 100644 --- a/addons/stock/stock.py +++ b/addons/stock/stock.py @@ -307,8 +307,8 @@ class stock_quant(osv.osv): negative_quant_id = self.create(cr, uid, negative_vals, context=context) vals.update({'propagated_from_id': negative_quant_id}) - #create the quant - quant_id = self.create(cr, uid, vals, context=context) + #create the quant as superuser, because we want to restrict the creation of quant manually: they should always use this method to create quants + quant_id = self.create(cr, SUPERUSER_ID, vals, context=context) return self.browse(cr, uid, quant_id, context=context) def _quant_split(self, cr, uid, quant, qty, context=None):