Martin Trigaux
0b2ee16885
[FIX] project: access rights and followers
...
For privacy_visibility 'followers' or 'portal', the user should be follower of the project (not the task).
Remove public access to portal task
Fixes #2372
If no project on the task (or other rule), an employee (not a portal) can access if is follower of the task.
Follower rule is not enough as a user creating a rule will subscribe to the rule but to subscribe to record, the user should have access to it in the first place.
To make sure the snake does not bit its tail, fallback to give access on task where the user is reponsible (user_id = user.id).
Fixes #139
Adapted the tests to the new behaviour (removed not relevant and added some on creation)
2014-11-18 18:52:46 +01:00
Thibault Delavallée
e541755ae4
[MOV] portal: moved portal group into base.
...
Updated security rules. Basic res_partner rules are moved into base. Added rule with website_published.
bzr revid: tde@openerp.com-20131008113545-gpqydx0b199lcqpy
2013-10-08 13:35:45 +02:00
Christophe Matthieu
6a9bbba17e
[IMP] remove portal_anonymous, create group_public in server and public user in website
...
bzr revid: chm@openerp.com-20130726090445-4mmd1xlx5uwd6vmx
2013-07-26 11:04:45 +02:00
Thibault Delavallée
8c31d9772a
[FIX] project, task, issue, portal: fixed access rules for employees/portal users + added an help on privacy_visibility.
...
bzr revid: tde@openerp.com-20130426130259-35j0v7lg7unxhzzp
2013-04-26 15:02:59 +02:00
Thibault Delavallée
b6223ecb7f
[FIX] [ADD] project, project_issue, portal_project, portal_project_issue: improved privacy_visibility selection of project.project; improved access rules; added tests to enforce them.
...
bzr revid: tde@openerp.com-20130412143719-ztjo06r900l024dm
2013-04-12 16:37:19 +02:00
vta vta@openerp.com
37e5b882ef
[FIX] views, access rights, ...
...
bzr revid: vta@openerp.com-20121127143713-03y7zpnj0118ikq5
2012-11-27 15:37:13 +01:00
vta vta@openerp.com
8374e20b10
[FIX] Fixed events, mail, and project (also related access rights).
...
bzr revid: vta@openerp.com-20121122120554-ja2c2fmhxqxdyjj5
2012-11-22 13:05:54 +01:00
Fabien Pinckaers
a8a3b92c55
[IMP] rules
...
bzr revid: fp@tinyerp.com-20121114120945-in2c3eix7lqoxr2u
2012-11-14 13:09:45 +01:00
Atul Patel (OpenERP)
19e722424e
[FIX]: Fix message_followers_ids problem
...
bzr revid: atp@tinyerp.com-20121018091446-dwskge1p8bzbi9f3
2012-10-18 14:44:46 +05:30
Thibault Delavallée
bcbae5e277
[MERGE] Merged with addons/trunk, with lots of conflicts to solve...
...
bzr revid: tde@openerp.com-20120920074850-7p7or1ze8555fya5
2012-09-20 09:48:50 +02:00
Raphael Collet
5720ae3a90
[IMP] portal: rename xml id 'portal.group_portal_member' to 'portal.group_portal'
...
bzr revid: rco@openerp.com-20120914134251-answ8jr65vfeeiz3
2012-09-14 15:42:51 +02:00
Antonin Bourguignon
e66cd01467
[IMP] portal: first batch of ir rules
...
bzr revid: abo@openerp.com-20120913155810-3grgq7xht1h981m5
2012-09-13 17:58:10 +02:00
Antonin Bourguignon
5d53bf5982
[IMP] properly name each portal record rule
...
bzr revid: abo@openerp.com-20120727155039-i1scp2ajd1g08xmn
2012-07-27 17:50:39 +02:00
Antonin Bourguignon
652ff6a97f
[FIX] remove a test menu; add rights for portal members on the project_category model
...
bzr revid: abo@openerp.com-20120716121440-cfjp60f4l4w05z63
2012-07-16 14:14:40 +02:00
Antonin Bourguignon
8072858555
[IMP] split and rename the 'portal_issue' bridge module into 'portal_project' and 'portal_project_issue'
...
this is more consistent with the way we usually name bridge modules
bzr revid: abo@openerp.com-20120605124118-q8a9fvs4bio0zn4n
2012-06-05 14:41:18 +02:00