Commit Graph

68 Commits

Author SHA1 Message Date
Adrien Peiffer (ACSONE) 0b4bd7a6d1 [FIX] mail: allow to delete mail alias all employees
It was allowed for all employees to read, create and edit
mail aliases. Only the deletion was prevented.
Nevertheless, giving the possibility to rename a mail alias
is allmost seen as a deletion, as you can rename it to something
that just won't be used anymore. Therefore, we can consider
to give any employees the rights to delete mail aliases.

Besides, not allowing the unlink leads to issues when the
mail alias is associated to a record the user wants to delete.
He was able to create the record, and its mail aliases, but
he could not remove the record, as he was not allowed to remove
the mail alias.
For instance, an HR officer was able to create a job position,
with its mail alias, but couldn't remove the job position he created.

Closes #8466
2015-09-21 14:26:37 +02:00
Paramjit Singh Sahota 1e26218dd3 [IMP] Added description of record and name.
bzr revid: psa@tinyerp.com-20130606111206-01ykdwfohp73uhy2
2013-06-06 16:42:06 +05:30
Paramjit Singh Sahota dfb516fb5d [IMP] created a new record rule for the technical features group.
bzr revid: psa@tinyerp.com-20130531130912-ee0ptpjv27id4l32
2013-05-31 18:39:12 +05:30
Thibault Delavallée cd290565a4 [MERGE] Sync with trunk.
bzr revid: tde@openerp.com-20121219093924-5rqmhb6ve7bv7qzl
2012-12-19 10:39:24 +01:00
Olivier Dony 3fe6987ce7 [MERGE] Harmonization of noupdate flag on security XML data, courtesy of Alexis de Lattre (Akretion)
ir.rule records are in noupdate data blocks to let the admin
alter them without fear of them being reset at next update.
Other records such as groups are in normal mode, so they
can be updated whenever necessary

bzr revid: odo@openerp.com-20121218232001-t425t4hi7qbmsip2
2012-12-19 00:20:01 +01:00
Thibault Delavallée f9cc1d4513 [FIX] mail: users can now create private mail_group.
bzr revid: tde@openerp.com-20121218121215-akxidhdegs4wjoeg
2012-12-18 13:12:15 +01:00
Thibault Delavallée 090123436b [IMP] mail: updated lambda user, now having less permissive access rights on mail_mail.
bzr revid: tde@openerp.com-20121212114905-5kgnoix0puxo30ns
2012-12-12 12:49:05 +01:00
Thibault Delavallée 04a05db5c7 [IMP] mail: removed right to write/create mail_messages for users without group.
bzr revid: tde@openerp.com-20121212104207-0panipu6sqlbgpwe
2012-12-12 11:42:07 +01:00
Thibault Delavallée 45e1682327 [FIX] [CLEAN] mail: fixed some access rules issues; removed now unused files.
bzr revid: tde@openerp.com-20121211143301-b52ji02vynvgo3m9
2012-12-11 15:33:01 +01:00
Vo Minh Thu d1f49ab27a [IMP] removing some warnings (those one are generated by tests).
bzr revid: vmt@openerp.com-20121115115916-6i2ljxn7s9qz4rlv
2012-11-15 12:59:16 +01:00
Thibault Delavallée 281a4d0801 [FIX] mail: notifications: fixed access rights issues when setting as read/unread for lambda users.
bzr revid: tde@openerp.com-20121107153822-j7f1a63a2ix66e5n
2012-11-07 16:38:22 +01:00
Vo Minh Thu abbe3ac1de [MERGE] removed a few warnings.
bzr revid: vmt@openerp.com-20121106150431-rem9us13kevan8y0
2012-11-06 16:04:31 +01:00
Jigar Amin 2ca6464e66 [MERGE] Sync with trunk
bzr revid: jam@tinyerp.com-20121018133243-jybuqt2ub9wcm9h7
2012-10-18 19:02:43 +05:30
Thibault Delavallée 1737a3161b [REVIEW] Cleaning before merging.
bzr revid: tde@openerp.com-20121018093453-trijh79z0j7oha6f
2012-10-18 11:34:53 +02:00
Thibault Delavallée 4525b411e9 [IMP] mail.followers: users can now read their own subscriptions.
bzr revid: tde@openerp.com-20121015151127-5abtwg8uraj0du0u
2012-10-15 17:11:27 +02:00
Twinkle Christian (OpenERP) 20e0731484 [MERGE]Merge with latest trunk-fix-warning brnach
bzr revid: tch@tinyerp.com-20121011103140-mg5heyn3c7l2kk49
2012-10-11 16:01:40 +05:30
Twinkle Christian (OpenERP) ff5bded9ab [FIX]Add access rights for mail.thread and publisher_warranty.contract
bzr revid: tch@tinyerp.com-20121009054709-xw0ih1p6yacxv0yu
2012-10-09 11:17:09 +05:30
Raphael Collet a1922458f5 [FIX] mail: in record rule, use partner id in mail_follower_ids instead of user id
bzr revid: rco@openerp.com-20121008151131-wi86wmjqxo44c7sq
2012-10-08 17:11:31 +02:00
Antony Lesuisse 6dd16f2613 [MERGE] trunk
bzr revid: al@openerp.com-20120930141638-bw50m7b5a8wnu2yh
2012-09-30 16:16:38 +02:00
Antonin Bourguignon 8683ea9c6d [MERGE] trunk
bzr revid: abo@openerp.com-20120928152152-p6s1dzq96g0sy2sf
2012-09-28 17:21:52 +02:00
Christophe Matthieu 267fdcff2f [FIX]mail: remove group_mail_manager
bzr revid: chm@openerp.com-20120921114837-v0fhsl3rq45zuk3j
2012-09-21 13:48:37 +02:00
Christophe Matthieu fa63653de9 [MERGE] from trunk-mail-mail-rules-tde
bzr revid: chm@openerp.com-20120921095037-czl4s3v0do11yhkq
2012-09-21 11:50:37 +02:00
Thibault Delavallée fa27dde6c9 [MERGE] Merged with addons/trunk.
bzr revid: tde@openerp.com-20120919111000-w3xmyatd6new8ghm
2012-09-19 13:10:00 +02:00
Hardik a41714da56 [IMP]User : Access rights in changed menu name
bzr revid: hsa@tinyerp.com-20120919085103-mmen7f0vzqvmp9bx
2012-09-19 14:21:03 +05:30
Thibault Delavallée 585ec570d2 [MERGE] Merged with addons/trunk.
bzr revid: tde@openerp.com-20120918155905-rkdtkuu559ii0e6p
bzr revid: tde@openerp.com-20120919075051-zjxrbcbltrlp8h4k
2012-09-19 09:50:51 +02:00
Thibault Delavallée 20eee8405a [IMP] mail: vote: cleaned security rights, available for everybody. Will need to be fixed.
bzr revid: tde@openerp.com-20120918122212-vr4h1eo7z9ew02q3
2012-09-18 14:22:12 +02:00
Sanjay Gohel (Open ERP) e6cdcb6b51 [MERGE]merge with trunk addons
bzr revid: sgo@tinyerp.com-20120917065740-w9a3xhe632368t2n
2012-09-17 12:27:40 +05:30
Atul Patel (OpenERP) cb828c535f [MERGE]: Merged with lp:openobject-addons
bzr revid: atp@tinyerp.com-20120917045117-hisv0yrfri1xj0bp
2012-09-17 10:21:17 +05:30
Fabien Pinckaers 5000fffb1e [MERGE] merging notes + small cleaning
bzr revid: fp@openerp.com-20120916171015-e0n1lq2a5c10a0nb
2012-09-16 19:10:15 +02:00
Thibault Delavallée 55ec1211c0 [FIX] mail: security: added read access on notifications.
bzr revid: tde@openerp.com-20120914161657-bst7gz4d3er1i2rl
2012-09-14 18:16:57 +02:00
Thibault Delavallée fa5d90e46a [IMP] mail: security: added all access for system group on mail.notification and mail.followers.
bzr revid: tde@openerp.com-20120914141922-it1c4df7k72y8vsq
2012-09-14 16:19:22 +02:00
Thibault Delavallée 40215cd64a [REM] mail: removed unnecessary group and category for mail_manager.
bzr revid: tde@openerp.com-20120914141849-i10vo6zjhclvgpu9
2012-09-14 16:18:49 +02:00
Thibault Delavallée 9a9a56fa49 [WIP] [FIX] mail: fixing access rights: second turn of update.
bzr revid: tde@openerp.com-20120914115107-mtgu8soy3ck5xgir
2012-09-14 13:51:07 +02:00
Thibault Delavallée b1122deb38 [IMP] mail: added _search override on mail_message, to filter the results of a search according to our custom rules. Added some tests.
bzr revid: tde@openerp.com-20121024141806-8iayf7cz2ndxyz2l
2012-10-24 16:18:06 +02:00
Thibault Delavallée fbb80f4ba6 [REVIEW] mail: some code cleanup before merging.
mail.message: fixed to_read condition
mail.message: cleaned message_read code
mail.thread: fixed mega security hole, giving superuser rights when creating objects in mail.thread

bzr revid: tde@openerp.com-20121019095919-xa95j10f22va6djm
2012-10-19 11:59:19 +02:00
Christophe Matthieu 576d664f88 [IMP] note: stage by user, group by stage, access rules
bzr revid: chm@openerp.com-20120913171938-0zmtm2ds5mjdgttj
2012-09-13 19:19:38 +02:00
Thibault Delavallée f6ed42db86 [WIP] [FIX] mail: fixing access rights + related tests. WIP, already fixed mail.group and mail.alias, not readable by anonymous not-employee users.
bzr revid: tde@openerp.com-20120913170500-um93rzw0nq6njl39
2012-09-13 19:05:00 +02:00
Thibault Delavallée 5451ff85f9 [FIX] mail_mail: added security rules for mail.mail, to allow users to send emails.
This fixes notably the crash when Demo User tries to send
a quotation by email.

bzr revid: tde@openerp.com-20120913113931-x31vkhihikfdn4bc
2012-09-13 13:39:31 +02:00
Twinkle Christian (OpenERP) e5a76cd41f [IMP]Remove server warning
bzr revid: tch@tinyerp.com-20120907120638-0zeks1ildb1vy8w4
2012-09-07 17:36:38 +05:30
Sanjay Gohel (Open ERP) 1338046cf0 [IMP]added access to mail_message_subtype
bzr revid: sgo@tinyerp.com-20120827052933-6ajhaete5vuzqhiv
2012-08-27 10:59:33 +05:30
Atul Patel (OpenERP) 22a810507c [MERGE]: Merged with lp:openobject-addons
bzr revid: atp@tinyerp.com-20120816052021-igdj7knaimwg9x7z
2012-08-16 10:50:21 +05:30
Thibault Delavallée 370839860b [FIX] mail.group security: member_ids -> message_follower_ids.
bzr revid: tde@openerp.com-20120816000833-ld4cjhyvs8lc1ta4
2012-08-16 02:08:33 +02:00
Thibault Delavallée 0eccca51d5 [MERGE] Merged with addons/trunk.
bzr revid: tde@openerp.com-20120814114638-pkj3d70sg9mr2hkv
2012-08-14 13:46:38 +02:00
Fabien Pinckaers 85ca542ad0 [IMP] mail groups improvements: security
bzr revid: fp@openerp.com-20120814112204-hwamufqqz4qj9ptb
2012-08-14 13:22:04 +02:00
Fabien Pinckaers 29eb174ce5 [ADD] mail: mail groups
extract groups and add new features to them?

bzr revid: fp@tinyerp.com-20120814065136-nlwh14rwbgj57tqx
2012-08-14 08:51:36 +02:00
Thibault Delavallée a52b57acf4 [REF] Still refactoring of names: propagated to security files.
bzr revid: tde@openerp.com-20120813193841-yavky2odabj5li70
2012-08-13 21:38:41 +02:00
Atul Patel (OpenERP) c92422b2ac [ADD]: Add vote system in openchatter
bzr revid: atp@tinyerp.com-20120809095341-xn70i8beof20b07h
2012-08-09 15:23:41 +05:30
Olivier Dony f0873dcb32 [MERGE] Sync with trunk - bunch of conflicts resolved
bzr revid: odo@openerp.com-20120803142450-97z551yam1js822h
2012-08-03 16:24:50 +02:00
Thibault Delavallée 01be904ead [REM] mail: still removing references to subscription hide mechanism.
bzr revid: tde@openerp.com-20120717113221-2i1wfwjeyeckss41
2012-07-17 13:32:21 +02:00
Alexis de Lattre 5101771cd9 Harmonize the noupdate flag on security XML files :
- ir.rule objects are noupdate="1"
- all other objects are noupdate="0"

bzr revid: alexis@via.ecp.fr-20120713170838-pjsysliyt6twazrc
2012-07-13 19:08:38 +02:00