0b2ee16885
[FIX] project: access rights and followers
...
For privacy_visibility 'followers' or 'portal', the user should be follower of the project (not the task).
Remove public access to portal task
Fixes #2372
If no project on the task (or other rule), an employee (not a portal) can access if is follower of the task.
Follower rule is not enough as a user creating a rule will subscribe to the rule but to subscribe to record, the user should have access to it in the first place.
To make sure the snake does not bit its tail, fallback to give access on task where the user is reponsible (user_id = user.id).
Fixes #139
Adapted the tests to the new behaviour (removed not relevant and added some on creation)
2014-11-18 18:52:46 +01:00
e541755ae4
[MOV] portal: moved portal group into base.
...
Updated security rules. Basic res_partner rules are moved into base. Added rule with website_published.
bzr revid: tde@openerp.com-20131008113545-gpqydx0b199lcqpy
2013-10-08 13:35:45 +02:00
6a9bbba17e
[IMP] remove portal_anonymous, create group_public in server and public user in website
...
bzr revid: chm@openerp.com-20130726090445-4mmd1xlx5uwd6vmx
2013-07-26 11:04:45 +02:00
8c31d9772a
[FIX] project, task, issue, portal: fixed access rules for employees/portal users + added an help on privacy_visibility.
...
bzr revid: tde@openerp.com-20130426130259-35j0v7lg7unxhzzp
2013-04-26 15:02:59 +02:00
b6223ecb7f
[FIX] [ADD] project, project_issue, portal_project, portal_project_issue: improved privacy_visibility selection of project.project; improved access rules; added tests to enforce them.
...
bzr revid: tde@openerp.com-20130412143719-ztjo06r900l024dm
2013-04-12 16:37:19 +02:00
37e5b882ef
[FIX] views, access rights, ...
...
bzr revid: vta@openerp.com-20121127143713-03y7zpnj0118ikq5
2012-11-27 15:37:13 +01:00
8374e20b10
[FIX] Fixed events, mail, and project (also related access rights).
...
bzr revid: vta@openerp.com-20121122120554-ja2c2fmhxqxdyjj5
2012-11-22 13:05:54 +01:00
a8a3b92c55
[IMP] rules
...
bzr revid: fp@tinyerp.com-20121114120945-in2c3eix7lqoxr2u
2012-11-14 13:09:45 +01:00
19e722424e
[FIX]: Fix message_followers_ids problem
...
bzr revid: atp@tinyerp.com-20121018091446-dwskge1p8bzbi9f3
2012-10-18 14:44:46 +05:30
bcbae5e277
[MERGE] Merged with addons/trunk, with lots of conflicts to solve...
...
bzr revid: tde@openerp.com-20120920074850-7p7or1ze8555fya5
2012-09-20 09:48:50 +02:00
5720ae3a90
[IMP] portal: rename xml id 'portal.group_portal_member' to 'portal.group_portal'
...
bzr revid: rco@openerp.com-20120914134251-answ8jr65vfeeiz3
2012-09-14 15:42:51 +02:00
e66cd01467
[IMP] portal: first batch of ir rules
...
bzr revid: abo@openerp.com-20120913155810-3grgq7xht1h981m5
2012-09-13 17:58:10 +02:00
5d53bf5982
[IMP] properly name each portal record rule
...
bzr revid: abo@openerp.com-20120727155039-i1scp2ajd1g08xmn
2012-07-27 17:50:39 +02:00
652ff6a97f
[FIX] remove a test menu; add rights for portal members on the project_category model
...
bzr revid: abo@openerp.com-20120716121440-cfjp60f4l4w05z63
2012-07-16 14:14:40 +02:00
8072858555
[IMP] split and rename the 'portal_issue' bridge module into 'portal_project' and 'portal_project_issue'
...
this is more consistent with the way we usually name bridge modules
bzr revid: abo@openerp.com-20120605124118-q8a9fvs4bio0zn4n
2012-06-05 14:41:18 +02:00
Martin Trigaux
Thibault Delavallée
Christophe Matthieu
vta vta@openerp.com
Fabien Pinckaers
Atul Patel (OpenERP)
Raphael Collet
Antonin Bourguignon