From 5f665459272f10d9f6613a92a6b697ed9d05fd4e Mon Sep 17 00:00:00 2001
From: =?UTF-8?q?C=C3=A9dric=20Krier?= <ced@b2ck.com>
Date: Sat, 30 Jul 2022 11:10:37 +0200
Subject: [PATCH] Skip keyword action window for which user has not read access

issue11589
review419541003
---
 trytond/ir/action.py | 5 +++++
 1 file changed, 5 insertions(+)

diff --git a/trytond/ir/action.py b/trytond/ir/action.py
index a0e22cff4f..22d4d35ac0 100644
--- a/trytond/ir/action.py
+++ b/trytond/ir/action.py
@@ -243,6 +243,7 @@ class ActionKeyword(ModelSQL, ModelView):
         pool = Pool()
         Action = pool.get('ir.action')
         Menu = pool.get('ir.ui.menu')
+        ModelAccess = pool.get('ir.model.access')
         key = (keyword, tuple(value))
         keywords = cls._get_keyword_cache.get(key)
         if keywords is not None:
@@ -273,6 +274,10 @@ class ActionKeyword(ModelSQL, ModelView):
             types[type_].append(action_keyword.action.id)
         for type_, action_ids in types.items():
             for value in Action.get_action_values(type_, action_ids):
+                if (type_ == 'ir.action.act_window'
+                        and not ModelAccess.check(
+                            value['res_model'], raise_exception=False)):
+                    continue
                 value['keyword'] = keyword
                 keywords.append(value)
         if keyword == 'tree_open' and model == Menu.__name__: