Fix access:

* Allow admin user to create requests and rely on the overloading of create .
* Use same acces for cron user.
* Disallow other user to write on purchase request.
This commit is contained in:
Bertrand Chenal committed 2008-10-14 19:28:41 +02:00
1 parent d29836cfa0
commit bed06b6fe5
1 file changed
+7 -11
+7 -11
View File
@@ -156,22 +156,14 @@
<record model="ir.model.access" id="access_purchase_request">
<field name="model" search="[('model', '=', 'purchase.request')]"/>
<field name="perm_read" eval="True"/>
<field name="perm_write" eval="True"/>
<field name="perm_create" eval="False"/>
<field name="perm_delete" eval="True"/>
</record>
<record model="ir.model.access" id="access_purchase_request_admin">
<field name="model" search="[('model', '=', 'purchase.request')]"/>
<field name="group" ref="purchase.group_purchase"/>
<field name="perm_read" eval="True"/>
<field name="perm_write" eval="True"/>
<field name="perm_write" eval="False"/>
<field name="perm_create" eval="False"/>
<field name="perm_delete" eval="True"/>
</record>
<record model="res.group" id="group_purchase_request">
<field name="name">Purchase Request Cron</field>
<field name="name">Purchase Request</field>
</record>
<record model="ir.model.access" id="access_purchase_request_cron">
<record model="ir.model.access" id="access_purchase_request_admin">
<field name="model" search="[('model', '=', 'purchase.request')]"/>
<field name="group" ref="group_purchase_request"/>
<field name="perm_read" eval="True"/>
@@ -180,6 +172,10 @@
<field name="perm_delete" eval="True"/>
</record>
<record model="res.user" id="res.user_admin">
<field name="groups" eval="[('add', ref('group_purchase_request'))]"/>
</record>
<record model="res.user" id="user_generate_request">
<field name="login">user_cron_purchase_request</field>
<field name="name">Cron Purchase Request</field>