Fix access:
* Allow admin user to create requests and rely on the overloading of create . * Use same acces for cron user. * Disallow other user to write on purchase request.
This commit is contained in:
1 parent
d29836cfa0
commit
bed06b6fe5
1 file changed
+7
-11
+7
-11
@@ -156,22 +156,14 @@
|
||||
<record model="ir.model.access" id="access_purchase_request">
|
||||
<field name="model" search="[('model', '=', 'purchase.request')]"/>
|
||||
<field name="perm_read" eval="True"/>
|
||||
<field name="perm_write" eval="True"/>
|
||||
<field name="perm_create" eval="False"/>
|
||||
<field name="perm_delete" eval="True"/>
|
||||
</record>
|
||||
<record model="ir.model.access" id="access_purchase_request_admin">
|
||||
<field name="model" search="[('model', '=', 'purchase.request')]"/>
|
||||
<field name="group" ref="purchase.group_purchase"/>
|
||||
<field name="perm_read" eval="True"/>
|
||||
<field name="perm_write" eval="True"/>
|
||||
<field name="perm_write" eval="False"/>
|
||||
<field name="perm_create" eval="False"/>
|
||||
<field name="perm_delete" eval="True"/>
|
||||
</record>
|
||||
<record model="res.group" id="group_purchase_request">
|
||||
<field name="name">Purchase Request Cron</field>
|
||||
<field name="name">Purchase Request</field>
|
||||
</record>
|
||||
<record model="ir.model.access" id="access_purchase_request_cron">
|
||||
<record model="ir.model.access" id="access_purchase_request_admin">
|
||||
<field name="model" search="[('model', '=', 'purchase.request')]"/>
|
||||
<field name="group" ref="group_purchase_request"/>
|
||||
<field name="perm_read" eval="True"/>
|
||||
@@ -180,6 +172,10 @@
|
||||
<field name="perm_delete" eval="True"/>
|
||||
</record>
|
||||
|
||||
<record model="res.user" id="res.user_admin">
|
||||
<field name="groups" eval="[('add', ref('group_purchase_request'))]"/>
|
||||
</record>
|
||||
|
||||
<record model="res.user" id="user_generate_request">
|
||||
<field name="login">user_cron_purchase_request</field>
|
||||
<field name="name">Cron Purchase Request</field>
|
||||
|
||||
Reference in new issue
Block a user