diff options
| author | Yannick Tivisse <yti@odoo.com> | 2016-08-22 16:58:06 +0200 |
|---|---|---|
| committer | Yannick Tivisse <yti@odoo.com> | 2016-08-23 11:14:37 +0200 |
| commit | 92a60f1340f0122e31807fef1ca80ec196b9c7d5 (patch) | |
| tree | 478e8fd6f51f9180df2388fcb48b10e99aa9d8c1 | |
| parent | 78c215a923129c28cf733cecb35503c86ae6fbe9 (diff) | |
[IMP] base: The default_user doesn't have 'Settings' access right
It's ok to give the 'Manager' rights to new users for small companies or new saas instances so that newly created users can direcly use all the features.
For bigger companies, someone is creating the new users and give the rights specifically according to their access rights in the company departments.
But granting administrator access by default is definitely questionable. The main admin is bound to make mistakes and fail to notice or remember that they have given admin access to new users. Making the system insecure by default is not a good trade-off for "simplifying the system for small businesses". And this will not be expected by anyone.
| -rw-r--r-- | openerp/addons/base/security/base_security.xml | 4 |
1 files changed, 0 insertions, 4 deletions
diff --git a/openerp/addons/base/security/base_security.xml b/openerp/addons/base/security/base_security.xml index 721d535f59b..6bbc547c918 100644 --- a/openerp/addons/base/security/base_security.xml +++ b/openerp/addons/base/security/base_security.xml @@ -17,10 +17,6 @@ <field name="users" eval="[(4, ref('base.user_root'))]"/> </record> - <record id="base.default_user" model="res.users"> - <field name="groups_id" eval="[(4,ref('base.group_system'))]"/> - </record> - <record model="res.groups" id="group_user"> <field name="name">Employee</field> </record> |