diff options
| author | Xavier Morel <xmo@odoo.com> | 2020-06-10 13:50:48 +0000 |
|---|---|---|
| committer | Xavier Morel <xmo@odoo.com> | 2020-06-16 06:04:48 +0000 |
| commit | add22ec8ef11f5ce6f8260c5fd791ca99a38ff43 (patch) | |
| tree | 344783945dcea3a4715614e15ba015087756bdac | |
| parent | 0e1ce4c660aacb546b406c6e67a18313c552ca78 (diff) | |
[FIX] base: change password wizard should be restricted to ERP managers
ACLs on the wizard lines should match that of the wizard, otherwise
ERP managers can see the action but get an error as soon as they open
the wizard.
Since ERP managers have write access on arbitrary users, that's
probably the right group to use.
Task 2275134
closes odoo/odoo#53007
X-original-commit: 657d44f08c402bc0547b7cbb01c2d447e641d062
Signed-off-by: Xavier Morel (xmo) <xmo@odoo.com>
| -rw-r--r-- | odoo/addons/base/security/ir.model.access.csv | 2 |
1 files changed, 1 insertions, 1 deletions
diff --git a/odoo/addons/base/security/ir.model.access.csv b/odoo/addons/base/security/ir.model.access.csv index 0a0abc9d090..3c6d64ea09d 100644 --- a/odoo/addons/base/security/ir.model.access.csv +++ b/odoo/addons/base/security/ir.model.access.csv @@ -109,7 +109,7 @@ "access_res_config_installer","access.res.config.installer","model_res_config_installer","base.group_system",1,1,1,0 "access_res_config_settings","access.res.config.settings","model_res_config_settings","base.group_system",1,1,1,0 "access_change_password_wizard","access.change.password.wizard","model_change_password_wizard","base.group_erp_manager",1,1,1,0 -"access_change_password_user","access.change.password.user","model_change_password_user","base.group_system",1,1,1,0 +"access_change_password_user","access.change.password.user","model_change_password_user","base.group_erp_manager",1,1,1,0 "access_base_module_update","access.base.module.update","model_base_module_update","base.group_system",1,1,1,0 "access_base_language_install","access.base.language.install","model_base_language_install","base.group_system",1,1,1,0 "access_base_language_import","access.base.language.import","model_base_language_import","base.group_system",1,1,1,0 |