diff options
| author | Kevin Baptiste <kba@odoo.com> | 2019-07-02 07:41:01 +0000 |
|---|---|---|
| committer | Kevin Baptiste <kba@odoo.com> | 2019-07-02 08:12:11 +0000 |
| commit | b27c145cf2f95e00d7155db99a08f631e1a21bc4 (patch) | |
| tree | 0424c0e23fcfb2a6e18a10a55a15db1f5f17ca85 | |
| parent | 1f5e89b176080dcf3434eb823a306552d53b261e (diff) | |
[IMP] website_hr: remove read ACL from portal user
The read permission on `hr.employee` has been removed from the public
and portal users; replaced with read access on the public employee
profile.
closes odoo/odoo#34508
Signed-off-by: Yannick Tivisse (yti) <yti@odoo.com>
| -rw-r--r-- | addons/website_hr/security/hr_employee_security.xml | 4 | ||||
| -rw-r--r-- | addons/website_hr/security/ir.model.access.csv | 4 |
2 files changed, 4 insertions, 4 deletions
diff --git a/addons/website_hr/security/hr_employee_security.xml b/addons/website_hr/security/hr_employee_security.xml index a86b14310a8..8cdbaebb846 100644 --- a/addons/website_hr/security/hr_employee_security.xml +++ b/addons/website_hr/security/hr_employee_security.xml @@ -2,7 +2,7 @@ <odoo> <record id="hr_employee_public" model="ir.rule"> <field name="name">hr_employee: Public</field> - <field name="model_id" ref="hr.model_hr_employee"/> + <field name="model_id" ref="hr.model_hr_employee_public"/> <field name="domain_force">[('website_published', '=', True)]</field> <field name="groups" eval="[(4, ref('base.group_public'))]"/> <field name="perm_read" eval="True"/> @@ -12,7 +12,7 @@ </record> <record id="hr_employee_portal" model="ir.rule"> <field name="name">hr_employee: Portal</field> - <field name="model_id" ref="hr.model_hr_employee"/> + <field name="model_id" ref="hr.model_hr_employee_public"/> <field name="domain_force">[('website_published', '=', True)]</field> <field name="groups" eval="[(4, ref('base.group_portal'))]"/> <field name="perm_read" eval="True"/> diff --git a/addons/website_hr/security/ir.model.access.csv b/addons/website_hr/security/ir.model.access.csv index 53be505e42e..787e73ce178 100644 --- a/addons/website_hr/security/ir.model.access.csv +++ b/addons/website_hr/security/ir.model.access.csv @@ -1,5 +1,5 @@ id,name,model_id:id,group_id:id,perm_read,perm_write,perm_create,perm_unlink -access_hr_employee_public,hr.employee.public,hr.model_hr_employee,base.group_public,1,0,0,0 -access_hr_employee_portal,hr.employee.portal,hr.model_hr_employee,base.group_portal,1,0,0,0 +access_hr_employee_public,hr.employee.public,hr.model_hr_employee_public,base.group_public,1,0,0,0 +access_hr_employee_portal,hr.employee.portal,hr.model_hr_employee_public,base.group_portal,1,0,0,0 access_resource_public,resource.resource.public,resource.model_resource_resource,base.group_public,1,0,0,0 access_resource_portal,resource.resource.portal,resource.model_resource_resource,base.group_portal,1,0,0,0 |