diff options
| author | Xavier Morel <xmo@openerp.com> | 2014-06-17 12:01:52 +0200 |
|---|---|---|
| committer | Xavier Morel <xmo@openerp.com> | 2014-06-17 12:01:52 +0200 |
| commit | 79e10200d5cc78d39a139f63eb2a69309878ab04 (patch) | |
| tree | 3e9e640a14532d4e0af4abfc69d26a42451055ef /addons/analytic_user_function/analytic_user_function_view.xml | |
| parent | 63a6ba92e2c0bade494ac05910210046e695b787 (diff) | |
[IMP] prevent edition of page if groups which current user doesn't have
If the current view uses @groups attributes (possibly in called templates),
the corresponding elements are rendered to a void (empty string in qweb). If
said user can edit the page, does so and saves a view section in which there's
a @groups to which he has no access, the element[@groups] is completely
removed from the template once saved, losing it.
If QWeb encounters an @groups to which the current user has no right during
rendering, have it request a no-RTE page, so the user can not RTE-edit the
page (or drop snippets in it).
Diffstat (limited to 'addons/analytic_user_function/analytic_user_function_view.xml')
0 files changed, 0 insertions, 0 deletions
