diff options
| author | Victor Feyens <vfe@odoo.com> | 2020-03-16 09:51:53 +0100 |
|---|---|---|
| committer | Martin Trigaux <mat@odoo.com> | 2020-03-27 09:55:33 +0100 |
| commit | 066214b36b75dd9c95959798716df5c44ed012b1 (patch) | |
| tree | f06f2284986691335f7c20e22cd2899e80d40757 /addons/hr_expense/security | |
| parent | 9ddfc18b4132daa395c4fa1591b1c001b8fb2628 (diff) | |
[IMP] *: remove duplicate ACL targeting same group/model.
In the same xml file (meaning one of the two rule is useless, or wrong
if giving less rights than the other).
Removing rules that had no impact will ease the understanding of
security problems, by reducing the number of interconnecting rules.
Diffstat (limited to 'addons/hr_expense/security')
| -rw-r--r-- | addons/hr_expense/security/ir.model.access.csv | 6 |
1 files changed, 2 insertions, 4 deletions
diff --git a/addons/hr_expense/security/ir.model.access.csv b/addons/hr_expense/security/ir.model.access.csv index 8db618224fd..fa7bbe9f799 100644 --- a/addons/hr_expense/security/ir.model.access.csv +++ b/addons/hr_expense/security/ir.model.access.csv @@ -10,10 +10,8 @@ access_product_template_hr_expense_user,product.template.hr.expense.user,product access_uom_uom_hr_expense_user,uom.uom.hr.expense.user,uom.model_uom_uom,hr_expense.group_hr_expense_team_approver,1,1,1,1
access_account_journal_user,account.journal.user,account.model_account_journal,hr_expense.group_hr_expense_team_approver,1,1,1,1
access_account_journal_employee,account.journal.employee,account.model_account_journal,base.group_user,1,0,0,0
-access_account_invoice_user,account.invoice.user,account.model_account_move,hr_expense.group_hr_expense_team_approver,1,1,1,1
-access_account_invoice_line_user,account.invoice.line.user,account.model_account_move_line,hr_expense.group_hr_expense_team_approver,1,1,1,1
-access_account_move_user,account.move.user,account.model_account_move,hr_expense.group_hr_expense_team_approver,1,0,0,0
-access_account_move_line_user,account.move.line.user,account.model_account_move_line,hr_expense.group_hr_expense_team_approver,1,0,0,0
+access_account_move_user,account.move.hr.expense.approver,account.model_account_move,hr_expense.group_hr_expense_team_approver,1,1,1,1
+access_account_move_line_user,account.move.line.hr.expense.approver,account.model_account_move_line,hr_expense.group_hr_expense_team_approver,1,1,1,1
access_account_analytic_line_user,account.analytic.line.user,account.model_account_analytic_line,hr_expense.group_hr_expense_team_approver,1,1,1,1
access_mail_activity_type_expense_user,mail.activity.type.expense.user,mail.model_mail_activity_type,hr_expense.group_hr_expense_manager,1,1,1,1
access_hr_expense_refuse_wizard,access.hr.expense.refuse.wizard,model_hr_expense_refuse_wizard,hr_expense.group_hr_expense_team_approver,1,1,1,0
|