diff options
| author | Thibault Delavallée <tde@openerp.com> | 2012-03-29 18:34:54 +0200 |
|---|---|---|
| committer | Thibault Delavallée <tde@openerp.com> | 2012-03-29 18:34:54 +0200 |
| commit | 442245177784be90454f7f827c803f3899620869 (patch) | |
| tree | 1ddbdee5ef24f18c2145efc4f939d413c0e0495f /addons/mail/security/mail_security.xml | |
| parent | 90c1ff994f5664aa568c5333a562854ab1438812 (diff) | |
[IMP] mail.thread: updated security rules
bzr revid: tde@openerp.com-20120329163454-pbk5ivhgzyamd3jw
Diffstat (limited to 'addons/mail/security/mail_security.xml')
| -rw-r--r-- | addons/mail/security/mail_security.xml | 11 |
1 files changed, 7 insertions, 4 deletions
diff --git a/addons/mail/security/mail_security.xml b/addons/mail/security/mail_security.xml index 09db389573d..88a7b060be4 100644 --- a/addons/mail/security/mail_security.xml +++ b/addons/mail/security/mail_security.xml @@ -20,12 +20,13 @@ </record> <!-- RULES --> +<!-- <record id="message_rule_personal_ud" model="ir.rule"> <field name="name">Update/Delete personal messages</field> <field name="model_id" ref="model_mail_message"/> <field name="domain_force">[('user_id','=',user.id)]</field> <field name="perm_read" eval="False"/> - <field name="perm_write" eval="False"/> + <field name="perm_create" eval="False"/> </record> <record id="message_rule_all" model="ir.rule"> <field name="name">All messages</field> @@ -33,7 +34,9 @@ <field name="domain_force">[(1,'=',1)]</field> <field name="groups" eval="[(4, ref('group_mail_manager'))]"/> </record> +--> +<!-- <record id="notification_rule_personal" model="ir.rule"> <field name="name">Personal Notifications</field> <field name="model_id" ref="model_mail_notification"/> @@ -47,14 +50,14 @@ <field name="domain_force">[(1,'=',1)]</field> <field name="groups" eval="[(4, ref('group_mail_manager'))]"/> </record> +--> <record id="group_rule_public_and_joined" model="ir.rule"> <field name="name">Mail.group: access only public and joined groups</field> <field name="model_id" ref="model_mail_group"/> -<!-- - <field name="domain_force">['|', ('public', '=', True), ('joined', '=', True)]</field> ---> <field name="domain_force">['|', ('public', '=', True), ('member_ids', 'in', user.id)]</field> + <field name="perm_create" eval="False"/> + <field name="perm_unlink" eval="False"/> </record> <record id="group_rule_delete_mygroup" model="ir.rule"> <field name="name">Mail.group: delete my groups only</field> |