diff options
| author | Fabien Pinckaers <fp@openerp.com> | 2012-08-14 13:22:04 +0200 |
|---|---|---|
| committer | Fabien Pinckaers <fp@openerp.com> | 2012-08-14 13:22:04 +0200 |
| commit | 85ca542ad09a8a9890db63e421a7509b681d36d6 (patch) | |
| tree | 27bfc3f64b87f7d11350b46b468dcc04d24c79d3 /addons/mail/security/mail_security.xml | |
| parent | 6f7b789f7a336a4f398a9216108304def11da697 (diff) | |
[IMP] mail groups improvements: security
bzr revid: fp@openerp.com-20120814112204-hwamufqqz4qj9ptb
Diffstat (limited to 'addons/mail/security/mail_security.xml')
| -rw-r--r-- | addons/mail/security/mail_security.xml | 12 |
1 files changed, 2 insertions, 10 deletions
diff --git a/addons/mail/security/mail_security.xml b/addons/mail/security/mail_security.xml index 50b3f8e2c78..e73279b1ad7 100644 --- a/addons/mail/security/mail_security.xml +++ b/addons/mail/security/mail_security.xml @@ -1,6 +1,6 @@ <?xml version="1.0" encoding="utf-8"?> <openerp> - <data noupdate="1"> + <data> <!-- CATEGORY --> <record model="ir.module.category" id="module_category_social"> @@ -21,15 +21,7 @@ <field name="name">Mail.group: access only public and joined groups</field> <field name="model_id" ref="model_mail_group"/> <!-- This rule has to be improved for employee only groups --> - <field name="domain_force">['|', ('public', '=', 'public'), ('member_ids', 'in', user.id)]</field> - <field name="perm_create" eval="False"/> - <field name="perm_write" eval="False"/> - <field name="perm_unlink" eval="False"/> - </record> - <record id="group_rule_delete_mygroup" model="ir.rule"> - <field name="name">Mail.group: delete my groups only</field> - <field name="model_id" ref="model_mail_group"/> - <field name="domain_force">[('responsible_id', '=', user.id)]</field> + <field name="domain_force">['|', '|', ('public', '=', 'public'), ('member_ids', 'in', [user.id]), '&', ('public','=','groups'), ('group_public_id','in', [x.id for x in user.groups_id])]</field> </record> </data> |