diff options
| author | Robot Odoo <xmo+roboto@odoo.com> | 2018-12-12 18:35:02 +0100 |
|---|---|---|
| committer | GitHub <noreply@github.com> | 2018-12-12 18:35:02 +0100 |
| commit | ff0c71f373864cf80b79da23e7386ad45b20cd4f (patch) | |
| tree | 79a6c0d4352642dfeb9f6e478968f9d80f16fad2 /addons/mail/static/src/xml/activity.xml | |
| parent | 13eb9b9c5b77cb42616f91dc4db48e0a6aab014e (diff) | |
| parent | abc212f59a51d7b1de99201d5bb07c871021e766 (diff) | |
[MERGE][REF] mail: clean access right check on activities
This merge improves code of access rights checks when creating or updating
activities. Several points triggers this commit
* we would like to use _filter_access_rules and override it on activities
model in order to be more standard;
* we would like to get rid of sudo used in various CRUD overrides as using
standard ORM method allows to correctly use current user;
* we would like to get rid of create_user_id field once we can keep the
current user as create_uid;
Access rights are a bit updated. They are now the following
* you can create activities for documents like posting messages (using
_mail_post_access attribute; if not defined, write access on document
is required);
* you can read activities for documents you can read;
* you can write and unlink activities either following the defined access
rule (created OR assigned), and otherwise like posting messages (
using _mail_post_access attribute; if not defined, write access on
document is required);
In this merge we also hide edit / mark as done / cancel buttons for
activities the current user cannot modify.
Finally create_user_id field related to activities is replaced by create_uid
everywhere.
This commit is linked to task ID 1856417.
closes odoo/odoo#27619
Diffstat (limited to 'addons/mail/static/src/xml/activity.xml')
| -rw-r--r-- | addons/mail/static/src/xml/activity.xml | 10 |
1 files changed, 5 insertions, 5 deletions
diff --git a/addons/mail/static/src/xml/activity.xml b/addons/mail/static/src/xml/activity.xml index cb7f8a5ae28..a327806883c 100644 --- a/addons/mail/static/src/xml/activity.xml +++ b/addons/mail/static/src/xml/activity.xml @@ -42,12 +42,12 @@ <dd class="mb8"> <t t-esc="activity.create_date.format(datetimeFormat)"/> by - <img t-attf-src="/web/image#{activity.create_user_id[0] >= 0 ? ('/res.users/' + activity.create_user_id[0] + '/image_small') : ''}" + <img t-attf-src="/web/image#{activity.create_uid[0] >= 0 ? ('/res.users/' + activity.create_uid[0] + '/image_small') : ''}" height="18" width="18" class="rounded-circle mr4" - t-att-title="activity.create_user_id[1]" - t-att-alt="activity.create_user_id[1]"/> - <b><t t-esc="activity.create_user_id[1]"/></b> + t-att-title="activity.create_uid[1]" + t-att-alt="activity.create_uid[1]"/> + <b><t t-esc="activity.create_uid[1]"/></b> </dd> <dt>Assigned to</dt> <dd class="mb8"> @@ -74,7 +74,7 @@ </t> </div> </t> - <div class="o_thread_message_tools btn-group"> + <div t-if="activity.can_write" class="o_thread_message_tools btn-group"> <span class="o_mark_as_done" data-toggle="popover" t-att-data-activity-id="activity.id" t-att-data-force-next-activity="activity.force_next" t-att-data-previous-activity-type-id="activity.activity_type_id[0]"> <a role="button" href="#" class="btn btn-link btn-success text-muted o_activity_link mr8"> <i class="fa fa-check"/> Mark Done </a> |