diff options
| author | Thibault Delavallée <tde@openerp.com> | 2012-12-12 13:55:18 +0100 |
|---|---|---|
| committer | Thibault Delavallée <tde@openerp.com> | 2012-12-12 13:55:18 +0100 |
| commit | 347d0e5b468cf042cb6ea431c367bbbd54bdb39b (patch) | |
| tree | 61a784d734c2f43707cf0ddffc3a91dbe4284d81 /addons/portal/security/ir.model.access.csv | |
| parent | 6f1f3b325d17b057c7cd6aba2d4a1b29c481f4c3 (diff) | |
[IMP] portal removed access rights of portal user on res_partner and derived tables. Updated several accesses to bypass the security issues. Updated portal tests to have a more complete test scenario.
bzr revid: tde@openerp.com-20121212125518-k0s07niojr8a1xtu
Diffstat (limited to 'addons/portal/security/ir.model.access.csv')
| -rw-r--r-- | addons/portal/security/ir.model.access.csv | 8 |
1 files changed, 3 insertions, 5 deletions
diff --git a/addons/portal/security/ir.model.access.csv b/addons/portal/security/ir.model.access.csv index 59ca37e213d..88d50c739a5 100644 --- a/addons/portal/security/ir.model.access.csv +++ b/addons/portal/security/ir.model.access.csv @@ -1,10 +1,8 @@ id,name,model_id:id,group_id:id,perm_read,perm_write,perm_create,perm_unlink -access_mail_message_portal,mail.message.portal,mail.model_mail_message,group_portal,1,0,1,1 +access_mail_message_portal,mail.message.portal,mail.model_mail_message,group_portal,1,1,1,1 +access_mail_mail_portal,mail.mail.portal,mail.model_mail_mail,group_portal,1,1,1,0 access_mail_notification_portal,mail.notification.portal,mail.model_mail_notification,group_portal,1,1,1,0 -access_res_partner,res.partner,base.model_res_partner,portal.group_portal,1,0,0,0 -access_res_partner_address,res.partner_address,base.model_res_partner_address,portal.group_portal,1,0,0,0 -access_res_partner_category,res.partner_category,base.model_res_partner_category,portal.group_portal,1,0,0,0 -access_res_partner_title,res.partner_title,base.model_res_partner_title,portal.group_portal,1,0,0,0 +access_mail_followers_portal,mail.followers.portal,mail.model_mail_followers,group_portal,1,1,0,0 access_acquirer,portal.payment.acquirer,portal.model_portal_payment_acquirer,,1,0,0,0 access_acquirer_all,portal.payment.acquirer,portal.model_portal_payment_acquirer,base.group_system,1,1,1,1 access_ir_attachment_group_portal,ir.attachment group_portal,base.model_ir_attachment,portal.group_portal,1,0,1,0
\ No newline at end of file |