diff options
| author | Nans Lefebvre <len@odoo.com> | 2019-07-09 07:15:23 +0000 |
|---|---|---|
| committer | Nans Lefebvre <len@odoo.com> | 2019-07-09 10:34:46 +0000 |
| commit | a3e504eff521844d36dd931a3ed22f8d86b95153 (patch) | |
| tree | a82644ed11bb207938b61a7b3c1bf0b1bd179d43 /addons/pos_cache/static/src/js/pos_cache.js | |
| parent | 674ee035ca954a57341cbaa951d2f6f31b5f8fe2 (diff) | |
[FIX] sale_timesheet: let employees officers/project users access private tasks
Have a user U that is Project User, Timesheets User, Employeed Officer.
Give him access to a private task T (by adding U as a follower of T)
on private project P.
Because of Employeed Officer rights, view_task_form2_inherited is rendered.
This shows field is_project_map_empty, which computation depends on project_id.
If U does not have access to P, then this triggers an access error, so the Task
cannot be displayed.
It is in general a legitimate configuration to allow U to interact with T
without being given full access to P, since it works in all cases but the rights
described above.
Since the computation of is_project_map_empty is the only blocking point,
we put it in sudo.
opw 2031124
closes odoo/odoo#34676
Signed-off-by: Nans Lefebvre (len) <len@odoo.com>
Diffstat (limited to 'addons/pos_cache/static/src/js/pos_cache.js')
0 files changed, 0 insertions, 0 deletions
