diff options
| author | jem-odoo <jem@openerp.com> | 2019-05-24 14:28:09 +0000 |
|---|---|---|
| committer | jem-odoo <jem@openerp.com> | 2019-08-21 11:22:58 +0000 |
| commit | 00ac6c60f6bc2d83ca614db043b1e655fd892b5e (patch) | |
| tree | 17f38a34c08e6caf316e327cead02d92e652e1de /addons/project/security | |
| parent | ba922611481b1f46a1fdf9c689cd6abbb4dbb0a6 (diff) | |
[FIX] project: portal user can not read AA
For historical reason (problably the inheritS between project and AA, removed in 12.0), portal
user can read Analytic Account. This makes no sense, as it is a purely internal resource
for companies. Removing the access rights don't change anything for portal user and make
those data secure.
Task-1911581
Diffstat (limited to 'addons/project/security')
| -rw-r--r-- | addons/project/security/ir.model.access.csv | 3 |
1 files changed, 1 insertions, 2 deletions
diff --git a/addons/project/security/ir.model.access.csv b/addons/project/security/ir.model.access.csv index f7bf080c5cf..ccc5238f501 100644 --- a/addons/project/security/ir.model.access.csv +++ b/addons/project/security/ir.model.access.csv @@ -22,5 +22,4 @@ access_mail_alias,mail.alias,mail.model_mail_alias,project.group_project_manager access_mail_activity_type_project_manager,mail.activity.type.project.manager,mail.model_mail_activity_type,project.group_project_manager,1,1,1,1 access_account_analytic_account_user,account.analytic.account,analytic.model_account_analytic_account,project.group_project_user,1,0,0,0 access_account_analytic_account_manager,account.analytic.account,analytic.model_account_analytic_account,project.group_project_manager,1,1,1,1 -access_account_analytic_account_portal,account_analytic_account,analytic.model_account_analytic_account,base.group_portal,1,0,0,0 -access_account_analytic_line_project,account.analytic.line project,analytic.model_account_analytic_line,project.group_project_manager,1,1,1,1
\ No newline at end of file +access_account_analytic_line_project,account.analytic.line project,analytic.model_account_analytic_line,project.group_project_manager,1,1,1,1 |