summaryrefslogtreecommitdiff
path: root/addons/web/static/src/js/views/basic
diff options
context:
space:
mode:
authorNans Lefebvre <len@odoo.com>2019-07-09 07:15:23 +0000
committerNans Lefebvre <len@odoo.com>2019-07-09 10:34:46 +0000
commita3e504eff521844d36dd931a3ed22f8d86b95153 (patch)
treea82644ed11bb207938b61a7b3c1bf0b1bd179d43 /addons/web/static/src/js/views/basic
parent674ee035ca954a57341cbaa951d2f6f31b5f8fe2 (diff)
[FIX] sale_timesheet: let employees officers/project users access private tasks
Have a user U that is Project User, Timesheets User, Employeed Officer. Give him access to a private task T (by adding U as a follower of T) on private project P. Because of Employeed Officer rights, view_task_form2_inherited is rendered. This shows field is_project_map_empty, which computation depends on project_id. If U does not have access to P, then this triggers an access error, so the Task cannot be displayed. It is in general a legitimate configuration to allow U to interact with T without being given full access to P, since it works in all cases but the rights described above. Since the computation of is_project_map_empty is the only blocking point, we put it in sudo. opw 2031124 closes odoo/odoo#34676 Signed-off-by: Nans Lefebvre (len) <len@odoo.com>
Diffstat (limited to 'addons/web/static/src/js/views/basic')
0 files changed, 0 insertions, 0 deletions