diff options
| author | qsm-odoo <qsm@odoo.com> | 2016-09-26 13:27:48 +0200 |
|---|---|---|
| committer | qsm-odoo <qsm@odoo.com> | 2016-09-28 15:56:04 +0200 |
| commit | d04a42022b2338d529d245080fa506f72cdc8daa (patch) | |
| tree | 714615900bdc102fc5a68dd4ba9712e45370ce1b /addons/website/data/website_data.xml | |
| parent | 7cbb2e6ed340a3f0c6d03799117da2dd5eaaca55 (diff) | |
[REF] website, *: review website access rights
* event, website_event, website_forum,
* website_hr_recruitment, website_sale
Website access rights were buggy. The editor assets and website editor
assets have to be loaded together to work so the previous behavior
which only loaded one with the restricted access right was not right.
Also, people which had the "Manager" access right for model like event
or job only got access to creation and edition of those objects if they
had the full access to website access rights.
Now the website module creates the two same groups :
* group_website_publisher: load all editor assets, give access to
page creation for model the user has access (event, job, ...) and
edition of those pages
* group_website_designer: implies the first one and give access in
creation and edition of all pages + access of all website menus
The manager access rights for event, product, jobs, etc now implies
the group_website_publisher group for the user (so that the manager
have the editor assets and editor ui).
Note: some python codes use the group_website_publisher for no right
reason, this has to be adapted.
Diffstat (limited to 'addons/website/data/website_data.xml')
| -rw-r--r-- | addons/website/data/website_data.xml | 17 |
1 files changed, 0 insertions, 17 deletions
diff --git a/addons/website/data/website_data.xml b/addons/website/data/website_data.xml index 722a1d17ca9..eaa8a006687 100644 --- a/addons/website/data/website_data.xml +++ b/addons/website/data/website_data.xml @@ -30,23 +30,6 @@ <field name="website_id" ref="default_website"/> </record> - <record id="group_website_publisher" model="res.groups"> - <field name="name">Editor</field> - <field name="category_id" ref="base.module_category_website"/> - </record> - - <!-- Access rules to edit ir.ui.view with qWeb type --> - <record id="group_website_designer" model="res.groups"> - <field name="name">Editor and Designer</field> - <field name="users" eval="[(4, ref('base.user_root'))]"/> - <field name="implied_ids" eval="[(4, ref('group_website_publisher'))]"/> - <field name="category_id" ref="base.module_category_website"/> - </record> - - <record id="base.default_user" model="res.users"> - <field name="groups_id" eval="[(4,ref('group_website_designer'))]"/> - </record> - <record id="action_module_website" model="ir.actions.act_window"> <field name="name">Website Apps</field> <field name="res_model">ir.module.module</field> |