diff options
| author | Krupal Oza <koz@odoo.com> | 2020-08-26 06:53:28 +0000 |
|---|---|---|
| committer | Thibault Delavallée <tde@odoo.com> | 2020-08-27 11:09:08 +0000 |
| commit | e8be4d9ee35f830fff611f4e815d320fd808733f (patch) | |
| tree | 27c66e26c2aab7bf883876480116a5e97d002025 /addons/website/security/ir.model.access.csv | |
| parent | 5bcfe45fd917dd2fabb2fcca93bb409ec733b608 (diff) | |
[FIX] website: prevent manual creation of website visitors
Currently, admin and system users have the ability to manually create new
visitors from UI, which was introduced since ACL revamp[1] on visitors.
However, even admin should not be able to create visitors manually. Indeed
having a create button makes no sense as everything is managed through
frontend. Those menus are mainly present for reporting and displaying
information.
This commit fixes the behaviour by preventing manual creation of visitors
for all users including admin.
[1] - 5e605f5
Task ID-2288363
closes odoo/odoo#56649
X-original-commit: 1db514f8d2a9f1ba6861c89ced9a2a9f5dcf48be
Signed-off-by: Thibault Delavallee (tde) <tde@openerp.com>
Diffstat (limited to 'addons/website/security/ir.model.access.csv')
| -rw-r--r-- | addons/website/security/ir.model.access.csv | 2 |
1 files changed, 1 insertions, 1 deletions
diff --git a/addons/website/security/ir.model.access.csv b/addons/website/security/ir.model.access.csv index e15f55b4c85..c3bcd6aa304 100644 --- a/addons/website/security/ir.model.access.csv +++ b/addons/website/security/ir.model.access.csv @@ -12,7 +12,7 @@ access_website_ir_ui_view_designer,access_website_ir_ui_view_designer,model_ir_u access_seo_public,access_seo_public,model_website_seo_metadata,,1,0,0,0 access_seo_designer,access_seo_designer,model_website_seo_metadata,group_website_designer,1,1,1,1 access_website_visitor_designer,access_website_visitor_designer,model_website_visitor,website.group_website_designer,1,1,0,1 -access_website_visitor_system,access_website_visitor_system,model_website_visitor,base.group_system,1,1,1,1 +access_website_visitor_system,access_website_visitor_system,model_website_visitor,base.group_system,1,1,0,1 access_website_track_designer,access_website_track_designer,model_website_track,website.group_website_designer,1,1,1,1 access_website_track_system,access_website_track_system,model_website_track,base.group_system,1,1,1,1 access_website_route_designer,access_website_designer_route,model_website_route,group_website_designer,1,1,1,1 |