diff options
| author | Martin Trigaux <mat@odoo.com> | 2020-02-06 14:59:50 +0100 |
|---|---|---|
| committer | Martin Trigaux <mat@odoo.com> | 2020-05-14 13:59:10 +0200 |
| commit | ccc98e01691b88c2da9c484c0e6de235b9d18548 (patch) | |
| tree | 64b83aa240f633743a27404b1533a9c9d0e64896 /addons/website/security | |
| parent | ac9fb3b120b37d27e8bb2db4188decffa23540b9 (diff) | |
[IMP] base: remove read access to ir.ui.view
Only system users should be able to access directly ir.ui.view records
Other users should use helper methods like fields_view_get or render
to interact with view records (or use sudo)
Give read access to views to publisher
He needs to call read_template on some views like
'web_editor.colorpicker' in edition mode
Restrict ACL on website.page
Apply the same ACL than on ir.ui.view as the model inherits from it.
Give access to designer to modify views
Diffstat (limited to 'addons/website/security')
| -rw-r--r-- | addons/website/security/ir.model.access.csv | 5 |
1 files changed, 3 insertions, 2 deletions
diff --git a/addons/website/security/ir.model.access.csv b/addons/website/security/ir.model.access.csv index 44a2347e3a0..163602f4d2d 100644 --- a/addons/website/security/ir.model.access.csv +++ b/addons/website/security/ir.model.access.csv @@ -5,9 +5,10 @@ access_website_menu,access_website_menu,model_website_menu,,1,0,0,0 access_website_menu_designer,Web Menu Manager,model_website_menu,group_website_designer,1,1,1,1 access_website_rewrite,access_website_rewrite,model_website_rewrite,,0,0,0,0 access_website_rewrite_designer,Web Rewrite Manager,model_website_rewrite,group_website_designer,1,1,1,1 -access_website_page,access_website_page,model_website_page,,1,0,0,0 +access_website_page,access_website_page,model_website_page,,0,0,0,0 access_website_page_designer,Web Page Manager,model_website_page,group_website_designer,1,1,1,1 -access_website_ir_ui_view,access_website_ir_ui_view,model_ir_ui_view,group_website_designer,1,1,1,1 +access_website_ir_ui_view_publisher,access_website_ir_ui_view_publisher,model_ir_ui_view,group_website_publisher,1,0,0,0 +access_website_ir_ui_view_designer,access_website_ir_ui_view_designer,model_ir_ui_view,group_website_designer,1,1,1,1 access_seo_public,access_seo_public,model_website_seo_metadata,,1,0,0,0 access_seo_designer,access_seo_designer,model_website_seo_metadata,group_website_designer,1,1,1,1 access_website_visitor_designer,access_website_visitor_designer,model_website_visitor,website.group_website_designer,1,1,0,1 |