diff options
| author | Xavier Morel <xmo@openerp.com> | 2014-06-17 12:01:52 +0200 |
|---|---|---|
| committer | Xavier Morel <xmo@openerp.com> | 2014-06-17 12:01:52 +0200 |
| commit | 79e10200d5cc78d39a139f63eb2a69309878ab04 (patch) | |
| tree | 3e9e640a14532d4e0af4abfc69d26a42451055ef /addons/website/static/src/xml/website.xml | |
| parent | 63a6ba92e2c0bade494ac05910210046e695b787 (diff) | |
[IMP] prevent edition of page if groups which current user doesn't have
If the current view uses @groups attributes (possibly in called templates),
the corresponding elements are rendered to a void (empty string in qweb). If
said user can edit the page, does so and saves a view section in which there's
a @groups to which he has no access, the element[@groups] is completely
removed from the template once saved, losing it.
If QWeb encounters an @groups to which the current user has no right during
rendering, have it request a no-RTE page, so the user can not RTE-edit the
page (or drop snippets in it).
Diffstat (limited to 'addons/website/static/src/xml/website.xml')
| -rw-r--r-- | addons/website/static/src/xml/website.xml | 3 |
1 files changed, 2 insertions, 1 deletions
diff --git a/addons/website/static/src/xml/website.xml b/addons/website/static/src/xml/website.xml index 4d9c9fcd73d..684a46a9f43 100644 --- a/addons/website/static/src/xml/website.xml +++ b/addons/website/static/src/xml/website.xml @@ -14,7 +14,8 @@ <span class="icon-bar"></span> </button> <form class="navbar-form navbar-left"> - <button type="button" data-action="edit" class="btn btn-primary hidden">Edit</button> + <button type="button" data-action="edit" + class="btn btn-primary hidden">Edit</button> </form> </div> <div class="collapse navbar-collapse navbar-edit-collapse"> |