diff options
| author | Olivier Dony <odo@openerp.com> | 2014-08-13 17:20:49 +0200 |
|---|---|---|
| committer | Olivier Dony <odo@openerp.com> | 2014-08-13 17:20:49 +0200 |
| commit | 23cffab1f8cab7f456df56e6f1b002f4fa9b2ef0 (patch) | |
| tree | b7cd727119379c8a62a5cc55e2735f47114221d3 /addons | |
| parent | d03ae8980a045da4eff9edf53fd716641cdb0077 (diff) | |
[FIX] portal_sale: remove more access rights, add pricelist access
Pricelist access is necessary for being able to read
the unit price of sale order lines, and does not
pose major security risks, as it does not permit
reading the actual pricelist definition.
Diffstat (limited to 'addons')
| -rw-r--r-- | addons/portal_sale/security/ir.model.access.csv | 5 |
1 files changed, 2 insertions, 3 deletions
diff --git a/addons/portal_sale/security/ir.model.access.csv b/addons/portal_sale/security/ir.model.access.csv index 445f1438fb8..6e75cb1a711 100644 --- a/addons/portal_sale/security/ir.model.access.csv +++ b/addons/portal_sale/security/ir.model.access.csv @@ -5,9 +5,8 @@ access_account_invoice,account.invoice,account.model_account_invoice,portal.grou access_account_invoice_tax,account.invoice.tax,account.model_account_invoice_tax,portal.group_portal,1,0,0,0 access_account_invoice_line,account.invoice.line,account.model_account_invoice_line,portal.group_portal,1,0,0,0 access_account_journal,account.journal,account.model_account_journal,portal.group_portal,1,0,0,0 -access_account_voucher,account.voucher,account_voucher.model_account_voucher,portal.group_portal,1,0,0,0 -access_account_voucher_line,account.voucher.line,account_voucher.model_account_voucher_line,portal.group_portal,1,0,0,0 access_sale_shop,sale.shop,sale.model_sale_shop,portal.group_portal,1,0,0,0 +access_product_list,product.pricelist,product.model_product_pricelist,portal.group_portal,1,0,0,0 access_res_partner,res.partner,base.model_res_partner,portal.group_portal,1,0,0,0 access_account_tax,account.tax,account.model_account_tax,portal.group_portal,1,0,0,0 -access_res_partner_category,res.partner.category,base.model_res_partner_category,portal.group_portal,1,0,0,0 +access_res_partner_category,res.partner.category,base.model_res_partner_category,portal.group_portal,1,0,0,0
\ No newline at end of file |