diff options
| author | xrg@hellug.gr <> | 2010-11-04 17:44:46 +0200 |
|---|---|---|
| committer | xrg@hellug.gr <> | 2010-11-04 17:44:46 +0200 |
| commit | d3b79b05fcbcbd0da299c09f96edc4d1ac698cc0 (patch) | |
| tree | 94f34f9fd63b610926d1bd9bde8eaf0faabd985b /addons | |
| parent | c8533820f97091ee0349cbcc9de3f5476dcda3ef (diff) | |
document: fix security rules, for trunk ORM
browse lists are not correctly resolved at v600 ORM, so avoid them with a pythonic expression.
bzr revid: xrg@hellug.gr-20101104154446-c8ocgye52w6m5ufn
Diffstat (limited to 'addons')
| -rw-r--r-- | addons/document/security/document_security.xml | 4 |
1 files changed, 2 insertions, 2 deletions
diff --git a/addons/document/security/document_security.xml b/addons/document/security/document_security.xml index c4ef727894a..ca55a8219c1 100644 --- a/addons/document/security/document_security.xml +++ b/addons/document/security/document_security.xml @@ -16,7 +16,7 @@ <record id="ir_rule_readpublicdirectories0" model="ir.rule"> <field name="model_id" ref="document.model_document_directory"/> - <field name="domain_force">['|','|',('group_ids','in',user.groups_id), ('user_id', '=', user.id), '&', ('user_id', '=', False), ('group_ids','=',False), '|', ('company_id','=',False), ('company_id','child_of',[user.company_id.id])]</field> + <field name="domain_force">['|','|',('group_ids','in',[g.id for g in user.groups_id]), ('user_id', '=', user.id), '&', ('user_id', '=', False), ('group_ids','=',False), '|', ('company_id','=',False), ('company_id','child_of',[user.company_id.id])]</field> <field name="name">Read public directories</field> <field eval="0" name="global"/> <field eval="[(6,0,[ref('base.group_user')])]" name="groups"/> @@ -28,7 +28,7 @@ <record id="ir_rule_documentmodifyowndirectories0" model="ir.rule"> <field name="model_id" ref="document.model_document_directory"/> - <field name="domain_force">[ '|', ('user_id', '=', user.id), '&', ('group_ids','in',user.groups_id), ('user_id','=',False), '|', ('company_id','=',False), ('company_id','child_of',[user.company_id.id]) ]</field> + <field name="domain_force">[ '|', ('user_id', '=', user.id), '&', ('group_ids','in',[g.id for g in user.groups_id]), ('user_id','=',False), '|', ('company_id','=',False), ('company_id','child_of',[user.company_id.id])]</field> <field name="name">Document modify own directories</field> <field eval="0" name="global"/> <field eval="[(6,0,[ref('base.group_document_user')])]" name="groups"/> |