diff options
| author | Raphael Collet <rco@openerp.com> | 2016-11-21 14:19:53 +0100 |
|---|---|---|
| committer | Raphael Collet <rco@openerp.com> | 2017-01-03 16:52:49 +0100 |
| commit | 7543afb0704d624f7abe6a2450a9d7e4a75e158b (patch) | |
| tree | 6442395f21c474f905058be8d2fd804cdf00aa1e /odoo/addons/base/security/base_security.xml | |
| parent | b39242629503571ac78d8f0fbc0fb7be405ba4ae (diff) | |
[IMP] base, *: tighten `ir.config_parameter` access rights
Add `base.group_system` on existing parameters:
- `auth_signup.allow_uninvited`,
- `auth_signup.reset_password`,
- `auth_signup.template_user_id`,
- `google_redirect_uri`,
- `mail.bounce.alias`,
- `mail.catchall.alias`,
- `mail.catchall.domain`.
Diffstat (limited to 'odoo/addons/base/security/base_security.xml')
| -rw-r--r-- | odoo/addons/base/security/base_security.xml | 18 |
1 files changed, 9 insertions, 9 deletions
diff --git a/odoo/addons/base/security/base_security.xml b/odoo/addons/base/security/base_security.xml index 6bbc547c918..538892d9ba9 100644 --- a/odoo/addons/base/security/base_security.xml +++ b/odoo/addons/base/security/base_security.xml @@ -127,15 +127,15 @@ <field name="domain_force">['|','|',('company_id.child_ids','child_of',[user.company_id.id]),('company_id','child_of',[user.company_id.id]),('company_id','=',False)]</field> </record> - <record id="ir_config_parameter_rule" model="ir.rule"> - <field name="name">ICP read rule</field> - <field name="model_id" ref="model_ir_config_parameter"/> - <field name="domain_force">['|',('group_ids','in', [g.id for g in user.groups_id]), ('group_ids','=',False)]</field> - <field name="perm_read" eval="True"/> - <field name="perm_create" eval="False"/> - <field name="perm_write" eval="False"/> - <field name="perm_unlink" eval="False"/> - </record> + <record id="ir_config_parameter_rule" model="ir.rule"> + <field name="name">ICP read rule</field> + <field name="model_id" ref="model_ir_config_parameter"/> + <field name="domain_force">['|', ('group_ids','in',user.groups_id.ids), ('group_ids','=',False)]</field> + <field name="perm_read" eval="True"/> + <field name="perm_create" eval="False"/> + <field name="perm_write" eval="False"/> + <field name="perm_unlink" eval="False"/> + </record> <record id="res_currency_rate_rule" model="ir.rule"> <field name="name">multi-company currency rate rule</field> |