summaryrefslogtreecommitdiff
path: root/odoo/addons/base/security
diff options
context:
space:
mode:
authorMartin Trigaux <mat@odoo.com>2020-05-19 10:08:11 +0200
committerMartin Trigaux <mat@odoo.com>2020-05-26 15:50:11 +0200
commit8f578637076d4b65de222aa092ce738391ce5260 (patch)
tree9ae999af7562e12484d7edcc4cb6ebf8d4eaead8 /odoo/addons/base/security
parent1835d5a6a3f9c0f4a2860b71fb9d0e619f1213ca (diff)
[IMP] *: remove access to ir.property
Only administrators can access properties and configure them. ir.property may contain sensitive information and should only be accessed via code call to specific methods
Diffstat (limited to 'odoo/addons/base/security')
-rw-r--r--odoo/addons/base/security/ir.model.access.csv4
1 files changed, 2 insertions, 2 deletions
diff --git a/odoo/addons/base/security/ir.model.access.csv b/odoo/addons/base/security/ir.model.access.csv
index 328d36cc421..0a0abc9d090 100644
--- a/odoo/addons/base/security/ir.model.access.csv
+++ b/odoo/addons/base/security/ir.model.access.csv
@@ -20,8 +20,8 @@
"access_ir_module_module_group_user","ir_module_module group_user","model_ir_module_module","group_system",1,1,1,1
"access_ir_module_module_dependency_group_system","ir_module_module_dependency group_system","model_ir_module_module_dependency","group_system",1,1,1,1
"access_ir_module_module_exclusion_group_system","ir_module_module_exclusion group_system","model_ir_module_module_exclusion","group_system",1,1,1,1
-"access_ir_property_group_user","ir_property group_user","model_ir_property",,1,0,0,0
-"access_ir_property_group_user_manager","ir_property group_manager","model_ir_property","base.group_partner_manager",1,1,1,0
+"access_ir_property_group_user","ir_property group_user","model_ir_property",,0,0,0,0
+"access_ir_property_group_system","ir_property group_system","model_ir_property","base.group_system",1,1,1,0
"access_ir_rule_group_erp_manager","ir_rule group_erp_manager","model_ir_rule","group_erp_manager",1,1,1,1
"access_ir_sequence_group_user","ir_sequence group_user","model_ir_sequence","group_user",1,0,0,0
"access_ir_sequence_group_system","ir_sequence group_system","model_ir_sequence","group_system",1,1,1,1