diff options
| author | Damien Bouvy <dbo@odoo.com> | 2020-01-13 08:24:22 +0000 |
|---|---|---|
| committer | Damien Bouvy <dbo@odoo.com> | 2020-01-13 10:51:01 +0000 |
| commit | 39c00a28df1dad4a4b02653c66a2f72d9cc55e06 (patch) | |
| tree | 8df38f768b5b3cf7802f1855c3c9d3455c7a41f6 /odoo/addons/base | |
| parent | 1770e5095c4d1be7e9231f324e6a4bb8c1bc43b0 (diff) | |
[FIX] base: don't hide internal users behind rules
Example:
User 1 has access to company A
User 2 has access to company B
Customer 1 is shared, has user 2 as their Salesperson
Try to create a SO for Customer 1 as User 1
=> access rights issue, the quote is trying to set User 2
as the salesman of the quote but cannot because of
base.res_users_rule
This commit makes this flow possible by sharing users
if they're not portal.
closes odoo/odoo#43190
X-original-commit: ebc8d85d383643c1d4d2aa6723bc7a589c7d1c68
Signed-off-by: Damien Bouvy (dbo) <dbo@odoo.com>
Diffstat (limited to 'odoo/addons/base')
| -rw-r--r-- | odoo/addons/base/security/base_security.xml | 2 |
1 files changed, 1 insertions, 1 deletions
diff --git a/odoo/addons/base/security/base_security.xml b/odoo/addons/base/security/base_security.xml index 54064f3ce65..444f0148ada 100644 --- a/odoo/addons/base/security/base_security.xml +++ b/odoo/addons/base/security/base_security.xml @@ -171,7 +171,7 @@ <field name="name">user rule</field> <field name="model_id" ref="model_res_users"/> <field eval="True" name="global"/> - <field name="domain_force">[('company_ids', 'in', company_ids)]</field> + <field name="domain_force">['|', ('share', '=', False), ('company_ids', 'in', company_ids)]</field> </record> </data> </odoo> |