summaryrefslogtreecommitdiff
path: root/addons/payment/security/payment_security.xml
AgeCommit message (Collapse)Author
2017-04-25[FIX] payment: Deleting payment tokens from websiteGoffin Simon
When deleting payment tokens from website, in My account, by clicking on button "Manage your payment methods", the public user, the user and the portal user got a 403 error. But when creating a subscription for a customer with admin user and setting a payment token for the company of this customer. This payment token could not be deleted or modified by its users. In a few cases, it's needed to delete or modify a payment token, for example, when the expiration date of the payment token is expired. opw:740169
2016-07-06[MIG] payment: new APIThibault Delavallée
No functional change.
2016-06-17[IMP] payment*,website: rename payment.method -> payment.tokenJoren Van Onder
payment.method was not a good name because it was too easy to confuse with account.payment.method.
2016-06-09[IMP] base,sales_team: Move res_groups and menuitems to sales_teamYannick Tivisse
Purpose: Having the res_group defined in base and sales_team auto installed with mail doens't make sense. - Move the empty res_config class and the related view from base_setup to sales_team (base_setup only contains the 'General Settings' model and views - Move the 'sale' related content from product to sale module (Access rights, menuitems,...) - Set sales_team at autoinstall False. The module is installed when needed by crm or sale for example - Set sales_team as a dependency of voip. (Access rights defined for configuration purpose) - Set sales_team ad a dependency of subscription (Access rights issue too) [FIX] account: move some ir.model.access to sale module [FIX] payment: Move some ir.rule to website_sale [FIX] stock: move some ir.model.access rule to sale_stock [FIX] project: Move some ir.model.access rules to crm_project_issue [FIX] mrp: Move some ir.model.access rules to sale_mrp [FIX] calendar: move some ir.model.access rules to crm Rename xmlids accordingly. Example: 'base.group_sale_manager' becomes sales_team.group_sale_manager. [ADD] sales_team: See own documents => See only his sales team Moved the "User: Own Leads Only", "User: All Leads" and "Manager" groups from sale and crm into sales_team module. Add the record rules so that user can see only his Own Sales Team if "See Own Leads" is sales right and can see all sales teams if he is having sales rights of "See All Leads" or manager.
2016-06-06Revert "[IMP] base,sales_team: Move res_groups and menuitems to sales_team"Yannick Tivisse
This branch need more testing instead of doing 10 fixes. A lot of issues are occuring when installing modules in different orders. This reverts commit fa6e415cdb23ce9494487ed672792186157b40e0.
2016-06-06Revert "[FIX] payment: Move some ir.rule to website_sale"Yannick Tivisse
This reverts commit 930bea9758df8dbb1652072783f46be6bc6b9e49.
2016-06-06[FIX] payment: Move some ir.rule to website_saleYannick Tivisse
The group group_sale_salesman has been moved from base to sales_team.
2016-06-06[IMP] base,sales_team: Move res_groups and menuitems to sales_teamYannick Tivisse
Purpose: Having the res_group defined in base and sales_team auto installed with mail doens't make sense. - Move the empty res_config class and the related view from base_setup to sales_team (base_setup only contains the 'General Settings' model and views - Move the 'sale' related content from product to sale module (Access rights, menuitems,...) - Set sales_team at autoinstall False. The module is installed when needed by crm or sale for example - Set sales_team as a dependency of voip. (Access rights defined for configuration purpose) - Set sales_team ad a dependency of subscription (Access rights issue too) Rename xmlids accordingly. Example: 'base.group_sale_manager' becomes sales_team.group_sale_manager.
2015-06-15[IMP] payment: add support for server2server paymentsDamien Bouvy
This commit adds a new model, Payment Method, which stores a reference to the payment acquirer's database and a reference to a partner. Each payment module must have its own implementation. The implementation is completely abstract but may not suit every provider's way of implementing recurring payments.
2014-09-17[IMP] payment: simplify rev d99835eMartin Trigaux
The group public is defined in base so no need to add security rule in website_payment module (same as for portal)
2014-09-16[FIX] payment: access rights limitationMartin Trigaux
Do not allow everybody to access account.transactions. Restrict by default to readonly and even restrict the access with a record rule, give access to salesman.