From fbb80f4ba693bd5b66f092f2ba695282f7fbf28d Mon Sep 17 00:00:00 2001
From: =?UTF-8?q?Thibault=20Delavall=C3=A9e?= <tde@openerp.com>
Date: Fri, 19 Oct 2012 11:59:19 +0200
Subject: [REVIEW] mail: some code cleanup before merging. mail.message: fixed
 to_read condition mail.message: cleaned message_read code mail.thread: fixed
 mega security hole, giving superuser rights when creating objects in
 mail.thread

bzr revid: tde@openerp.com-20121019095919-xa95j10f22va6djm
---
 addons/mail/security/mail_security.xml | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

(limited to 'addons/mail/security/mail_security.xml')

diff --git a/addons/mail/security/mail_security.xml b/addons/mail/security/mail_security.xml
index 53083a51d5a..3f2b7bf3e9a 100644
--- a/addons/mail/security/mail_security.xml
+++ b/addons/mail/security/mail_security.xml
@@ -11,7 +11,7 @@
         </record>
 
         <record id="mail_followers_read_own" model="ir.rule">
-            <field name="name">mail.followers: read its own entries</field>
+            <field name="name">mail.followers: read and write its own entries</field>
             <field name="model_id" ref="model_mail_followers"/>
             <field name="domain_force">[('partner_id', '=', user.partner_id.id)]</field>
             <field name="perm_create" eval="False"/>
-- 
cgit v1.2.3