From 347d0e5b468cf042cb6ea431c367bbbd54bdb39b Mon Sep 17 00:00:00 2001
From: =?UTF-8?q?Thibault=20Delavall=C3=A9e?= <tde@openerp.com>
Date: Wed, 12 Dec 2012 13:55:18 +0100
Subject: [IMP] portal removed access rights of portal user on res_partner and
 derived tables. Updated several accesses to bypass the security issues.
 Updated portal tests to have a more complete test scenario.

bzr revid: tde@openerp.com-20121212125518-k0s07niojr8a1xtu
---
 addons/mail/wizard/mail_compose_message_view.xml | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

(limited to 'addons/mail/wizard/mail_compose_message_view.xml')

diff --git a/addons/mail/wizard/mail_compose_message_view.xml b/addons/mail/wizard/mail_compose_message_view.xml
index c0b329690e3..3b8e51f35d6 100644
--- a/addons/mail/wizard/mail_compose_message_view.xml
+++ b/addons/mail/wizard/mail_compose_message_view.xml
@@ -14,7 +14,7 @@
                         <field name="parent_id" invisible="1"/>
                         <!-- visible wizard -->
                         <label for="partner_ids" string="Recipients"/>
-                        <div>
+                        <div groups="base.group_user">
                             <span attrs="{'invisible':['|', ('model', '=', False), ('composition_mode', '!=', 'mass_mail')]}">
                                 Followers of selected items and
                             </span>
-- 
cgit v1.2.3