From 5ee045b2532ce97094dea2fe6b5e354585d67691 Mon Sep 17 00:00:00 2001 From: Nicolas Martinelli Date: Mon, 26 Oct 2020 08:55:44 +0000 Subject: [FIX] project: add follower as project user - Create a user A with access rights to Project set as 'User' - As user A, add a follower to a task An AccessError is raised. It happens because `allowed_user_ids` has the group `project.group_project_manager`. Since a Project User is allowed to set followers on a task, it is legitimate to set the appropriate portal user as allowed. opw-2369674 closes odoo/odoo#60702 Signed-off-by: Nicolas Martinelli (nim) --- addons/project/models/project.py | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) (limited to 'addons/project/models/project.py') diff --git a/addons/project/models/project.py b/addons/project/models/project.py index 888fa6c8b5c..da3d30dddb6 100644 --- a/addons/project/models/project.py +++ b/addons/project/models/project.py @@ -997,7 +997,7 @@ class Task(models.Model): if partner_ids: new_allowed_users = self.env['res.partner'].browse(partner_ids).user_ids.filtered('share') tasks = self.filtered(lambda task: task.project_id.privacy_visibility == 'portal') - tasks.write({'allowed_user_ids': [(4, user.id) for user in new_allowed_users]}) + tasks.sudo().write({'allowed_user_ids': [(4, user.id) for user in new_allowed_users]}) return res # ---------------------------------------- -- cgit v1.2.3