From 8c31d9772afee8c8fed430fd84c53c6e930fbadd Mon Sep 17 00:00:00 2001
From: =?UTF-8?q?Thibault=20Delavall=C3=A9e?= <tde@openerp.com>
Date: Fri, 26 Apr 2013 15:02:59 +0200
Subject: [FIX] project, task, issue, portal: fixed access rules for
 employees/portal users + added an help on privacy_visibility.

bzr revid: tde@openerp.com-20130426130259-35j0v7lg7unxhzzp
---
 addons/project/security/project_security.xml | 12 +++++-------
 1 file changed, 5 insertions(+), 7 deletions(-)

(limited to 'addons/project/security')

diff --git a/addons/project/security/project_security.xml b/addons/project/security/project_security.xml
index 4bbaa9b788e..e674019443b 100644
--- a/addons/project/security/project_security.xml
+++ b/addons/project/security/project_security.xml
@@ -75,15 +75,13 @@
     </record>
 
     <record model="ir.rule" id="task_visibility_rule">
-        <field name="name">Project/Task: employees: public or employee or following or assigned</field>
+        <field name="name">Project/Task: employees: public or employee or (followers and following)</field>
         <field name="model_id" ref="model_project_task"/>
         <field name="domain_force">['|',
-                                        ('user_id', '=', user.id),
-                                        '|',
-                                            ('project_id.privacy_visibility', 'in', ['public', 'employees']),
-                                            '&amp;',
-                                                ('project_id.privacy_visibility', '=', 'followers'),
-                                                ('message_follower_ids', 'in', [user.partner_id.id]),
+                                        ('project_id.privacy_visibility', 'in', ['public', 'employees']),
+                                        '&amp;',
+                                            ('project_id.privacy_visibility', '=', 'followers'),
+                                            ('message_follower_ids', 'in', [user.partner_id.id]),
                                     ]</field>
         <field name="groups" eval="[(4,ref('base.group_user'))]"/>
     </record>
-- 
cgit v1.2.3