From 8c31d9772afee8c8fed430fd84c53c6e930fbadd Mon Sep 17 00:00:00 2001
From: =?UTF-8?q?Thibault=20Delavall=C3=A9e?= <tde@openerp.com>
Date: Fri, 26 Apr 2013 15:02:59 +0200
Subject: [FIX] project, task, issue, portal: fixed access rules for
 employees/portal users + added an help on privacy_visibility.

bzr revid: tde@openerp.com-20130426130259-35j0v7lg7unxhzzp
---
 addons/project_issue/security/project_issue_security.xml | 12 +++++-------
 1 file changed, 5 insertions(+), 7 deletions(-)

(limited to 'addons/project_issue/security/project_issue_security.xml')

diff --git a/addons/project_issue/security/project_issue_security.xml b/addons/project_issue/security/project_issue_security.xml
index 5215a94a8b7..c8ed12086e4 100644
--- a/addons/project_issue/security/project_issue_security.xml
+++ b/addons/project_issue/security/project_issue_security.xml
@@ -10,15 +10,13 @@
         </record>
 
         <record model="ir.rule" id="issue_user_rule">
-            <field name="name">Project/Issue: employees: public or employee or following or assigned</field>
+            <field name="name">Project/Issue: employees: public or employee or (followers and following)</field>
             <field name="model_id" ref="model_project_issue"/>
             <field name="domain_force">['|',
-                                            '|',
-                                                ('project_id.privacy_visibility', 'in', ['public', 'employees']),
-                                                '&amp;',
-                                                    ('project_id.privacy_visibility', '=', 'followers'),
-                                                    ('message_follower_ids', 'in', [user.id]),
-                                            ('user_id', '=', user.id),
+                                            ('project_id.privacy_visibility', 'in', ['public', 'employees']),
+                                            '&amp;',
+                                                ('project_id.privacy_visibility', '=', 'followers'),
+                                                ('message_follower_ids', 'in', [user.id]),
                                         ]</field>
             <field name="groups" eval="[(4,ref('base.group_user'))]"/>
         </record>
-- 
cgit v1.2.3