From e8be4d9ee35f830fff611f4e815d320fd808733f Mon Sep 17 00:00:00 2001 From: Krupal Oza Date: Wed, 26 Aug 2020 06:53:28 +0000 Subject: [FIX] website: prevent manual creation of website visitors Currently, admin and system users have the ability to manually create new visitors from UI, which was introduced since ACL revamp[1] on visitors. However, even admin should not be able to create visitors manually. Indeed having a create button makes no sense as everything is managed through frontend. Those menus are mainly present for reporting and displaying information. This commit fixes the behaviour by preventing manual creation of visitors for all users including admin. [1] - 5e605f5 Task ID-2288363 closes odoo/odoo#56649 X-original-commit: 1db514f8d2a9f1ba6861c89ced9a2a9f5dcf48be Signed-off-by: Thibault Delavallee (tde) --- addons/website/security/ir.model.access.csv | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) (limited to 'addons/website/security') diff --git a/addons/website/security/ir.model.access.csv b/addons/website/security/ir.model.access.csv index e15f55b4c85..c3bcd6aa304 100644 --- a/addons/website/security/ir.model.access.csv +++ b/addons/website/security/ir.model.access.csv @@ -12,7 +12,7 @@ access_website_ir_ui_view_designer,access_website_ir_ui_view_designer,model_ir_u access_seo_public,access_seo_public,model_website_seo_metadata,,1,0,0,0 access_seo_designer,access_seo_designer,model_website_seo_metadata,group_website_designer,1,1,1,1 access_website_visitor_designer,access_website_visitor_designer,model_website_visitor,website.group_website_designer,1,1,0,1 -access_website_visitor_system,access_website_visitor_system,model_website_visitor,base.group_system,1,1,1,1 +access_website_visitor_system,access_website_visitor_system,model_website_visitor,base.group_system,1,1,0,1 access_website_track_designer,access_website_track_designer,model_website_track,website.group_website_designer,1,1,1,1 access_website_track_system,access_website_track_system,model_website_track,base.group_system,1,1,1,1 access_website_route_designer,access_website_designer_route,model_website_route,group_website_designer,1,1,1,1 -- cgit v1.2.3