[FIX] Access rights on events for anonymous

bzr revid: vta@openerp.com-20121212110834-sxgr3uq0sr8mok0y

diff --git a/addons/portal/portal_data.xml b/addons/portal/portal_data.xml
index 920ec52..14ff49b 100644 (file)
--- a/addons/portal/portal_data.xml
+++ b/addons/portal/portal_data.xml
@@ -1,6 +1,6 @@
 <?xml version="1.0" encoding="utf-8"?>
 <openerp>
-    <data noupdate="1">
+    <data noupdate="0">
 
         <!-- The portal group -->
         <record id="group_portal" model="res.groups">

diff --git a/addons/portal/portal_view.xml b/addons/portal/portal_view.xml
index d853e6b..7bd1224 100644 (file)
--- a/addons/portal/portal_view.xml
+++ b/addons/portal/portal_view.xml
@@ -8,18 +8,49 @@
             groups="portal.group_portal,portal.group_anonymous"
             sequence="15"/>
 
-        <menuitem name="Messaging" id="portal_messages" parent="portal_menu" sequence="10"/>
-        <menuitem name="About Us" id="portal_company" parent="portal_menu" sequence="200"/>
-        <menuitem name="News" id="portal_company_news" parent="portal_company" sequence="10" action="action_news"/>
-        <menuitem name="Jobs" id="portal_jobs" parent="portal_company" sequence="20" action="action_jobs"/>
-
+        <menuitem name="Messaging" id="portal_messages" parent="portal_menu" sequence="10" groups="portal.group_portal"/>
+        <record id="action_mail_inbox_feeds_portal" model="ir.actions.client">
+            <field name="name">Inbox</field>
+            <field name="tag">mail.wall</field>
+            <field name="res_model">mail.message</field>
+            <field name="context">{
+              'default_model': 'res.users', 
+              'default_res_id': uid,
+            }</field>
+            <field name="params" eval="&quot;{
+                'domain': [
+                  ('to_read', '=', True),
+                  ('starred', '=', False),
+                ],
+                'show_compose_message': False,
+                'show_link_partner': False,
+                'view_mailbox': True,
+                'view_inbox': True,
+                'read_action': 'read'
+            }&quot;"/>
+            <field name="help" type="html">
+                <p>
+                    <b>Good Job!</b> Your inbox is empty.
+                </p><p>
+                    Your inbox contains private messages or emails sent to you
+                    as well as information related to documents or people you
+                    follow.
+                </p>
+            </field>
+        </record>
+        <menuitem name="Inbox" id="portal_inbox" parent="portal_messages"
+            action="action_mail_inbox_feeds_portal" sequence="10" groups="portal.group_portal"/>
         <!--
             Create menu items that we'll leave empty for now - they'll be
             filled up by other portal modules.
         -->
         <menuitem name="Quotations and Sales Orders" id="portal_orders" parent="portal_menu" sequence="20"/>
         <menuitem name="After Sale Services" id="portal_after_sales" parent="portal_menu" sequence="30"/>
-        <menuitem name="Projects" id="portal_projects" parent="portal_menu" sequence="40"/>        
+        <menuitem name="Projects" id="portal_projects" parent="portal_menu" sequence="40"/>
+
+        <menuitem name="About Us" id="portal_company" parent="portal_menu" sequence="200"/>
+        <menuitem name="News" id="portal_company_news" parent="portal_company" sequence="10" action="action_news"/>
+        <menuitem name="Jobs" id="portal_jobs" parent="portal_company" sequence="20" action="action_jobs"/>
 
         <!-- extend res.groups search view -->
         <record id="group_search_view" model="ir.ui.view">
@@ -47,38 +78,5 @@
             </field>
         </record>
 
-        <record id="action_mail_inbox_feeds_portal" model="ir.actions.client">
-            <field name="name">Inbox</field>
-            <field name="tag">mail.wall</field>
-            <field name="res_model">mail.message</field>
-            <field name="context">{
-              'default_model': 'res.users', 
-              'default_res_id': uid,
-            }</field>
-            <field name="params" eval="&quot;{
-                'domain': [
-                  ('to_read', '=', True),
-                  ('starred', '=', False),
-                ],
-                'show_compose_message': False,
-                'show_link_partner': False,
-                'view_mailbox': True,
-                'view_inbox': True,
-                'read_action': 'read'
-            }&quot;"/>
-            <field name="help" type="html">
-                <p>
-                    <b>Good Job!</b> Your inbox is empty.
-                </p><p>
-                    Your inbox contains private messages or emails sent to you
-                    as well as information related to documents or people you
-                    follow.
-                </p>
-            </field>
-        </record>
-
-        <menuitem name="Inbox" id="portal_inbox" parent="portal_messages"
-            action="action_mail_inbox_feeds_portal" sequence="10"/>
-
     </data>
 </openerp>

diff --git a/addons/portal_event/portal_event_view.xml b/addons/portal_event/portal_event_view.xml
index 0a0f59d..4eca34b 100755 (executable)
--- a/addons/portal_event/portal_event_view.xml
+++ b/addons/portal_event/portal_event_view.xml
@@ -10,7 +10,7 @@
             <field name="name">Events</field>
             <field name="type">ir.actions.act_window</field>
             <field name="res_model">event.event</field>
-            <field name="view_mode">kanban,calendar,tree,form</field>
+            <field name="view_mode">kanban,calendar,tree</field>
             <field name="context">{"search_default_upcoming":1}</field>
             <field name="search_view_id" ref="event.view_event_search"/>
             <field name="help">There are no public events.</field>

diff --git a/addons/portal_event/security/ir.model.access.csv b/addons/portal_event/security/ir.model.access.csv
index fc652f4..2de4a73 100644 (file)
--- a/addons/portal_event/security/ir.model.access.csv
+++ b/addons/portal_event/security/ir.model.access.csv
@@ -1,3 +1,5 @@
 id,name,model_id:id,group_id:id,perm_read,perm_write,perm_create,perm_unlink\r
 access_event,event,event.model_event_event,portal.group_portal,1,0,0,0\r
 access_registration,registration,event.model_event_registration,portal.group_portal,1,1,1,1\r
+access_event,event,event.model_event_event,portal.group_anonymous,1,0,0,0\r
+access_registration,registration,event.model_event_registration,portal.group_anonymous,1,1,1,1\r

diff --git a/addons/portal_event/security/portal_security.xml b/addons/portal_event/security/portal_security.xml
index 22e630f..958319a 100644 (file)
--- a/addons/portal_event/security/portal_security.xml
+++ b/addons/portal_event/security/portal_security.xml
@@ -1,19 +1,19 @@
 <?xml version="1.0" encoding="utf-8"?>
 <openerp>
-    <data noupdate="1">
+    <data noupdate="0">
 
         <record id="portal_event_rule" model="ir.rule">
             <field name="name">Portal Visible Events</field>
             <field ref="event.model_event_event" name="model_id"/>
             <field name="domain_force">['|', ('visibility', '=', 'public'), ('message_follower_ids','in', [user.partner_id.id])]</field>
-            <field name="groups" eval="[(4, ref('portal.group_portal'))]"/>
+            <field name="groups" eval="[(4, ref('portal.group_portal')), (4, ref('portal.group_anonymous'))]"/>
         </record>
 
         <record id="portal_registration_rule" model="ir.rule">
             <field name="name">Portal Personal Registrations</field>
             <field ref="event.model_event_registration" name="model_id"/>
             <field name="domain_force">[('user_id','=',user.id)]</field>
-            <field name="groups" eval="[(4, ref('portal.group_portal'))]"/>
+            <field name="groups" eval="[(4, ref('portal.group_portal')), (4, ref('portal.group_anonymous'))]"/>
         </record>
 
     </data>

diff --git a/addons/portal_hr_employees/security/ir.model.access.csv b/addons/portal_hr_employees/security/ir.model.access.csv
index de204d4..914649e 100644 (file)
--- a/addons/portal_hr_employees/security/ir.model.access.csv
+++ b/addons/portal_hr_employees/security/ir.model.access.csv
@@ -1,2 +1,3 @@
 id,name,model_id:id,group_id:id,perm_read,perm_write,perm_create,perm_unlink
 access_hr_employee_user,hr.employee user,hr.model_hr_employee,portal.group_portal,1,0,0,0
+access_hr_employee_user,hr.employee user,hr.model_hr_employee,portal.group_anonymous,1,0,0,0