[FIX] Security rules for surveys
authorRichard Mathot (OpenERP) <rim@openerp.com>
Thu, 17 Apr 2014 13:50:47 +0000 (15:50 +0200)
committerRichard Mathot (OpenERP) <rim@openerp.com>
Thu, 17 Apr 2014 13:50:47 +0000 (15:50 +0200)
bzr revid: rim@openerp.com-20140417135047-7ekyq1t7jpa6ggk1

addons/survey/security/survey_security.xml

index 872e104..7d7388c 100644 (file)
@@ -17,7 +17,7 @@
         <record id="survey_public_access" model="ir.rule">
             <field name="name">Public access to surveys</field>
             <field name="model_id" ref="survey.model_survey_survey"/>
-            <field name="domain_force">[('state', '=', 'open'), ('auth_required', '=', False)]</field>
+            <field name="domain_force">[('auth_required', '=', False)]</field>
             <field name="groups" eval="[(4, ref('base.group_public'))]"/>
             <field eval="0" name="perm_unlink"/>
             <field eval="0" name="perm_write"/>
@@ -53,9 +53,9 @@
             <field name="domain_force">[('create_uid', '=', user.id)]</field>
             <field name="groups" eval="[(4, ref('base.group_public'))]"/>
             <field eval="0" name="perm_unlink"/>
-            <field eval="1" name="perm_write"/>
+            <field eval="0" name="perm_write"/>
             <field eval="1" name="perm_read"/>
-            <field eval="1" name="perm_create"/>
+            <field eval="0" name="perm_create"/>
         </record>
 
         <record id="survey_rule" model="ir.rule">
@@ -65,8 +65,8 @@
             <field name="groups" eval="[(4, ref('base.group_survey_user'))]"/>
             <field eval="0" name="perm_unlink"/>
             <field eval="1" name="perm_write"/>
-            <field eval="1" name="perm_read"/>
-            <field eval="1" name="perm_create"/>
+            <field eval="0" name="perm_read"/>
+            <field eval="0" name="perm_create"/>
         </record>
 
         <record id="survey_rule_manager" model="ir.rule">