From: Fabien Pinckaers Date: Wed, 3 Sep 2008 23:26:31 +0000 (+0200) Subject: Improved Security X-Git-Tag: 5.0.0-alpha-addons~441 X-Git-Url: http://git.inspyration.org/?a=commitdiff_plain;h=ef85bdf43d1030576b782228e7bc15b844e438bc;p=odoo%2Fodoo.git Improved Security bzr revid: fp@tinyerp.com-20080903232631-q51hbwr2kznkr4gy --- diff --git a/addons/account/security/ir.model.access.csv b/addons/account/security/ir.model.access.csv index b688c00..2a55031 100644 --- a/addons/account/security/ir.model.access.csv +++ b/addons/account/security/ir.model.access.csv @@ -1,24 +1,24 @@ id,name,model_id:id,group_id:id,perm_read,perm_write,perm_create,perm_unlink -access_account_payment_term,account.payment.term,model_account_payment_term,base.group_account_user,1,0,0,0 -access_account_payment_term_line,account.payment.term.line,model_account_payment_term_line,base.group_account_user,1,0,0,0 -access_account_account_type,account.account.type,model_account_account_type,base.group_account_user,1,0,0,0 -access_account_tax,account.tax,model_account_tax,base.group_account_user,1,0,0,0 -access_account_account,account.account,model_account_account,base.group_account_user,1,0,0,0 -access_account_journal_view,account.journal.view,model_account_journal_view,base.group_account_user,1,0,0,0 -access_account_journal_column,account.journal.column,model_account_journal_column,base.group_account_user,1,0,0,0 -access_account_journal,account.journal,model_account_journal,base.group_account_user,1,0,0,0 -access_account_period,account.period,model_account_period,base.group_account_user,1,0,0,0 -access_account_journal_period,account.journal.period,model_account_journal_period,base.group_account_user,1,1,1,1 -access_account_move,account.move,model_account_move,base.group_account_user,1,1,1,1 -access_account_move_reconcile,account.move.reconcile,model_account_move_reconcile,base.group_account_user,1,1,1,1 -access_account_tax_code,account.tax.code,model_account_tax_code,base.group_account_user,1,0,0,0 -access_account_tax,account.tax,model_account_tax,base.group_account_user,1,0,0,0 +access_account_payment_term,account.payment.term,model_account_payment_term,account.group_account_user,1,0,0,0 +access_account_payment_term_line,account.payment.term.line,model_account_payment_term_line,account.group_account_user,1,0,0,0 +access_account_account_type,account.account.type,model_account_account_type,account.group_account_user,1,0,0,0 +access_account_tax,account.tax,model_account_tax,account.group_account_user,1,0,0,0 +access_account_account,account.account,model_account_account,account.group_account_user,1,0,0,0 +access_account_journal_view,account.journal.view,model_account_journal_view,account.group_account_user,1,0,0,0 +access_account_journal_column,account.journal.column,model_account_journal_column,account.group_account_user,1,0,0,0 +access_account_journal,account.journal,model_account_journal,account.group_account_user,1,0,0,0 +access_account_period,account.period,model_account_period,account.group_account_user,1,0,0,0 +access_account_journal_period,account.journal.period,model_account_journal_period,account.group_account_user,1,1,1,1 +access_account_move,account.move,model_account_move,account.group_account_user,1,1,1,1 +access_account_move_reconcile,account.move.reconcile,model_account_move_reconcile,account.group_account_user,1,1,1,1 +access_account_tax_code,account.tax.code,model_account_tax_code,account.group_account_user,1,0,0,0 +access_account_tax,account.tax,model_account_tax,account.group_account_user,1,0,0,0 access_account_budget_post,account.budget.post,model_account_budget_post,base.group_account_manager,1,1,1,1 access_account_budget_post_dotation,account.budget.post.dotation,model_account_budget_post_dotation,base.group_account_manager,1,1,1,1 -access_account_model,account.model,model_account_model,base.group_account_user,1,1,1,1 -access_account_model_line,account.model.line,model_account_model_line,base.group_account_user,1,1,1,1 -access_account_subscription,account.subscription,model_account_subscription,base.group_account_user,1,1,1,1 -access_account_subscription_line,account.subscription.line,model_account_subscription_line,base.group_account_user,1,1,1,1 +access_account_model,account.model,model_account_model,account.group_account_user,1,1,1,1 +access_account_model_line,account.model.line,model_account_model_line,account.group_account_user,1,1,1,1 +access_account_subscription,account.subscription,model_account_subscription,account.group_account_user,1,1,1,1 +access_account_subscription_line,account.subscription.line,model_account_subscription_line,account.group_account_user,1,1,1,1 access_account_config_fiscalyear,account.config.fiscalyear,model_account_config_fiscalyear,base.group_account_manager,1,1,1,1 access_account_config_journal_bank_account,account.config.journal.bank.account,model_account_config_journal_bank_account,base.group_account_manager,1,1,1,1 access_account_config_journal_bank_account_line,account.config.journal.bank.account.line,model_account_config_journal_bank_account_line,base.group_account_manager,1,1,1,1 @@ -30,27 +30,25 @@ access_account_tax_template,account.tax.template,model_account_tax_template,base access_wizard_multi_charts_accounts,wizard.multi.charts.accounts,model_wizard_multi_charts_accounts,base.group_account_manager,1,1,1,1 access_account_bank_accounts_wizard,account.bank.accounts.wizard,model_account_bank_accounts_wizard,base.group_account_manager,1,1,1,1 access_wizard_account_chart_duplicate,wizard.account.chart.duplicate,model_wizard_account_chart_duplicate,base.group_account_manager,1,1,1,1 -access_account_move_line,account.move.line,model_account_move_line,base.group_account_user,1,1,1,1 -access_account_bank_statement,account.bank.statement,model_account_bank_statement,base.group_account_user,1,1,1,1 -access_account_bank_statement_reconcile,account.bank.statement.reconcile,model_account_bank_statement_reconcile,base.group_account_user,1,1,1,1 -access_account_bank_statement_reconcile_line,account.bank.statement.reconcile.line,model_account_bank_statement_reconcile_line,base.group_account_user,1,1,1,1 -access_account_bank_statement_line,account.bank.statement.line,model_account_bank_statement_line,base.group_account_user,1,1,1,1 -access_account_analytic_line,account.analytic.line,model_account_analytic_line,base.group_account_user,1,1,1,1 +access_account_move_line,account.move.line,model_account_move_line,account.group_account_user,1,1,1,1 +access_account_bank_statement,account.bank.statement,model_account_bank_statement,account.group_account_user,1,1,1,1 +access_account_bank_statement_reconcile,account.bank.statement.reconcile,model_account_bank_statement_reconcile,account.group_account_user,1,1,1,1 +access_account_bank_statement_reconcile_line,account.bank.statement.reconcile.line,model_account_bank_statement_reconcile_line,account.group_account_user,1,1,1,1 +access_account_bank_statement_line,account.bank.statement.line,model_account_bank_statement_line,account.group_account_user,1,1,1,1 +access_account_analytic_line,account.analytic.line,model_account_analytic_line,account.group_account_user,1,1,1,1 access_report_hr_timesheet_invoice_journal,report.hr.timesheet.invoice.journal,model_report_hr_timesheet_invoice_journal,base.group_account_manager,1,0,0,0 -access_account_invoice,account.invoice,model_account_invoice,base.group_account_user,1,0,0,0 -access_account_invoice_line,account.invoice.line,model_account_invoice_line,base.group_account_user,1,0,0,0 -access_account_invoice_tax,account.invoice.tax,model_account_invoice_tax,base.group_account_user,1,0,0,0 -access_account_analytic_account,account.analytic.account,model_account_analytic_account,base.group_account_user,1,0,0,0 -access_account_analytic_journal,account.analytic.journal,model_account_analytic_journal,base.group_account_user,1,0,0,0 -access_account_analytic_budget_post,account.analytic.budget.post,model_account_analytic_budget_post,base.group_account_manager,1,1,1,1 -access_account_analytic_budget_post_dotation,account.analytic.budget.post.dotation,model_account_analytic_budget_post_dotation,base.group_account_manager,1,1,1,1 -access_account_invoice_uinvoice,account.invoice,model_account_invoice,base.group_account_user,1,1,1,1 -access_account_invoice_line_uinvoice,account.invoice.line,model_account_invoice_line,base.group_account_user,1,1,1,1 -access_account_invoice_tax_uinvoice,account.invoice.tax,model_account_invoice_tax,base.group_account_user,1,1,1,1 -access_account_analytic_line_uinvoice,account.analytic.line,model_account_analytic_line,base.group_account_user,1,1,1,1 -access_account_move_uinvoice,account.move,model_account_move,base.group_account_user,1,1,1,1 -access_account_move_reconcile_uinvoice,account.move.reconcile,model_account_move_reconcile,base.group_account_user,1,1,1,1 -access_account_journal_period_uinvoice,account.journal.period,model_account_journal_period,base.group_account_user,1,1,1,1 +access_account_invoice,account.invoice,model_account_invoice,account.group_account_user,1,0,0,0 +access_account_invoice_line,account.invoice.line,model_account_invoice_line,account.group_account_user,1,0,0,0 +access_account_invoice_tax,account.invoice.tax,model_account_invoice_tax,account.group_account_user,1,0,0,0 +access_account_analytic_account,account.analytic.account,model_account_analytic_account,account.group_account_user,1,0,0,0 +access_account_analytic_journal,account.analytic.journal,model_account_analytic_journal,account.group_account_user,1,0,0,0 +access_account_invoice_uinvoice,account.invoice,model_account_invoice,account.group_account_user,1,1,1,1 +access_account_invoice_line_uinvoice,account.invoice.line,model_account_invoice_line,account.group_account_user,1,1,1,1 +access_account_invoice_tax_uinvoice,account.invoice.tax,model_account_invoice_tax,account.group_account_user,1,1,1,1 +access_account_analytic_line_uinvoice,account.analytic.line,model_account_analytic_line,account.group_account_user,1,1,1,1 +access_account_move_uinvoice,account.move,model_account_move,account.group_account_user,1,1,1,1 +access_account_move_reconcile_uinvoice,account.move.reconcile,model_account_move_reconcile,account.group_account_user,1,1,1,1 +access_account_journal_period_uinvoice,account.journal.period,model_account_journal_period,account.group_account_user,1,1,1,1 access_account_payment_term_manager,account.payment.term,model_account_payment_term,base.group_account_manager,1,1,1,1 access_account_payment_term_line_manager,account.payment.term.line,model_account_payment_term_line,base.group_account_manager,1,1,1,1 access_account_account_type_manager,account.account.type,model_account_account_type,base.group_account_manager,1,1,1,1 @@ -67,3 +65,6 @@ access_account_invoice_line_manager,account.invoice.line,model_account_invoice_l access_account_invoice_tax_manager,account.invoice.tax,model_account_invoice_tax,base.group_account_manager,1,1,1,1 access_account_analytic_account_manager,account.analytic.account,model_account_analytic_account,base.group_account_manager,1,1,1,1 access_account_analytic_journal_manager,account.analytic.journal,model_account_analytic_journal,base.group_account_manager,1,1,1,1 +access_account_fiscalyear,account.fiscalyear,model_account_fiscalyear,base.group_account_manager,1,1,1,1 +access_account_fiscalyear_user,account.fiscalyear.user,model_account_fiscalyear,base.group_account_user,1,0,0,0 +access_account_fiscalyear_invoice,account.fiscalyear.invoice,model_account_fiscalyear,base.group_account_invoice,1,0,0,0 diff --git a/addons/association_vertical/aso_data.xml b/addons/association_vertical/aso_data.xml index 6d93541..d5e13f5 100644 --- a/addons/association_vertical/aso_data.xml +++ b/addons/association_vertical/aso_data.xml @@ -1,29 +1,26 @@ - - No One Association - - + - + - + - + - + - + - + diff --git a/addons/base_setup/base_setup.py b/addons/base_setup/base_setup.py deleted file mode 100644 index 5d71640..0000000 --- a/addons/base_setup/base_setup.py +++ /dev/null @@ -1,41 +0,0 @@ -# -*- encoding: utf-8 -*- -############################################################################## -# -# Copyright (c) 2004-2008 TINY SPRL. (http://tiny.be) All Rights Reserved. -# -# $Id$ -# -# WARNING: This program as such is intended to be used by professional -# programmers who take the whole responsability of assessing all potential -# consequences resulting from its eventual inadequacies and bugs -# End users who are looking for a ready-to-use solution with commercial -# garantees and support are strongly adviced to contract a Free Software -# Service Company -# -# This program is Free Software; you can redistribute it and/or -# modify it under the terms of the GNU General Public License -# as published by the Free Software Foundation; either version 2 -# of the License, or (at your option) any later version. -# -# This program is distributed in the hope that it will be useful, -# but WITHOUT ANY WARRANTY; without even the implied warranty of -# MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the -# GNU General Public License for more details. -# -# You should have received a copy of the GNU General Public License -# along with this program; if not, write to the Free Software -# Foundation, Inc., 59 Temple Place - Suite 330, Boston, MA 02111-1307, USA. -# -############################################################################## - -from osv import fields, osv - -class base_setup(osv.osv): - _name="base_setup.base_setup" - _columns={ - 'name': fields.char("Name", size=128), - } -base_setup() - -# vim:expandtab:smartindent:tabstop=4:softtabstop=4:shiftwidth=4: - diff --git a/addons/base_setup/security/ir.model.access.csv b/addons/base_setup/security/ir.model.access.csv index 2ad5d323..97dd8b9 100644 --- a/addons/base_setup/security/ir.model.access.csv +++ b/addons/base_setup/security/ir.model.access.csv @@ -1,2 +1 @@ id,name,model_id:id,group_id:id,perm_read,perm_write,perm_create,perm_unlink -access_base_setup_base_setup,base_setup.base_setup,model_base_setup_base_setup,base.group_system,1,1,1,1 diff --git a/addons/crm/security/crm_security.xml b/addons/crm/security/crm_security.xml index c62cb92..1cd685a 100644 --- a/addons/crm/security/crm_security.xml +++ b/addons/crm/security/crm_security.xml @@ -6,8 +6,8 @@ CRM / Manager - - CRM / Administrator + + CRM / User diff --git a/addons/delivery/__terp__.py b/addons/delivery/__terp__.py index d5b5ee5..b194f84 100644 --- a/addons/delivery/__terp__.py +++ b/addons/delivery/__terp__.py @@ -36,7 +36,7 @@ "init_xml" : ["delivery_data.xml"], "demo_xml" : ["delivery_demo.xml"], "update_xml" : [ - "security/ir.model.access.csv" + "security/ir.model.access.csv", "delivery_view.xml", "delivery_wizard.xml", "partner_view.xml", diff --git a/addons/event/__terp__.py b/addons/event/__terp__.py index 2a17508..edccafc 100644 --- a/addons/event/__terp__.py +++ b/addons/event/__terp__.py @@ -24,7 +24,7 @@ "demo_xml" : ["event_demo.xml"], "init_xml" : ["event_data.xml"], "update_xml" : [ - "security/ir.model.access.csv" + "security/ir.model.access.csv", "event_wizard.xml","event_view.xml","event_sequence.xml" ], "active" : False, diff --git a/addons/hr/__terp__.py b/addons/hr/__terp__.py index cb8f183..e30166a 100644 --- a/addons/hr/__terp__.py +++ b/addons/hr/__terp__.py @@ -47,8 +47,8 @@ "hr_department_demo.xml", ], "update_xml" : [ - "security/ir.model.access.csv", "security/hr_security.xml", + "security/ir.model.access.csv", "hr_view.xml", "hr_report.xml", "hr_wizard.xml", diff --git a/addons/membership/__terp__.py b/addons/membership/__terp__.py index 16d2f30..2d5ded0 100644 --- a/addons/membership/__terp__.py +++ b/addons/membership/__terp__.py @@ -15,7 +15,6 @@ "membership_data.xml", ], "update_xml" : [ - "security/ir.model.access.csv" "security/ir.model.access.csv", "membership_view.xml","membership_wizard.xml" ], diff --git a/addons/mrp/security/ir.model.access.csv b/addons/mrp/security/ir.model.access.csv index 6e17070..7785ce8 100644 --- a/addons/mrp/security/ir.model.access.csv +++ b/addons/mrp/security/ir.model.access.csv @@ -1,21 +1,21 @@ id,name,model_id:id,group_id:id,perm_read,perm_write,perm_create,perm_unlink -access_mrp_workcenter,mrp.workcenter,model_mrp_workcenter,mrp.group_production_user,1,0,0,0 -access_mrp_property_group,mrp.property.group,model_mrp_property_group,mrp.group_production_user,1,0,0,0 -access_mrp_property,mrp.property,model_mrp_property,mrp.group_production_user,1,0,0,0 -access_mrp_routing,mrp.routing,model_mrp_routing,mrp.group_production_user,1,0,0,0 -access_mrp_routing_workcenter,mrp.routing.workcenter,model_mrp_routing_workcenter,mrp.group_production_user,1,0,0,0 -access_mrp_bom,mrp.bom,model_mrp_bom,mrp.group_production_user,1,0,0,0 -access_mrp_bom_revision,mrp.bom.revision,model_mrp_bom_revision,mrp.group_production_user,1,0,0,0 -access_mrp_production,mrp.production,model_mrp_production,mrp.group_production_user,1,1,1,1 -access_mrp_production_workcenter_line,mrp.production.workcenter.line,model_mrp_production_workcenter_line,mrp.group_production_user,1,1,1,1 -access_mrp_production_product_line,mrp.production.product.line,model_mrp_production_product_line,mrp.group_production_user,1,1,1,1 -access_mrp_procurement,mrp.procurement,model_mrp_procurement,mrp.group_production_user,1,1,1,1 -access_stock_warehouse_orderpoint,stock.warehouse.orderpoint,model_stock_warehouse_orderpoint,mrp.group_production_user,1,0,0,0 -access_stock_warehouse_orderpoint_manager,stock.warehouse.orderpoint.manager,model_stock_warehouse_orderpoint,mrp.group_production_user,1,1,1,1 -access_mrp_workcenter_manager,mrp.workcenter.manager,model_mrp_workcenter,mrp.group_production_user,1,1,1,1 -access_mrp_property_group_manager,mrp.property.group.manager,model_mrp_property_group,mrp.group_production_user,1,1,1,1 -access_mrp_property_manager,mrp.property.manager,model_mrp_property,mrp.group_production_user,1,1,1,1 -access_mrp_routing_manager,mrp.routing.manager,model_mrp_routing,mrp.group_production_user,1,1,1,1 -access_mrp_routing_workcenter_manager,mrp.routing.workcenter.manager,model_mrp_routing_workcenter,mrp.group_production_user,1,1,1,1 -access_mrp_bom_manager,mrp.bom.manager,model_mrp_bom,mrp.group_production_user,1,1,1,1 -access_mrp_bom_revision_manager,mrp.bom.revision.manager,model_mrp_bom_revision,mrp.group_production_user,1,1,1,1 +access_mrp_workcenter,mrp.workcenter,model_mrp_workcenter,mrp.group_mrp_user,1,0,0,0 +access_mrp_property_group,mrp.property.group,model_mrp_property_group,mrp.group_mrp_user,1,0,0,0 +access_mrp_property,mrp.property,model_mrp_property,mrp.group_mrp_user,1,0,0,0 +access_mrp_routing,mrp.routing,model_mrp_routing,mrp.group_mrp_user,1,0,0,0 +access_mrp_routing_workcenter,mrp.routing.workcenter,model_mrp_routing_workcenter,mrp.group_mrp_user,1,0,0,0 +access_mrp_bom,mrp.bom,model_mrp_bom,mrp.group_mrp_user,1,0,0,0 +access_mrp_bom_revision,mrp.bom.revision,model_mrp_bom_revision,mrp.group_mrp_user,1,0,0,0 +access_mrp_production,mrp.production,model_mrp_production,mrp.group_mrp_user,1,1,1,1 +access_mrp_production_workcenter_line,mrp.production.workcenter.line,model_mrp_production_workcenter_line,mrp.group_mrp_user,1,1,1,1 +access_mrp_production_product_line,mrp.production.product.line,model_mrp_production_product_line,mrp.group_mrp_user,1,1,1,1 +access_mrp_procurement,mrp.procurement,model_mrp_procurement,mrp.group_mrp_user,1,1,1,1 +access_stock_warehouse_orderpoint,stock.warehouse.orderpoint,model_stock_warehouse_orderpoint,mrp.group_mrp_user,1,0,0,0 +access_stock_warehouse_orderpoint_manager,stock.warehouse.orderpoint.manager,model_stock_warehouse_orderpoint,mrp.group_mrp_user,1,1,1,1 +access_mrp_workcenter_manager,mrp.workcenter.manager,model_mrp_workcenter,mrp.group_mrp_user,1,1,1,1 +access_mrp_property_group_manager,mrp.property.group.manager,model_mrp_property_group,mrp.group_mrp_user,1,1,1,1 +access_mrp_property_manager,mrp.property.manager,model_mrp_property,mrp.group_mrp_user,1,1,1,1 +access_mrp_routing_manager,mrp.routing.manager,model_mrp_routing,mrp.group_mrp_user,1,1,1,1 +access_mrp_routing_workcenter_manager,mrp.routing.workcenter.manager,model_mrp_routing_workcenter,mrp.group_mrp_user,1,1,1,1 +access_mrp_bom_manager,mrp.bom.manager,model_mrp_bom,mrp.group_mrp_user,1,1,1,1 +access_mrp_bom_revision_manager,mrp.bom.revision.manager,model_mrp_bom_revision,mrp.group_mrp_user,1,1,1,1 diff --git a/addons/mrp/security/mrp_security.xml b/addons/mrp/security/mrp_security.xml index 32c1697..5d20f9c 100644 --- a/addons/mrp/security/mrp_security.xml +++ b/addons/mrp/security/mrp_security.xml @@ -2,10 +2,10 @@ - + Manufacturing / Manager - + Manufacturing / Worker diff --git a/addons/product/security/ir.model.access.csv b/addons/product/security/ir.model.access.csv index b374c13..cf628e5 100644 --- a/addons/product/security/ir.model.access.csv +++ b/addons/product/security/ir.model.access.csv @@ -1,5 +1,5 @@ id,name,model_id:id,group_id:id,perm_read,perm_write,perm_create,perm_unlink -access_product_uom_categ,product.uom.categ,model_product_uom_categ,base.group_product_manager,1,1,1,1 +access_product_uom_categ,product.uom.categ,model_product_uom_categ,product.group_product_manager,1,1,1,1 access_product_uom,product.uom,model_product_uom,base.group_user,1,1,1,1 access_product_ul,product.ul,model_product_ul,base.group_user,1,1,1,1 access_product_category,product.category,model_product_category,base.group_user,1,1,1,1 @@ -13,7 +13,7 @@ access_product_pricelist_type,product.pricelist.type,model_product_pricelist_typ access_product_pricelist,product.pricelist,model_product_pricelist,base.group_user,1,1,1,1 access_product_pricelist_version,product.pricelist.version,model_product_pricelist_version,base.group_user,1,1,1,1 access_product_pricelist_item,product.pricelist.item,model_product_pricelist_item,base.group_user,1,1,1,1 -access_product_uom_categ_user,product.uom.categ.user,model_product_uom_categ,base.group_product_manager,1,0,0,0 +access_product_uom_categ_user,product.uom.categ.user,model_product_uom_categ,product.group_product_manager,1,0,0,0 access_product_uom_user,product.uom.user,model_product_uom,base.group_user,1,0,0,0 access_product_ul_user,product.ul.user,model_product_ul,base.group_user,1,0,0,0 access_product_category_user,product.category.user,model_product_category,base.group_user,1,0,0,0 diff --git a/addons/profile_association/security/ir.model.access.csv b/addons/profile_association/security/ir.model.access.csv index 07c7312..97dd8b9 100644 --- a/addons/profile_association/security/ir.model.access.csv +++ b/addons/profile_association/security/ir.model.access.csv @@ -1,2 +1 @@ id,name,model_id:id,group_id:id,perm_read,perm_write,perm_create,perm_unlink -access_config_install_extra_modules,config.install_extra_modules,model_config_install_extra_modules,base.group_system,1,1,1,1 diff --git a/addons/purchase/security/ir.model.access.csv b/addons/purchase/security/ir.model.access.csv index b90a077..15b888f 100644 Binary files a/addons/purchase/security/ir.model.access.csv and b/addons/purchase/security/ir.model.access.csv differ diff --git a/addons/report_timesheet/security/ir.model.access.csv b/addons/report_timesheet/security/ir.model.access.csv index 2381611..b025991 100644 --- a/addons/report_timesheet/security/ir.model.access.csv +++ b/addons/report_timesheet/security/ir.model.access.csv @@ -1,5 +1,5 @@ id,name,model_id:id,group_id:id,perm_read,perm_write,perm_create,perm_unlink -access_report_timesheet_user,report_timesheet.user,model_report_timesheet_user,base.group_hr_user,1,0,0,0 -access_report_timesheet_account,report_timesheet.account,model_report_timesheet_account,base.group_hr_user,1,0,0,0 -access_report_timesheet_account_date,report_timesheet.account.date,model_report_timesheet_account_date,base.group_hr_user,1,0,0,0 -access_report_timesheet_invoice,report_timesheet.invoice,model_report_timesheet_invoice,base.group_hr_user,1,0,0,0 +access_report_timesheet_user,report_timesheet.user,model_report_timesheet_user,base.group_user,1,0,0,0 +access_report_timesheet_account,report_timesheet.account,model_report_timesheet_account,base.group_user,1,0,0,0 +access_report_timesheet_account_date,report_timesheet.account.date,model_report_timesheet_account_date,base.group_user,1,0,0,0 +access_report_timesheet_invoice,report_timesheet.invoice,model_report_timesheet_invoice,base.group_user,1,0,0,0 diff --git a/addons/sale/__terp__.py b/addons/sale/__terp__.py index e34192f..d5bc58a 100644 --- a/addons/sale/__terp__.py +++ b/addons/sale/__terp__.py @@ -52,7 +52,7 @@ - delivery costs """, "update_xml" : [ - "security/purchase_security.xml", + "security/sale_security.xml", "security/ir.model.access.csv", "sale_workflow.xml", "sale_sequence.xml", diff --git a/addons/sale/security/ir.model.access.csv b/addons/sale/security/ir.model.access.csv index 21d0c72..c1448a8 100644 --- a/addons/sale/security/ir.model.access.csv +++ b/addons/sale/security/ir.model.access.csv @@ -1,5 +1,5 @@ id,name,model_id:id,group_id:id,perm_read,perm_write,perm_create,perm_unlink -access_sale_shop,sale.shop,model_sale_shop,base.group_sale_user,1,0,0,0 -access_sale_order,sale.order,model_sale_order,base.group_sale_user,1,1,1,1 -access_sale_order_line,sale.order.line,model_sale_order_line,base.group_sale_user,1,1,1,1 +access_sale_shop,sale.shop,model_sale_shop,sale.group_sale_user,1,0,0,0 +access_sale_order,sale.order,model_sale_order,sale.group_sale_user,1,1,1,1 +access_sale_order_line,sale.order.line,model_sale_order_line,sale.group_sale_user,1,1,1,1 access_sale_shop_admin,sale.shop,model_sale_shop,base.group_system,1,1,1,1 diff --git a/addons/stock/__terp__.py b/addons/stock/__terp__.py index 88e6d22..adf8f82 100644 --- a/addons/stock/__terp__.py +++ b/addons/stock/__terp__.py @@ -36,8 +36,8 @@ "init_xml" : [], "demo_xml" : ["stock_demo.xml"], "update_xml" : [ + "security/stock_security.xml", "security/ir.model.access.csv", - "security/report_stock.xml", "stock_workflow.xml", "stock_data.xml", "stock_incoterms.xml", diff --git a/addons/stock/security/ir.model.access.csv b/addons/stock/security/ir.model.access.csv index 0de884a..5d47e01 100644 --- a/addons/stock/security/ir.model.access.csv +++ b/addons/stock/security/ir.model.access.csv @@ -1,12 +1,11 @@ id,name,model_id:id,group_id:id,perm_read,perm_write,perm_create,perm_unlink -access_stock_incoterms_system,stock.incoterms.system,model_stock_incoterms,stock.group_system,1,1,1,1 -access_stock_warehouse_system,stock.warehouse.system,model_stock_warehouse,stock.group_system,1,1,1,1 -access_stock_location_system,stock.location.system,model_stock_location,stock.group_system,1,1,1,1 -access_stock_incoterms,stock.incoterms,model_stock_picking_move_wizard,stock.group_system,1,0,0,0 -access_stock_warehouse,stock.warehouse,model_stock_picking_move_wizard,stock.group_system,1,0,0,0 -access_stock_location,stock.location,model_stock_picking_move_wizard,stock.group_system,1,0,0,0 +access_stock_incoterms_system,stock.incoterms.system,model_stock_incoterms,base.group_system,1,1,1,1 +access_stock_warehouse_system,stock.warehouse.system,model_stock_warehouse,base.group_system,1,1,1,1 +access_stock_location_system,stock.location.system,model_stock_location,base.group_system,1,1,1,1 +access_stock_incoterms,stock.incoterms,model_stock_picking_move_wizard,base.group_system,1,0,0,0 +access_stock_warehouse,stock.warehouse,model_stock_picking_move_wizard,base.group_system,1,0,0,0 +access_stock_location,stock.location,model_stock_picking_move_wizard,base.group_system,1,0,0,0 access_stock_picking_move_wizard,stock.picking.move.wizard,model_stock_picking_move_wizard,stock.group_stock_user,1,0,0,0 -access_stock_lot,stock.lot,model_stock_lot,stock.group_stock_user,1,1,1,0 access_stock_tracking,stock.tracking,model_stock_tracking,stock.group_stock_user,1,1,1,0 access_stock_picking,stock.picking,model_stock_picking,stock.group_stock_user,1,1,1,1 access_stock_production_lot,stock.production.lot,model_stock_production_lot,stock.group_stock_user,1,1,1,0