changeset 92d3800cdf20 in modules/purchase_request:default
details:
https://hg.tryton.org/modules/purchase_request?cmd=changeset&node=92d3800cdf20
description:
Rely on check access to prevent user to create purchase request
Since issue10536 the fields quantity and company are not necessary set
when
copying request. So it is no more a distinct behavior to detect user
operation.
diffstat:
purchase_request.py | 9 ++++-----
purchase_request.xml | 2 +-
2 files changed, 5 insertions(+), 6 deletions(-)
diffs (31 lines):
diff -r 47f2271afca9 -r 92d3800cdf20 purchase_request.py
--- a/purchase_request.py Sat Oct 30 11:32:03 2021 +0200
+++ b/purchase_request.py Sat Oct 30 17:35:21 2021 +0200
@@ -316,11 +316,10 @@
@classmethod
def create(cls, vlist):
- for vals in vlist:
- for field_name in ('quantity', 'company'):
- if vals.get(field_name) is None:
- raise AccessError(
- gettext('purchase_request.msg_request_no_create'))
+ transaction = Transaction()
+ if transaction.user != 0 and transaction.context.get('_check_access'):
+ raise AccessError(
+ gettext('purchase_request.msg_request_no_create'))
return super(PurchaseRequest, cls).create(vlist)
@classmethod
diff -r 47f2271afca9 -r 92d3800cdf20 purchase_request.xml
--- a/purchase_request.xml Sat Oct 30 11:32:03 2021 +0200
+++ b/purchase_request.xml Sat Oct 30 17:35:21 2021 +0200
@@ -171,7 +171,7 @@
<field name="group" ref="group_purchase_request"/>
<field name="perm_read" eval="True"/>
<field name="perm_write" eval="True"/>
- <field name="perm_create" eval="True"/>
+ <field name="perm_create" eval="False"/>
<field name="perm_delete" eval="True"/>
</record>
