changeset dbe1fca3204e in modules/account:default
details: https://hg.tryton.org/modules/account?cmd=changeset&node=dbe1fca3204e
description:
Remove read access to non account group of computed reporting fields
The computed fields on account and account type that are used for
reporting
should have the same access right as the other reports.
issue11504
review425191003
diffstat:
account.xml | 64 +++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++
1 files changed, 64 insertions(+), 0 deletions(-)
diffs (88 lines):
diff -r 33c9ef88e247 -r dbe1fca3204e account.xml
--- a/account.xml Tue May 31 23:54:18 2022 +0200
+++ b/account.xml Tue May 31 23:56:11 2022 +0200
@@ -218,6 +218,26 @@
<field name="perm_delete" eval="True"/>
</record>
+ <record model="ir.model.field.access" id="access_account_type_amount">
+ <field name="field" search="[('model.model', '=',
'account.account.type'), ('name', '=', 'amount')]"/>
+ <field name="perm_read" eval="False"/>
+ </record>
+ <record model="ir.model.field.access"
id="access_account_type_amount_account">
+ <field name="field" search="[('model.model', '=',
'account.account.type'), ('name', '=', 'amount')]"/>
+ <field name="group" ref="group_account"/>
+ <field name="perm_read" eval="True"/>
+ </record>
+
+ <record model="ir.model.field.access"
id="access_account_type_amount_cmp">
+ <field name="field" search="[('model.model', '=',
'account.account.type'), ('name', '=', 'amount_cmp')]"/>
+ <field name="perm_read" eval="False"/>
+ </record>
+ <record model="ir.model.field.access"
id="access_account_type_amount_cmp_account">
+ <field name="field" search="[('model.model', '=',
'account.account.type'), ('name', '=', 'amount_cmp')]"/>
+ <field name="group" ref="group_account"/>
+ <field name="perm_read" eval="True"/>
+ </record>
+
<record model="ir.rule.group" id="rule_group_account_type_companies">
<field name="name">User in companies</field>
<field name="model"
@@ -243,6 +263,10 @@
<field name="model">account.account.type,-1</field>
<field name="action" ref="report_account_type_statement"/>
</record>
+ <record model="ir.action-res.group"
id="report_account_type_statement_group_account">
+ <field name="action" ref="report_account_type_statement"/>
+ <field name="group" ref="group_account"/>
+ </record>
<record model="ir.ui.view" id="account_template_view_form">
<field name="model">account.account.template</field>
@@ -496,6 +520,46 @@
<field name="perm_delete" eval="True"/>
</record>
+ <record model="ir.model.field.access" id="access_account_balance">
+ <field name="field" search="[('model.model', '=',
'account.account'), ('name', '=', 'balance')]"/>
+ <field name="perm_read" eval="False"/>
+ </record>
+ <record model="ir.model.field.access"
id="access_account_balance_account">
+ <field name="field" search="[('model.model', '=',
'account.account'), ('name', '=', 'balance')]"/>
+ <field name="group" ref="group_account"/>
+ <field name="perm_read" eval="True"/>
+ </record>
+
+ <record model="ir.model.field.access" id="access_account_credit">
+ <field name="field" search="[('model.model', '=',
'account.account'), ('name', '=', 'credit')]"/>
+ <field name="perm_read" eval="False"/>
+ </record>
+ <record model="ir.model.field.access"
id="access_account_credit_account">
+ <field name="field" search="[('model.model', '=',
'account.account'), ('name', '=', 'credit')]"/>
+ <field name="group" ref="group_account"/>
+ <field name="perm_read" eval="True"/>
+ </record>
+
+ <record model="ir.model.field.access" id="access_account_debit">
+ <field name="field" search="[('model.model', '=',
'account.account'), ('name', '=', 'debit')]"/>
+ <field name="perm_read" eval="False"/>
+ </record>
+ <record model="ir.model.field.access"
id="access_account_debit_account">
+ <field name="field" search="[('model.model', '=',
'account.account'), ('name', '=', 'debit')]"/>
+ <field name="group" ref="group_account"/>
+ <field name="perm_read" eval="True"/>
+ </record>
+
+ <record model="ir.model.field.access"
id="access_account_amount_second_currency">
+ <field name="field" search="[('model.model', '=',
'account.account'), ('name', '=', 'amount_second_currency')]"/>
+ <field name="perm_read" eval="False"/>
+ </record>
+ <record model="ir.model.field.access"
id="access_account_amount_second_currency_account">
+ <field name="field" search="[('model.model', '=',
'account.account'), ('name', '=', 'amount_second_currency')]"/>
+ <field name="group" ref="group_account"/>
+ <field name="perm_read" eval="True"/>
+ </record>
+
<record model="ir.rule.group" id="rule_group_account_companies">
<field name="name">User in companies</field>
<field name="model" search="[('model', '=', 'account.account')]"/>
