Jigar Amin  (OpenERP) has proposed merging 
lp:~openerp-dev/openobject-addons/trunk-acl-event into lp:openobject-addons.

Requested reviews:
  OpenERP Core Team (openerp)

For more details, see:
https://code.launchpad.net/~openerp-dev/openobject-addons/trunk-acl-event/+merge/130332

Fixed/Improved the Security for Event & Association Modules.
Part of the Task : `access rights testing` - 
http://pad.openerp.com/p/rd-project.task-4261-V6AN2SSS
Kindly Review This,
Thank You
-- 
https://code.launchpad.net/~openerp-dev/openobject-addons/trunk-acl-event/+merge/130332
Your team OpenERP R&D Team is subscribed to branch 
lp:~openerp-dev/openobject-addons/trunk-acl-event.
=== modified file 'account/account_invoice_view.xml'
--- account/account_invoice_view.xml	2012-10-10 10:49:52 +0000
+++ account/account_invoice_view.xml	2012-10-18 12:53:35 +0000
@@ -623,7 +623,7 @@
         </record>
         <menuitem action="action_invoice_tree4" id="menu_action_invoice_tree4" parent="menu_finance_payables"/>
 
-        <act_window context="{'search_default_partner_id':[active_id], 'default_partner_id': active_id}" id="act_res_partner_2_account_invoice_opened" name="Invoices" res_model="account.invoice" src_model="res.partner"/>
+        <act_window context="{'search_default_partner_id':[active_id], 'default_partner_id': active_id}" id="act_res_partner_2_account_invoice_opened" name="Invoices" res_model="account.invoice" src_model="res.partner" groups="account.group_account_invoice"/>
 
         <act_window
            id="act_account_journal_2_account_invoice_opened"

=== modified file 'account/account_view.xml'
--- account/account_view.xml	2012-10-17 09:41:42 +0000
+++ account/account_view.xml	2012-10-18 12:53:35 +0000
@@ -2025,7 +2025,8 @@
             id="act_account_partner_account_move_all"
             name="Receivables &amp; Payables"
             res_model="account.move.line"
-            src_model="res.partner"/>
+            src_model="res.partner"
+            groups="account.group_account_invoice"/>
 
         <act_window context="{'search_default_partner_id':[active_id], 'default_partner_id': active_id}" id="act_account_partner_account_move" name="Journal Items" res_model="account.move.line" src_model="res.partner" groups="account.group_account_user"/>
 

=== modified file 'account/partner_view.xml'
--- account/partner_view.xml	2012-09-28 17:50:12 +0000
+++ account/partner_view.xml	2012-10-18 12:53:35 +0000
@@ -114,6 +114,7 @@
             context="{'search_default_partner_id':[active_id], 'default_partner_id': active_id}"
             src_model="res.partner"
             view_type="form"
+            groups="analytic.group_analytic_accounting"
             view_mode="tree,form,calendar"/>
 
     </data>

=== modified file 'crm/res_partner_view.xml'
--- crm/res_partner_view.xml	2012-10-08 14:26:19 +0000
+++ crm/res_partner_view.xml	2012-10-18 12:53:35 +0000
@@ -113,12 +113,12 @@
                     <button type="action"
                         string="Meetings"
                         name="%(base_calendar.action_crm_meeting)d"
-                        context="{'search_default_partner_ids': active_id, 'default_partner_ids' : [active_id]}"/>
+                        context="{'search_default_partner_ids': active_id, 'default_partner_ids' : [active_id]}" groups="base.group_sale_salesman"/>
                     <button type="action" string="Calls" 
                         name="%(crm.crm_case_categ_phone_create_partner)d" 
-                        context="{'search_default_partner_id': active_id, 'default_duration': 1.0}" />
+                        context="{'search_default_partner_id': active_id, 'default_duration': 1.0}" groups="base.group_sale_salesman"/>
                     <button type="action" string="Opportunities" attrs="{'invisible': [('customer', '=', False)]}"
-                        name="%(crm.crm_case_category_act_oppor11)d" context="{'search_default_partner_id': active_id}"/>
+                        name="%(crm.crm_case_category_act_oppor11)d" context="{'search_default_partner_id': active_id}" groups="base.group_sale_salesman"/>
                 </xpath>
             </field>
         </record>

=== modified file 'crm_claim/crm_claim_view.xml'
--- crm_claim/crm_claim_view.xml	2012-09-30 14:16:38 +0000
+++ crm_claim/crm_claim_view.xml	2012-10-18 12:53:35 +0000
@@ -258,6 +258,7 @@
             name="Claims"
             view_mode="tree,form"
             res_model="crm.claim"
+            groups="base.group_sale_salesman"
             src_model="res.partner"/>
 
      </data>

=== modified file 'event/event_view.xml'
--- event/event_view.xml	2012-10-15 15:28:52 +0000
+++ event/event_view.xml	2012-10-18 12:53:35 +0000
@@ -53,7 +53,7 @@
             <field name="view_type">form</field>
         </record>
         <menuitem name="Configuration" id="base.menu_marketing_config_root" parent="event_main_menu" sequence="30"/>
-        <menuitem name="Types of Events" id="menu_event_type" action="action_event_type" parent="base.menu_marketing_config_root" groups="base.group_no_one"/>
+        <menuitem name="Types of Events" id="menu_event_type" action="action_event_type" parent="base.menu_marketing_config_root" groups="event.group_event_manager"/>
 
         <!-- Events Organisation/CONFIGURATION/EVENTS -->
 

=== modified file 'membership/wizard/membership_invoice_view.xml'
--- membership/wizard/membership_invoice_view.xml	2012-08-08 13:06:14 +0000
+++ membership/wizard/membership_invoice_view.xml	2012-10-18 12:53:35 +0000
@@ -35,6 +35,7 @@
             multi="False"
             key2="client_action_multi"
             view_mode="form"
+            groups="account.group_account_invoice"
             id="action_membership_invoice_view"/>
 
     </data>

=== modified file 'mrp/mrp_view.xml'
--- mrp/mrp_view.xml	2012-10-15 05:03:20 +0000
+++ mrp/mrp_view.xml	2012-10-18 12:53:35 +0000
@@ -985,6 +985,7 @@
             id="act_product_manufacturing_open"
             name="Manufacturing Orders"
             view_id="mrp_production_tree_view"
+            groups="mrp.group_mrp_user,base.group_sale_salesman,stock.group_stock_user"
             res_model="mrp.production"
             src_model="product.product"/>
 

=== modified file 'portal_event/event_view.xml'
--- portal_event/event_view.xml	2012-09-07 08:47:36 +0000
+++ portal_event/event_view.xml	2012-10-18 12:53:35 +0000
@@ -9,7 +9,7 @@
             <field name="inherit_id" ref="event.view_event_form"/>
             <field name="arch" type="xml">
                 <xpath expr="//page[last()]" position="after">
-                    <page string="Portal Settings">
+                    <page string="Portal Settings" groups="event.group_event_manager">
                         <group>
                             <field name="visibility"/>
                         </group>

=== modified file 'product_margin/wizard/product_margin_view.xml'
--- product_margin/wizard/product_margin_view.xml	2012-08-09 06:05:16 +0000
+++ product_margin/wizard/product_margin_view.xml	2012-10-18 12:53:35 +0000
@@ -26,6 +26,7 @@
             view_mode="form"
             target="new"
             key2="client_action_multi"
+            groups="base.group_sale_manager"
             id="product_margin_act_window"/>
 
     </data>

=== modified file 'purchase/partner_view.xml'
--- purchase/partner_view.xml	2012-09-29 22:08:39 +0000
+++ purchase/partner_view.xml	2012-10-18 12:53:35 +0000
@@ -80,7 +80,7 @@
                         groups="purchase.group_purchase_user"/>
                     <button name="%(purchase.act_res_partner_2_supplier_invoices)d" type="action"
                         attrs="{'invisible': [('supplier', '=', False)]}"
-                        string="Supplier Invoices"/>
+                        string="Supplier Invoices" groups="account.group_account_invoice"/>
                 </xpath>
             </field>
         </record>

=== modified file 'stock/report/report_stock_view.xml'
--- stock/report/report_stock_view.xml	2012-09-27 08:38:39 +0000
+++ stock/report/report_stock_view.xml	2012-10-18 12:53:35 +0000
@@ -6,6 +6,7 @@
             context="{'product_id': active_id}"
             id="act_stock_product_location_open"
             name="Stock by Location"
+            groups="stock.group_stock_user,base.group_sale_salesman"
             res_model="stock.location"
             src_model="product.product"/>
 

=== modified file 'stock/stock_report.xml'
--- stock/stock_report.xml	2012-05-16 16:01:15 +0000
+++ stock/stock_report.xml	2012-10-18 12:53:35 +0000
@@ -1,7 +1,7 @@
 <?xml version="1.0" encoding="utf-8"?>
 <openerp>
     <data>
-        <report auto="False" id="report_product_history" model="product.product" name="stock.product.history" string="Stock Level Forecast"/>
+        <report auto="False" id="report_product_history" model="product.product" name="stock.product.history" string="Stock Level Forecast" groups="stock.group_stock_user"/>
         <report id="report_picking_list" model="stock.picking" name="stock.picking.list" string="Picking Slip" rml="stock/report/picking.rml"/>
         <report id="report_picking_list_in" model="stock.picking.in" name="stock.picking.list" string="Receipt Slip" rml="stock/report/picking.rml"/>
         <report id="report_picking_list_out" model="stock.picking.out" name="stock.picking.list" string="Delivery Slip" rml="stock/report/picking.rml"/>

=== modified file 'stock/stock_view.xml'
--- stock/stock_view.xml	2012-10-13 10:43:24 +0000
+++ stock/stock_view.xml	2012-10-18 12:53:35 +0000
@@ -1564,7 +1564,8 @@
             id="act_product_stock_move_open"
             name="Inventory Move"
             res_model="stock.move"
-            src_model="product.product"/>
+            src_model="product.product"
+            groups="base.group_sale_manager,stock.group_stock_user"/>
 
         <act_window
             context="{'search_default_future': 1,'search_default_product_id': [active_id], 'default_product_id': active_id}"
@@ -1572,7 +1573,8 @@
             id="act_product_stock_move_futur_open"
             name="Future Stock Moves"
             res_model="stock.move"
-            src_model="product.product"/>
+            src_model="product.product"
+            groups="base.group_sale_manager,stock.group_stock_user"/>
 
         <record id="ir_act_product_location_open" model="ir.values">
             <field name="key2">tree_but_open</field>

_______________________________________________
Mailing list: https://launchpad.net/~openerp-dev-gtk
Post to     : [email protected]
Unsubscribe : https://launchpad.net/~openerp-dev-gtk
More help   : https://help.launchpad.net/ListHelp

Reply via email to