> - Using the root context switching in the code everywhere it is > needed based on the default access right define in Tryton. > This means the developper must take care of this everytime he > write code. This is a little bit constraining but it has the > advantage to execute the smaller part of the code as root. > > - Remove the access right from within the CRUD to move it just on > the rpc calls and run all the code as root. > This has the advantage to be simple but it is a bad design for > security principle to run the least possible code as root.
+1 on this solution > > So I would like to collect thoughts about this topic to decide how to > fix "account_stock_anglo_saxon" and the future issues. > -- [email protected] mailing list
