>    - Using the root context switching in the code everywhere it is
>      needed based on the default access right define in Tryton.
>      This means the developper must take care of this everytime he
>      write code. This is a little bit constraining but it has the
>      advantage to execute the smaller part of the code as root.
>
>    - Remove the access right from within the CRUD to move it just on
>      the rpc calls and run all the code as root.
>      This has the advantage to be simple but it is a bad design for
>      security principle to run the least possible code as root.

+1 on this solution
>
> So I would like to collect thoughts about this topic to decide how to
> fix "account_stock_anglo_saxon" and the future issues.
>

-- 
[email protected] mailing list

Reply via email to