c2c-oerpscenario team mailing list archive

Thread
Date

[Bug 680934] Re: [6.0RC1] corporate intelligence - process selection does not respect user/group priviledges

To: c2c-oerpscenario@xxxxxxxxxxxxxxxxxxx
From: Antony Lesuisse <al@xxxxxxxxxxx>
Date: Wed, 15 Dec 2010 18:43:06 -0000
Reply-to: Bug 680934 <680934@xxxxxxxxxxxxxxxxxx>
Sender: bounces@xxxxxxxxxxxxx

Thanks for the report.

As sale/user you have the right to see your invoices, removing the group
accouting/invoice hides the menu but it's still possible to get access
to the invoice from the process or from the history tab of the sale
order. However you don't have access to account.move nor
account.move.line. Tested with addons revno 4015.

** Project changed: openobject-client-web => openobject-addons

** Changed in: openobject-addons
       Status: New => Invalid

-- 
You received this bug notification because you are a member of C2C
OERPScenario, which is subscribed to the OpenERP Project Group.
https://bugs.launchpad.net/bugs/680934

Title:
  [6.0RC1] corporate intelligence - process selection does not respect user/group priviledges

Status in OpenObject Addons Modules:
  Invalid

Bug description:
  i removed accounting from user demo and was able to select customer invoices from process and navigate to accounting entries

IMHO clicking the right bottom icon of process nodes must check user/group read permissions