← Back to team overview

c2c-oerpscenario team mailing list archive

[Bug 730502] [NEW] Giving access only to object shows menu

 

Public bug reported:

I create new security group in xml and give rights to menu etc:

Code:
<record model="res.groups" id="group_prino_workshift_master">
         <field name="name">Master</field>
      </record>
      
      <record id="prino_menu_hala" model="ir.ui.menu">
         <field eval="[(6,0,[ref('group_prino_workshift_master')])]" name="groups_id"/>
      </record>      
      
      <record id="prino_workshift_master_wizard" model="ir.ui.menu">
         <field eval="[(6,0,[ref('group_prino_workshift_master')])]" name="groups_id"/>
      </record>


Next in ir.model.access.csv I give right to read product_product (I need it in my module):

Code:
"id","name","model_id:id","group_id:id","perm_read","perm_write","perm_create","perm_unlink"
[...]
"access_master_product","name_access_master_product","product.model_product_product","group_prino_workshift_master",1,0,0,0
"access_master_producttemp","name_access_master_producttemp","product.model_product_template","group_prino_workshift_master",1,0,0,0 [...]


Next i create new user, give him only group I just made. He sees the menus I want, but also the products menu (Products/Products). I don't want him to see this. 

I did the same manually in Administration/ User/ Groups etc. The
situation is the same. I have 5.0.6 version, Ubuntu 9

Any idea?

** Affects: openobject-client
     Importance: Undecided
         Status: New

-- 
You received this bug notification because you are a member of C2C
OERPScenario, which is subscribed to the OpenERP Project Group.
https://bugs.launchpad.net/bugs/730502

Title:
  Giving access only to object shows menu

Status in OpenERP GTK Client:
  New

Bug description:
  I create new security group in xml and give rights to menu etc:

  Code:
  <record model="res.groups" id="group_prino_workshift_master">
           <field name="name">Master</field>
        </record>
        
        <record id="prino_menu_hala" model="ir.ui.menu">
           <field eval="[(6,0,[ref('group_prino_workshift_master')])]" name="groups_id"/>
        </record>      
        
        <record id="prino_workshift_master_wizard" model="ir.ui.menu">
           <field eval="[(6,0,[ref('group_prino_workshift_master')])]" name="groups_id"/>
        </record>

  
  Next in ir.model.access.csv I give right to read product_product (I need it in my module):

  Code:
  "id","name","model_id:id","group_id:id","perm_read","perm_write","perm_create","perm_unlink"
  [...]
  "access_master_product","name_access_master_product","product.model_product_product","group_prino_workshift_master",1,0,0,0
  "access_master_producttemp","name_access_master_producttemp","product.model_product_template","group_prino_workshift_master",1,0,0,0 [...]

  
  Next i create new user, give him only group I just made. He sees the menus I want, but also the products menu (Products/Products). I don't want him to see this. 

  I did the same manually in Administration/ User/ Groups etc. The
  situation is the same. I have 5.0.6 version, Ubuntu 9

  Any idea?



Follow ups

References