c2c-oerpscenario team mailing list archive

["Lorenzo Battistini - agilebg.com" <lorenzo.battistini@xxxxxxxxxxx>]

Hello Stefan,

actually, I think the statement "If there are multiple rules on same object, then all of them are joined using OR operator" to be misleading.
If it relates to global rules, they should be combined with AND (and so it is)

This is better explained here: http://bazaar.launchpad.net/~openerp
/openobject-server/6.0/view/3404/bin/addons/base/ir/ir.xml#L1667

Note that we are talking about group-specific rules, so they (rules
associated to the same group) should be combined with AND operator and
with OR if user belonged to several groups (in this case, 'test' belongs
to 'group1' only)

-- 
You received this bug notification because you are a member of C2C
OERPScenario, which is subscribed to the OpenERP Project Group.
https://bugs.launchpad.net/bugs/766982

Title:
  If you associate 2 or more groups to an ir.rule, rules are not
  correctly applied

Status in OpenERP Server:
  New

Bug description:
  Steps:
  1- create new db with only 'base' module
  2- create 2 groups: 'group1' and 'group2'
  3- create 2 rules on res.partner:
      - 'rule1' with domain: [('name','=','rule1')] and groups: 'group1'
      - 'rule2' with domain: [('ref','=','rule2')] and groups: 'group1' and 'group2'
  4- create user 'test' and associate to 'group1'
  5- create 2 partners:
      - with name: 'rule1' and ref: 'rule2'
      - with name: 'test' and ref: 'rule2'
  6- login with user 'test'
  7- you'll see both of partners

  This is wrong because since the user 'test' belongs to 'group1' and this group contains 2 rules, these rules must be combined with AND operator. So, user 'test' should see first partner only.
  This happens because second rule and both 2 rules are combined with OR:
  ((rule1 AND rule2) OR rule2)
  I suppose the problem to be connected with line 117 of ir_rule.py: http://bazaar.launchpad.net/~openerp/openobject-server/6.0/view/3404/bin/addons/base/ir/ir_rule.py#L115
  Instead of adding every group of the rule, you should check whether the user belongs to the group that will be added