c2c-oerpscenario team mailing list archive

["Thomas Winteler \(Win-Soft\)" <info@xxxxxxxxxxx>]

As i see, you only tested with "Demo User" and just assigned different
companies...

ok... here is my demo db with following configuration:
Company A "OpenERP S.A."
Company B "Test Company"
Both companies have a chart of accounts.

Two user
User A "Demo User" (demo,demo), assigned company: OpenERP S.A.
User B "Test User" (test,test), assigned company: Test Company

Admin User: admin/demo55

Attached is the demo_followup db and my addons-winsoft with the chart of
accounts we work...

Please check that and test it... If there is really a configuration
problem, point me to it... If not.. thanks for solving..

cheers
thomi

** Attachment added: "demo_followup_20110526_11_33.sql.zip"
   https://bugs.launchpad.net/openobject-addons/+bug/777850/+attachment/2143363/+files/demo_followup_20110526_11_33.sql.zip

-- 
You received this bug notification because you are a member of C2C
OERPScenario, which is subscribed to the OpenERP Project Group.
https://bugs.launchpad.net/bugs/777850

Title:
  account_followup uses SQL query for getting data, cirmumventing
  security rules

Status in OpenERP Modules (addons):
  Fix Released

Bug description:
  this happens in v6 and trunk

  Hi. 
  Currently account_followup uses SQL queries to get invoice and partners to sent followups to. This doesn't take security rules into account, which is wrong. And ORM way would do the right thing here. 

  For example a very bad effect of this is that in a multicompany
  situation any user sees the open invoices of other companies, which
  shouldn't be.

  The interesting stuff happens here:
  http://bazaar.launchpad.net/~openerp/openobject-
  addons/trunk/view/head:/account_followup/wizard/account_followup_print.py

  Thanks!