c2c-oerpscenario team mailing list archive

[John B <justbe.john@xxxxxxxxx>]

Public bug reported:

When trying to write from a wizard to a normal object as non-super user,
receive the following error:

AccessError, Write access is restricted to your own records for
transient models (except for the super-user)

It looks like somewhere is_transient is being set on the object (e.g.
purchase.order), and check_access_rule() in orm tries to make sure
whoever created the purchase.order record is writing to it, rather than
handling it with the normal access checks.

is_transient should only be set on the osv_memory object.

Relatively simple to recreate using the latest trunk - just create a
wizard that writes to any normal object. Let me know if a test module is
required.

** Affects: openobject-server
     Importance: Undecided
         Status: New

-- 
You received this bug notification because you are a member of C2C
OERPScenario, which is subscribed to OpenERP Project Group.
https://bugs.launchpad.net/bugs/865877

Title:
  [trunk]Write from osv_memory to normal object fails with record access
  error

Status in OpenERP Server:
  New

Bug description:
  When trying to write from a wizard to a normal object as non-super
  user, receive the following error:

  AccessError, Write access is restricted to your own records for
  transient models (except for the super-user)

  It looks like somewhere is_transient is being set on the object (e.g.
  purchase.order), and check_access_rule() in orm tries to make sure
  whoever created the purchase.order record is writing to it, rather
  than handling it with the normal access checks.

  is_transient should only be set on the osv_memory object.

  Relatively simple to recreate using the latest trunk - just create a
  wizard that writes to any normal object. Let me know if a test module
  is required.

To manage notifications about this bug go to:
https://bugs.launchpad.net/openobject-server/+bug/865877/+subscriptions