← Back to team overview

openerp-community team mailing list archive

Re: security Vulnerability or duplication in OpenERP??

 

Hi... you can do it by configuration, without programing.

If you select a menu and you click ctrl+l, the menu settings are shown. You
can grant access to a menu to a group. If you don't set any group, menu will
be accesible to any group. If you set the group, menu will be accessible
only to group you are setting.

This way you can easily grant access or not to any menu you can see on tree.

Wishing this helps.

Ana

2010/5/22 Masoom Alam <masoom.alam@xxxxxxxxx>

> Hi Every one,
>
>
> I am having two problems, please identify, whether I am doing some thing
> wrong, or this thing is not possible in OpenERP:
>
> *Problem 1*
>
>    1. Whenever, I give access rights on an object, or set of objects to a
>    particular user, all the menus related to that object are automatically
>    accessible by that user. For example, in the account_voucher, if a list of
>    objects such as account.voucher, account.journal etc, etc.  which are
>    required for a user, are given, all the menus under the voucher Entries are
>    automatically assigned. This is the default behavior. right?
>    2. Does this mean that there is no need to have
>    "Administration--->Security----->Grant Access to Menus", some how granting
>    access to menus is useless, since objects access is needed and when I give
>    object access, menus access is automatically granted.
>    3. Is there is some way, that i can grant access to a list of objects
>    to two or three users, but restrict access to menus?
>    4. Scenario: I want to give access to user1 to Bank Receipt Voucher
>    while to user2, Cash Payment Voucher. Now menus are different, but objects
>    are same.
>
> *Problem 2*
> *
> *
>
>    1. in the _columns{}, whenever a one2many() relation is chosen for a
>    field, on search, the fields associated with the "many portion" are
>    automatically shown. Can we restrict this view, i mean certain
>    columns/fields from the "many part" can be hidden from particular users,
>    while certain can be shown for search purpose only?
>
>
>
> Thanking you in advance.
> Regards,
> MM Alam
>
> _______________________________________________
> Mailing list: https://launchpad.net/~openerp-community<https://launchpad.net/%7Eopenerp-community>
> Post to     : openerp-community@xxxxxxxxxxxxxxxxxxx
> Unsubscribe : https://launchpad.net/~openerp-community<https://launchpad.net/%7Eopenerp-community>
> More help   : https://help.launchpad.net/ListHelp
>
>


-- 
Ana Juaristi Olalde
Consultor Freelance OpenERP
www.anajuaristi.com
www.openerpsite.com
www.avanzosc.com
677 93 42 59 - 943 85 06 25

Follow ups

References