openerp-community team mailing list archive

[Jonathan Vargas <jvargas@xxxxxxxxx>]

Hi,

I created an application that consumes OpenERP XMLRPC API to automatically
create invoices on OpenERP 6.1.

The application worked fine on a database we created for the development
environment, not for production. But when we tested with production
database, a severe problem appeared:

The "*search*" operation on OpenERP *res.company* object worked fine, but
when performing "*read*" operation on res.company it returns: *AccessDenied*
.

Here is the function we coded to get the Currency ID for a given Company ID:

http://pastebin.com/crwTmdaa

As you would notice, the commented code is the one that we expect to work,
but it's currently returning "AccessDenied". The uncommented after it,
performs a "search" operation that works against the "res_currency" object
directly, but's that's not what we want.

I checked group's permission on res.company object, on both development and
production databases, and they seem to be the same. We've also verified the
object ID's and they exists. By using the web interface, the same API user
is able to access all of the objects and read object's details normally.

We even imported the production database into the same OpenERP server
instance that also hosts the development database, in case of
miss-configuration or version problems, but the problem persists.

What should I look for? How can I debug deeper on the permission rules and
these XMLRPC calls to find what's the root cause?

Any idea why a "read" operation on "res_company" id is failing, but
"search" operation work?

The same happens for several other objects: "search" works, but "read"
operations on these objects fail. On development database, it works, so we
clearly think there is something specific on the production database.

Thanks in advance.

-- 
*Jonathan Vargas Rodríguez*
IT Business Solution Developer
Alkaid · Open Source Business Software
Office: 2553 5467, Mobile: 8568 3307
Web: alkaid.cr | E-mail: jvargas@xxxxxxxxx

*Your business needs + Our technical skills = Benefits.
That's my job. Don't be afraid to contact me*  :-)