openerp-dev-web team mailing list archive

["Ravindra Mekhiya\(OpenERP\)" <rme@xxxxxxxxxxx>]

Ravindra Mekhiya(OpenERP) has proposed merging lp:~openerp-dev/openobject-addons/trunk-bug-731840-rme into lp:openobject-addons.

Requested reviews:
  OpenERP Core Team (openerp)
Related bugs:
  Bug #731840 in OpenERP Addons: "[6.0] crm mailgateway - attachment - handling"
  https://bugs.launchpad.net/openobject-addons/+bug/731840

For more details, see:
https://code.launchpad.net/~openerp-dev/openobject-addons/trunk-bug-731840-rme/+merge/53986

Hello,

- crm : one user should not having rights to see others attachment in CRM.

Thanks.
-- 
https://code.launchpad.net/~openerp-dev/openobject-addons/trunk-bug-731840-rme/+merge/53986
Your team OpenERP R&D Team is subscribed to branch lp:~openerp-dev/openobject-addons/trunk-bug-731840-rme.

=== modified file 'crm/security/crm_security.xml'
--- crm/security/crm_security.xml	2011-01-14 00:11:01 +0000
+++ crm/security/crm_security.xml	2011-03-18 13:38:30 +0000
@@ -26,6 +26,12 @@
         <field name="domain_force">[(1,'=',1)]</field>
         <field name="groups" eval="[(4, ref('base.group_sale_salesman_all_leads'))]"/>
     </record>
+    
+    <record id="ir_rule_personal_attachment" model="ir.rule">
+        <field name="name">Personal Attachment</field>
+        <field ref="base.model_ir_attachment" name="model_id"/>
+        <field name="domain_force">['|',('create_uid','=',user.id),('create_uid','=',False)]</field>
+    </record>
 
     <record model='ir.ui.menu' id='base.menu_base_partner'>
         <field name="groups_id" eval="[(4,ref('base.group_sale_manager')),(4,ref('base.group_sale_salesman'))]"/>

=== modified file 'document/security/document_security.xml'
--- document/security/document_security.xml	2011-01-14 00:11:01 +0000
+++ document/security/document_security.xml	2011-03-18 13:38:30 +0000
@@ -37,5 +37,13 @@
         <field eval="0" name="perm_read"/>
         <field eval="1" name="perm_create"/>
     </record>
+    
+    <record id="ir_rule_personal_attachment" model="ir.rule">
+        <field name="name">Personal Attachment</field>
+        <field ref="model_ir_attachment" name="model_id"/>
+        <field name="domain_force">['|',('user_id','=',user.id),('user_id','=',False)]</field>
+        <field name="groups" eval="[(4, ref('base.group_document_user'))]"/>
+    </record>
+    
 </data>
 </openerp>