openerp-india team mailing list archive

[Yaiza Bailen <932085@xxxxxxxxxxxxxxxxxx>]

Public bug reported:

Hi,

Defining "perm_unlink" to 0 in ir.model.access.csv file is not working.
Allowing the user to delete records when it has been explicited that the
group he belongs to is not allowed to do that.

I tried with a very simple case: a user only belongs to a group (a
custom one) and I gave that group read, write, create permissions but NO
delete permissions to hr.department object. The user still could delete
a department.

Version of branches:

addons: 6552
addons-extra: 5619
server: 4043
web: 2174
client: 2046

Thanks,
Yaiza

** Affects: openobject-server
     Importance: Undecided
         Status: New

-- 
You received this bug notification because you are a member of OpenERP
Indian Team, which is subscribed to OpenERP Server.
https://bugs.launchpad.net/bugs/932085

Title:
  prohibition of deletion access in ir.model.access.csv does not work

Status in OpenERP Server:
  New

Bug description:
  Hi,

  Defining "perm_unlink" to 0 in ir.model.access.csv file is not
  working. Allowing the user to delete records when it has been
  explicited that the group he belongs to is not allowed to do that.

  I tried with a very simple case: a user only belongs to a group (a
  custom one) and I gave that group read, write, create permissions but
  NO delete permissions to hr.department object. The user still could
  delete a department.

  Version of branches:

  addons: 6552
  addons-extra: 5619
  server: 4043
  web: 2174
  client: 2046

  Thanks,
  Yaiza

To manage notifications about this bug go to:
https://bugs.launchpad.net/openobject-server/+bug/932085/+subscriptions