openerp-india team mailing list archive

[Marcos Mendez <marcos@xxxxxxxxxxxx>]

Great, then perhaps the better alternative is to have an option maybe in
the openerp-server.conf which enables/disables the manage databases. If
disabled it should hide the link on the web and disable (eg access
denied error) on the backend controller that allows create, drop, etc -
so that those methods can't be executed directly.

With this option we address both concerns.

On Jun 18, 2012, at 8:00, "Amit Parik \(OpenERP\)" <amp@xxxxxxxxxxx>
wrote:

> Hello Marcos,
> 
> I got you exactly bug some problem on my comment.
> 
> It's like this "IF we have put manage databases functionality available
> to the admin AFTER he logs in then there may be possibility he try to
> drop same database on he logs then problem will be generated  " how we
> can manage it..??
> 
> Thanks and waiting for your reply!
> 
> ** Changed in: openobject-server
>       Status: New => Incomplete
> 
> -- 
> You received this bug notification because you are subscribed to the bug
> report.
> https://bugs.launchpad.net/bugs/1013236
> 
> Title:
>  disabling manage databases functionality
> 
> Status in OpenERP Server:
>  Incomplete
> 
> Bug description:
>  There should be a way to disable the manage databases functionality in
>  the login screen, not just removing the link by editing base.xml, but
>  the disabling underlying code (controllers, views, etc), so that it
>  cannot be tampered with.
> 
> To manage notifications about this bug go to:
> https://bugs.launchpad.net/openobject-server/+bug/1013236/+subscriptions

-- 
You received this bug notification because you are a member of OpenERP
Indian Team, which is subscribed to OpenERP Server.
https://bugs.launchpad.net/bugs/1013236

Title:
  disabling manage databases functionality

Status in OpenERP Server:
  Incomplete

Bug description:
  There should be a way to disable the manage databases functionality in
  the login screen, not just removing the link by editing base.xml, but
  the disabling underlying code (controllers, views, etc), so that it
  cannot be tampered with.

To manage notifications about this bug go to:
https://bugs.launchpad.net/openobject-server/+bug/1013236/+subscriptions