openerp-india team mailing list archive

[GrtSrkn <1073829@xxxxxxxxxxxxxxxxxx>]

This seems to work, however you leave permission delete active, this
leads to the users can't delete it's own notes. Only the administrator
can delete notes.

I just do not understand the security rule in general...

-- 
You received this bug notification because you are a member of OpenERP
Indian Team, which is subscribed to OpenERP Addons.
https://bugs.launchpad.net/bugs/1073829

Title:
  Only followers can access a sticky notes gives error for non
  administrators

Status in OpenERP Addons (modules):
  Fix Committed

Bug description:
  When a non administrator tries to add a note, you cen enter your text
  as should, as soon you click enter the detail edit screen appears in a
  popup, you can enter some details but when you click save you'll get
  system warning:

  Access Denied
  The requested operation cannot be completed due to security restrictions. Please contact your system administrator.
  (Document type: Note, Operation: create) 

  
  After checking the access rights, they seem to be correct. I noticed that the following security record rule is related:

  Settings - Record Rules : Only followers can access a sticky notes
  It states : [('message_follower_ids','=',user.partner_id.id)]

  When I remove this rule it works, but I guess it has a reason it is in
  the standard.

  Also tested in the runbot. Only in runbot the popup with detail editor is not showing, it gives the message "You must configure the etherpad through the menu Setting > Companies > Companies, in the configuration tab of your company".
  The result is however the same, when clicking save the error message appears.

To manage notifications about this bug go to:
https://bugs.launchpad.net/openobject-addons/+bug/1073829/+subscriptions