openerp-india team mailing list archive

["Benoit Guillot - http://www.akretion.com" <1073087@xxxxxxxxxxxxxxxxxx>]

After a quick look in the code of the server, I think I found what can
causes this bug.

In the V7.0 because of the changes in res.partner and
res.partner.address, the method name_search() has changed.

In the method in the V7.0, to get the ids to read, there is a sql request, so the request doesn't consider the companies and access rights. 
If one of the ids is from the other company, then "Access Denied" is raised. 

I'm maybe wrong but you can have a look in the file
server/openerp/addons/base/res/res_partner.py

-- 
You received this bug notification because you are a member of OpenERP
Indian Team, which is subscribed to OpenERP Addons.
https://bugs.launchpad.net/bugs/1073087

Title:
  multi company Access Denied Document type: Partner, Operation: read

Status in OpenERP Addons (modules):
  Confirmed

Bug description:
  Multi company, Access Denied Document type: Partner, Operation: read

  Steps to produce.
  ------------------------

  login with admin

  install account,  sales, hr expense.

  create two company [companyA] and [companyB].

  create [usera for comapanya] with all managerial rights and [userb for companyb] hr officer right. 
  Here both users's Allowed Companies =  companyA, companyB.

  login via userb and create new employee empb.

  login via usera and try to create new [customer invoice]/SO for
  employee empb. Getting access error, even usera is manager?

  Access Denied
  The requested operation cannot be completed due to security restrictions. Please contact your system administrator.
  (Document type: Partner, Operation: read)

  It should not happen here, "OpenERP have somethings wrong
  configuration with access rights."

  Thanks.
  Kettor

To manage notifications about this bug go to:
https://bugs.launchpad.net/openobject-addons/+bug/1073087/+subscriptions