openerp-india team mailing list archive

[Landis <1073087@xxxxxxxxxxxxxxxxxx>]

Just did a quick Review of USER Rights.

Somehow USER A had been toggled to EMPLOYEE in HRO.   Set to Manager was
able to see contacts of admin and Save a New Contact.

This is after 2 Hours of Looking for problems in rules.

I do see that I am still a member of HR Employees Group, but also HR
Officer and HR Manager

I am suprised that a Employee cannot edit a Customer contact or Create a
new one even though those rights are called out.

SEPARATELY, I found that the "Sharing" right needs to be BLANK so that
other users can be simply assigned as managers or followers of projects,
and to see Projects created by others.  This seems wrong logic.

-- 
You received this bug notification because you are a member of OpenERP
Indian Team, which is subscribed to OpenERP Addons.
https://bugs.launchpad.net/bugs/1073087

Title:
  multi company Access Denied Document type: Partner, Operation: read

Status in OpenERP Addons (modules):
  Confirmed

Bug description:
  Multi company, Access Denied Document type: Partner, Operation: read

  Steps to produce.
  ------------------------

  login with admin

  install account,  sales, hr expense.

  create two company [companyA] and [companyB].

  create [usera for comapanya] with all managerial rights and [userb for companyb] hr officer right.
  Here both users's Allowed Companies =  companyA, companyB.

  login via userb and create new employee empb.

  login via usera and try to create new [customer invoice]/SO for
  employee empb. Getting access error, even usera is manager?

  Access Denied
  The requested operation cannot be completed due to security restrictions. Please contact your system administrator.
  (Document type: Partner, Operation: read)

  It should not happen here, "OpenERP have somethings wrong
  configuration with access rights."

  Thanks.
  Kettor

To manage notifications about this bug go to:
https://bugs.launchpad.net/openobject-addons/+bug/1073087/+subscriptions