← Back to team overview

openerp-india team mailing list archive

[Bug 1021378] Re: "create" permission in res.users dont work with other users, not admin

 

Hi Mr. Stefan & diassynthesis,

I Think your last analysis about Operantors is the issue...and combining
those rules will generate the issue:

and i was thinking on that point, and i could fix it by doing does
steps:

1- Removing "General" state of the res.partner Record Rule with
condition <<<<
['|','|',('company_id.child_ids','child_of',[user.company_id.id]),('company_id','child_of',[user.company_id.id]),('company_id','=',False)]
>>>> and to don't lose rights, i affecte it to ALL GROUPS ....  /!\ IM
DOING SO TO BYPASS THE "AND" Operator /!\

2- Same thing for the Only Record Rule of res.users.

3- Added 2 record rules with condition [(1,'=',1)] and affect all groups
i need to give theme Rights ..( Project Managements...etc in my
case..anyway)

But we hope it will be fixed with a Strong way, or maybe change the security lines if its not an issue of record rules..
Regards,
--
Youness

-- 
You received this bug notification because you are a member of OpenERP
Indian Team, which is subscribed to OpenERP Server.
https://bugs.launchpad.net/bugs/1021378

Title:
  "create" permission in res.users dont work with other users, not admin

Status in OpenERP Community Backports (Server):
  Fix Released
Status in OpenERP Community Backports (Server) 7.0 series:
  Fix Released
Status in OpenERP Server:
  Fix Committed
Status in Therp Backports:
  Fix Released
Status in Therp Backports server-6.1 series:
  Fix Released

Bug description:
  When you create a new user and give permissions: Administration: "access rights". This group "access rights" has create permission to res.users table.
  Then login with this new user and try to create a new user, it dont work, the message is "Access Error Operation:Prohibited by the rules of access to or held in a document already removed (Operation: create, document type: res.users)"
  The result I expected was create a new user, by using a user different to admin, that has "access rights" permissions.
  The platform is ubuntu
  The Openerp Version is 6.1 rev. 4196

To manage notifications about this bug go to:
https://bugs.launchpad.net/ocb-server/+bug/1021378/+subscriptions


References