openerp-india team mailing list archive

[diassynthesis <diassynthesis@xxxxxxxxx>]

Hi everybody;

Better investigations, the logical way:

1-  An OpenERP user (as employee) can't be a Portal user, nor an Anonymous user and "Vice Versa".
      This mean that for the case of the error on 'res.partner' there is no Bug. The "Message error generated"can be considered as " a bad error handling", it can be replaced for examlpe by another message like " You are not autorized to perform this action", or for a better handling of such errors a message error can be raised when in configuration panel we try to check the boxes "Portal user" and/or "Anonymous user" for a regular user (Sale user, Purchase user ....) (a message like "WARNING: THIS USER CAN'T BE A PORTAL USER OR AN ANONYMOUS USER").

2-  For the case of the error for the Model 'res.users' ("user can't add another user"): What if (in OpenERP) only admin user is able to add "another user" (maybe for a better  level of security management )???
(Precision I'm not talking about adding an employee in HR, but about OpenERP system user which may also be an employee).

Thank you for you all and Best regards.

-- 
You received this bug notification because you are a member of OpenERP
Indian Team, which is subscribed to OpenERP Server.
https://bugs.launchpad.net/bugs/1021378

Title:
  "create" permission in res.users dont work with other users, not admin

Status in OpenERP Community Backports (Server):
  Fix Released
Status in OpenERP Community Backports (Server) 7.0 series:
  Fix Released
Status in OpenERP Server:
  Fix Committed
Status in Therp Backports:
  Fix Released
Status in Therp Backports server-6.1 series:
  Fix Released

Bug description:
  When you create a new user and give permissions: Administration: "access rights". This group "access rights" has create permission to res.users table.
  Then login with this new user and try to create a new user, it dont work, the message is "Access Error Operation:Prohibited by the rules of access to or held in a document already removed (Operation: create, document type: res.users)"
  The result I expected was create a new user, by using a user different to admin, that has "access rights" permissions.
  The platform is ubuntu
  The Openerp Version is 6.1 rev. 4196

To manage notifications about this bug go to:
https://bugs.launchpad.net/ocb-server/+bug/1021378/+subscriptions