openerp-india team mailing list archive

[Anton Chepurov <anton.chepurov@xxxxxxxxx>]

Public bug reported:

- Recreate Delivery Order
- Ignore Exception
- Cancel Order

These are 3 buttons added to the Sale Order form by
/sale_stock/sale_stock_view.xml file. You can locate them in the file by
looking for: states="shipping_except".

The buttons don't have groups="base.group_user", so they are VISIBLE to Portal users.
If you go further with allowing your customers to modify Sale Orders, then the buttons also become CLICKABLE :)

Not smth we would expect our customers to do, right?

So we'd better add groups="base.group_user" to those buttons instead :)

** Affects: openobject-addons
     Importance: Undecided
         Status: New

-- 
You received this bug notification because you are a member of OpenERP
Indian Team, which is subscribed to OpenERP Addons.
https://bugs.launchpad.net/bugs/1283529

Title:
  Sale Order control buttons visible to Portal users

Status in OpenERP Addons (modules):
  New

Bug description:
  - Recreate Delivery Order
  - Ignore Exception
  - Cancel Order

  These are 3 buttons added to the Sale Order form by
  /sale_stock/sale_stock_view.xml file. You can locate them in the file
  by looking for: states="shipping_except".

  The buttons don't have groups="base.group_user", so they are VISIBLE to Portal users.
  If you go further with allowing your customers to modify Sale Orders, then the buttons also become CLICKABLE :)

  Not smth we would expect our customers to do, right?

  So we'd better add groups="base.group_user" to those buttons instead
  :)

To manage notifications about this bug go to:
https://bugs.launchpad.net/openobject-addons/+bug/1283529/+subscriptions