act_window does not honor security access rules

Bug #408974 reported by Ferdinand
6
This bug affects 1 person
Affects Status Importance Assigned to Milestone
Odoo Server (MOVED TO GITHUB)
Invalid
Undecided
Unassigned

Bug Description

also the security acces rules do not permit access an object the action window menu entry is presented to the user
after click an arror message is issued

"You can not read this document! (.......OBJ NAME ....)"

IMHO the menu item should not appear at all if the USER/GROUP has no (read) access rights

users are usually frustrated if they get an offer, which is later denyed.

Revision history for this message
Jay Vora (Serpent Consulting Services) (jayvora) wrote :

Hello Ferdinand,

Can you please apply the following patch and let us know the updates?

Thanks.

Changed in openobject-server:
status: New → Confirmed
Changed in openobject-server:
status: Confirmed → In Progress
Revision history for this message
Jay Vora (Serpent Consulting Services) (jayvora) wrote :

Hello Ferdinand,

would you please check this in trunk?

It has been fixed.

Thank you.

Changed in openobject-server:
status: In Progress → Invalid
To post a comment you must log in.
This report contains Public information  
Everyone can see this information.

Other bug subscribers

Remote bug watches

Bug watches keep track of this bug in other bug trackers.