Merge pull request #247 from Eficent/9.0-stock_putaway_product-security

[9.0][stock_putaway_strategy][FIX] Allows a user that is not Warehouse user or manager to access to the product form
This commit is contained in:
Jordi Ballester Alomar
2017-02-07 18:56:24 +01:00
committed by GitHub
3 changed files with 3 additions and 2 deletions

View File

@@ -5,7 +5,7 @@
{
'name': 'Putaway strategy per product',
'summary': 'Set a product location and put-away strategy per product',
'version': '9.0.1.0.0',
'version': '9.0.1.0.1',
'category': 'Inventory',
'website': 'http://www.apertoso.be',
'author': 'Apertoso N.V., '

View File

@@ -1,3 +1,4 @@
id,name,model_id:id,group_id:id,perm_read,perm_write,perm_create,perm_unlink
access_stock_product_putaway_strategy,stock_product_putaway_strategy managers,model_stock_product_putaway_strategy,stock.group_stock_manager,1,1,1,1
access_stock_product_putaway_user,stock_product_putaway_strategy user,model_stock_product_putaway_strategy,stock.group_stock_user,1,0,0,0
access_stock_product_putaway_base_user,stock_product_putaway_strategy all users,model_stock_product_putaway_strategy,base.group_user,1,0,0,0
1 id name model_id:id group_id:id perm_read perm_write perm_create perm_unlink
2 access_stock_product_putaway_strategy stock_product_putaway_strategy managers model_stock_product_putaway_strategy stock.group_stock_manager 1 1 1 1
3 access_stock_product_putaway_user stock_product_putaway_strategy user model_stock_product_putaway_strategy stock.group_stock_user 1 0 0 0
4 access_stock_product_putaway_base_user stock_product_putaway_strategy all users model_stock_product_putaway_strategy base.group_user 1 0 0 0

View File

@@ -9,7 +9,7 @@
<field name="inherit_id" ref="stock.view_template_property_form"/>
<field name="arch" type="xml">
<xpath expr="//group[@name='stock_property']" position="before">
<group colspan="4" name="putaway" string="Put Away Locations">
<group colspan="4" name="putaway" string="Put Away Locations" groups="stock.group_stock_user">
<field name="product_putaway_ids"
context="{'default_product_tmpl_id': is_product_variant and product_tmpl_id or active_id,
'default_product_product_id': is_product_variant and active_id or False}"