Odoo Addons (MOVED TO GITHUB)

Permissions on procurement

Bug #699784 reported by Open Net Sàrl
10
This bug affects 1 person
Affects Status Importance Assigned to Milestone
Odoo Addons (MOVED TO GITHUB)
Fix Released
Medium
OpenERP R&D Addons Team 2
Odoo Addons (MOVED TO GITHUB) 6.0

Bug Description

Module 'procurement'

Only the user with id = 1 is able to confirm
For other users, even if members of all groups
"AccessError
You can not write in this document (purchase.requisition) ! Be sure your user belongs to one of these groups: /."

Related branches

lp:~openerp-commiter/openobject-addons/trunk-addons-aag
Atik Agewan(OpenERP) (community): Needs Resubmitting
OpenERP Core Team: Pending requested
Diff: 775 lines (+91/-131)
37 files modified
account/i18n/pt_BR.po (+2/-3)
account/report/account_balance.py (+2/-0)
account/wizard/account_move_journal.py (+1/-1)
account/wizard/account_open_closed_fiscalyear.py (+2/-0)
account/wizard/account_report_balance_sheet.py (+2/-1)
account/wizard/account_report_common.py (+4/-1)
account/wizard/account_report_general_ledger.py (+1/-1)
account/wizard/account_report_partner_balance.py (+1/-1)
account/wizard/account_report_partner_ledger.py (+1/-1)
account/wizard/account_report_profit_loss.py (+1/-1)
account/wizard/account_validate_account_move.py (+3/-0)
account/wizard/account_vat.py (+3/-0)
account_invoice_layout/i18n/hu.po (+3/-3)
auction/wizard/auction_pay_sel.py (+5/-5)
board/wizard/board_menu_create.py (+3/-3)
email_template/wizard/email_template_send_wizard.py (+10/-10)
hr_timesheet/i18n/pt_BR.po (+1/-1)
hr_timesheet/wizard/hr_timesheet_print_employee.py (+3/-1)
hr_timesheet_invoice/wizard/hr_timesheet_final_invoice_create.py (+3/-0)
mrp/i18n/es_AR.po (+2/-3)
mrp/wizard/mrp_product_produce.py (+2/-2)
pad/__openerp__.py (+1/-1)
point_of_sale/i18n/pt_BR.po (+1/-1)
project_scrum/wizard/project_scrum_backlog_create_task.py (+4/-2)
project_scrum/wizard/project_scrum_backlog_sprint.py (+3/-0)
purchase/purchase.py (+7/-4)
purchase_requisition/wizard/purchase_requisition_partner.py (+4/-5)
stock/i18n/stock.pot (+0/-5)
stock/wizard/stock_move.py (+0/-29)
stock/wizard/stock_move_view.xml (+0/-28)
stock/wizard/stock_split_move.py (+1/-1)
survey/wizard/survey_browse_answer.py (+7/-8)
survey/wizard/survey_print.py (+2/-3)
survey/wizard/survey_print_answer.py (+1/-1)
survey/wizard/survey_print_statistics.py (+1/-1)
survey/wizard/survey_selection.py (+3/-3)
survey/wizard/survey_send_invitation.py (+1/-1)
Atik Agewan(OpenERP) (community): Needs Resubmitting
Rucha (Open ERP) (community): Needs Fixing
Diff: 134 lines (+15/-11)
9 files modified
board/wizard/board_menu_create.py (+3/-1)
stock/wizard/stock_move.py (+1/-1)
stock/wizard/stock_split_move.py (+1/-1)
survey/wizard/survey_browse_answer.py (+3/-1)
survey/wizard/survey_print.py (+2/-2)
survey/wizard/survey_print_answer.py (+1/-1)
survey/wizard/survey_print_statistics.py (+1/-1)
survey/wizard/survey_selection.py (+2/-2)
survey/wizard/survey_send_invitation.py (+1/-1)
Rejected for merging into lp:openobject-addons
OpenERP Core Team: Pending requested
Diff: 513 lines (+95/-74)
16 files modified
mrp/mrp.py (+20/-2)
mrp_operations/mrp_operations.py (+8/-2)
procurement/procurement_view.xml (+3/-2)
product/pricelist.py (+4/-4)
product/product.py (+3/-3)
product/report/pricelist.py (+1/-1)
product_margin/product_margin_view.xml (+3/-0)
project_mrp/project_procurement.py (+1/-1)
purchase/purchase.py (+8/-5)
purchase/purchase_view.xml (+6/-6)
stock/stock.py (+15/-13)
stock/wizard/stock_invoice_onshipping.py (+2/-2)
stock/wizard/stock_location_product.py (+1/-1)
stock/wizard/stock_move.py (+0/-28)
stock/wizard/stock_partial_picking.py (+19/-3)
stock/wizard/stock_return_picking.py (+1/-1)
Revision history for this message
DBR (OpenERP) (dbr-openerp) wrote :

Hello,

Would you please elaborate more with proper example.
Also explain that User's assigned groups.
Because, Administrator have id 1.
That's why id 1 user is able to confirm it.

Thanks.

Changed in openobject-addons:
status: New → Incomplete
Revision history for this message
Open Net Sàrl (openerp-open-net) wrote :

Hi,

It's written in the description
"For other users, even if members of all groups"

Normal message, should be
¨"AccessError
You can not write in this document (purchase.requisition) ! Be sure your user belongs to one of these groups: <name of the group>"

But with me message
"AccessError
You can not write in this document (purchase.requisition) ! Be sure your user belongs to one of these groups: /."

I suspect that NO group at all have this right, user with id = 1 goes through, but not any others

Revision history for this message
Amit Parik (amit-parik) wrote :

Hello,

The problem is in ir.model.access.csv file in purchase_requisition module. The access id passed in "Purchase/User" and "Stock/Manager" groups are same. The access id must be unique for each group.

Thanks.

Changed in openobject-addons:
assignee: nobody → OpenERP R&D Addons Team 2 (openerp-dev-addons2)
importance: Undecided → Medium
status: Incomplete → Confirmed
Revision history for this message
Atik Agewan(OpenERP) (aag-openerp) wrote :

Hello Open Net Sàrl,

Thanks for reporting,
It has been fixed in lp:~openerp-commiter/openobject-addons/trunk-addons-aag
Revision ID: <email address hidden>
Revision num: 5059
It will be available in trunk soon,

Changed in openobject-addons:
status: Confirmed → In Progress
status: In Progress → Fix Committed
Rucha (Open ERP) (rpa-openerp)
Changed in openobject-addons:
status: Fix Committed → Fix Released
milestone: none → 6.0
To post a comment you must log in.
This report contains Public information  
Everyone can see this information.
Subscribing...

Other bug subscribers

Remote bug watches

Bug watches keep track of this bug in other bug trackers.