Odoo Addons (MOVED TO GITHUB)

Missing Company access rule for Entries analysis report.

Bug #999506 reported by Paulius Sladkevičius @ hbee
8
This bug affects 1 person
Affects Status Importance Assigned to Milestone
Odoo Addons (MOVED TO GITHUB)
Fix Released
Low
OpenERP R&D Addons Team 3

Bug Description

All reports which are made with Postgresql view ignores all record rules, so multi company breaks here.

For example, If user belongs for company A, he/she can see all accounting data in the Accounting->Reporting->Entries analysis report and from B and C companies.

Related branches

lp:~openerp-dev/openobject-addons/trunk-bug-999506-amp
OpenERP Core Team: Pending requested
Diff: 184 lines (+45/-34)
2 files modified
account/security/account_security.xml (+44/-33)
portal_sale/security/portal_security.xml (+1/-1)
Revision history for this message
Amit Parik (amit-parik) wrote :

Hello Paulius,

First of all I want to say that record rule are also working for sql reports because we have used a osv.osv object for all sql report which is the same as all object. Would you please check "Invoices Analysis"(account.invoice.report) report where we have already set a record rule and it's working fine.

Indeed, we didn't set the record rule for (Entries analysis)account.entries.report object that's why you have seen all company's entry. Yes I agreed this report shouldn't view all company's data that's why we should be add a record rule for account.entries.report object.

So I am confirming this issue for missing access rules.

Thank you!

summary: - SQL view reports ignores user company and records rules
+ Missing Company access rule for Entries analysis report.
Changed in openobject-addons:
assignee: nobody → OpenERP R&D Addons Team 3 (openerp-dev-addons3)
importance: Undecided → Low
status: New → Confirmed
Revision history for this message
Paulius Sladkevičius @ hbee (komsas) wrote :

Hello Amit,

good to know that its working, because I saw same issue not only for account.invoice.report, so got idea that is bug for whole system. Will post here if I'll get remember where it was.

Revision history for this message
Amit Parik (amit-parik) wrote :

Hello Paulius,

I have added a record rule for Entries analysis report on lp:~openerp-dev/openobject-addons/trunk-bug-999506-amp branch with rev no : 6802 and rev if : <email address hidden>

This will solve your issue, So would you please check again using this patch.

This will merge with trunk soon.

Thanks for the reporting!

Changed in openobject-addons:
status: Confirmed → Fix Committed
Revision history for this message
Paulius Sladkevičius @ hbee (komsas) wrote :

Amit, I have tested it, works fine. Thanks!

Anto (abourguignon)
Changed in openobject-addons:
status: Fix Committed → Fix Released
To post a comment you must log in.
This report contains Public information  
Everyone can see this information.
Subscribing...

Other bug subscribers

Remote bug watches

Bug watches keep track of this bug in other bug trackers.