From acad08d3a710b8c85498a85bd9569a7bd8eb80c1 Mon Sep 17 00:00:00 2001
From: Remi <remi@le-filament.com>
Date: Fri, 20 Dec 2019 13:01:45 +0100
Subject: [PATCH] Fix security rules for deletion (cgscop#36)

---
 security/security_rules.xml | 9 ++++++---
 1 file changed, 6 insertions(+), 3 deletions(-)

diff --git a/security/security_rules.xml b/security/security_rules.xml
index 3757547..ab3c048 100644
--- a/security/security_rules.xml
+++ b/security/security_rules.xml
@@ -9,15 +9,18 @@
             <field name="model_id" ref="calendar.model_calendar_event"/>
             <field name="domain_force">[('ur_id','=',user.company_id.ur_id.id)]</field>
             <field name="groups" eval="[(6, 0, [ref('base.group_user')])]"/>
-            <field eval="True" name="global"/>
+            <field name="perm_read" eval="True"/>
+            <field name="perm_write" eval="False"/>
+            <field name="perm_create" eval="False"/>
+            <field name="perm_unlink" eval="False"/>
         </record>
         <record id="calendar.calendar_event_rule_my" model="ir.rule">
             <field name="name">My Calendar Events</field>
             <field name="model_id" ref="calendar.model_calendar_event"/>
             <field name="domain_force">[('user_id','=',user.id)]</field>
             <field name="groups" eval="[(6, 0, [ref('base.group_user')])]"/>
-            <field name="perm_read" eval="False"/>
-            <field name="perm_write" eval="False"/>
+            <field name="perm_read" eval="True"/>
+            <field name="perm_write" eval="True"/>
             <field name="perm_create" eval="True"/>
             <field name="perm_unlink" eval="True"/>
         </record>
-- 
GitLab