From acad08d3a710b8c85498a85bd9569a7bd8eb80c1 Mon Sep 17 00:00:00 2001 From: Remi <remi@le-filament.com> Date: Fri, 20 Dec 2019 13:01:45 +0100 Subject: [PATCH] Fix security rules for deletion (cgscop#36) --- security/security_rules.xml | 9 ++++++--- 1 file changed, 6 insertions(+), 3 deletions(-) diff --git a/security/security_rules.xml b/security/security_rules.xml index 3757547..ab3c048 100644 --- a/security/security_rules.xml +++ b/security/security_rules.xml @@ -9,15 +9,18 @@ <field name="model_id" ref="calendar.model_calendar_event"/> <field name="domain_force">[('ur_id','=',user.company_id.ur_id.id)]</field> <field name="groups" eval="[(6, 0, [ref('base.group_user')])]"/> - <field eval="True" name="global"/> + <field name="perm_read" eval="True"/> + <field name="perm_write" eval="False"/> + <field name="perm_create" eval="False"/> + <field name="perm_unlink" eval="False"/> </record> <record id="calendar.calendar_event_rule_my" model="ir.rule"> <field name="name">My Calendar Events</field> <field name="model_id" ref="calendar.model_calendar_event"/> <field name="domain_force">[('user_id','=',user.id)]</field> <field name="groups" eval="[(6, 0, [ref('base.group_user')])]"/> - <field name="perm_read" eval="False"/> - <field name="perm_write" eval="False"/> + <field name="perm_read" eval="True"/> + <field name="perm_write" eval="True"/> <field name="perm_create" eval="True"/> <field name="perm_unlink" eval="True"/> </record> -- GitLab