[v7]portal user: Partner Object Access Denied

Bug #1235639 reported by KennyLeung
8
This bug affects 1 person
Affects Status Importance Assigned to Milestone
Odoo Addons (MOVED TO GITHUB)
Confirmed
Medium
OpenERP Publisher's Warranty Team

Bug Description

It will occur a warning when a portal user belongs to a company open a quotations.

If the portal user is not belong to a company, the error will not occur.

The warning messages:
---------------------------------------------------------------------------
Access Denied

The requested operation cannot be completed due to security restrictions. Please contact your system administrator.

(Document type: Partner, Operation: read)
---------------------------------------------------------------------------

This bug has been also reported by Borni DHIFI before:

http://help.openerp.com/question/13536/access-denied-customer-portal/

For more information, see the video of operations attached below.

Revision history for this message
KennyLeung (yyy886) wrote :
Revision history for this message
KennyLeung (yyy886) wrote :

The Wanning Screen?field.comment=The Wanning Screen

KennyLeung (yyy886)
description: updated
Revision history for this message
Twinkle Christian(OpenERP) (tch-openerp) wrote :

Hello Kenny,

I did same steps as you have given in your video and its working fine with latest trunk version,but the same issue occur with stable 7.0 . So, I am confirming this issue .

Thank you.

Changed in openobject-addons:
assignee: nobody → OpenERP Publisher's Warranty Team (openerp-opw)
importance: Undecided → Medium
status: New → Confirmed
Amit Parik (amit-parik)
summary: - portal user: Partner Object Access Denied
+ [v7]portal user: Partner Object Access Denied
Revision history for this message
KennyLeung (yyy886) wrote :

Thank you, Twinkle,

This issue is caused by the Rules of Portal group:

Name: res_partner: read access on my partner

Rule Definition (Domain Filter) : [('user_ids', 'in', user.id)]

Hope this issue can be solved.

Thanks a lot.

Kenny

Revision history for this message
KennyLeung (yyy886) wrote :

I found the Rule "res_partner: read access on my partner" for the trunk is not the same as stable 7.0.

The trunk rule Definition: [('id', 'child_of', user.commercial_partner_id.id)]

The stable 7.0 rule Definition: [('user_ids', 'in', user.id)]

I copy the rule from trunk to stable 7.0, and it work well.

To post a comment you must log in.
This report contains Public information  
Everyone can see this information.

Other bug subscribers

Remote bug watches

Bug watches keep track of this bug in other bug trackers.