Group permissions are not deleted when group is deleted

Bug #540840 reported by Maximilian Gaß on 2010-03-18
This bug affects 1 person
Affects Status Importance Assigned to Milestone
Fix Released

Bug Description

the group_id field of ir.model.access does not set ondelete='cascade'. Therefore when you delete a group, the permissions that formerly applied to this group now apply to everyone (group_id is NULL).

I think the same problem also applies to ir_rule and ir_actions.

Related branches

Maximilian Gaß (mxey) wrote :

I attached a patch to fix this problem. ir_rule and ir_actions are not affected.

Maximilian Gaß (mxey) on 2010-04-16
visibility: private → public
affects: openobject-addons → openobject-server
Changed in openobject-server:
milestone: none → 5.0.10
status: New → Confirmed

Thank you for your contribution Maximilian,
It has been fixed by revision 2042 <email address hidden>.

Changed in openobject-server:
status: Confirmed → Fix Released
importance: Undecided → Medium
To post a comment you must log in.
This report contains Public Security information  Edit
Everyone can see this security related information.

Other bug subscribers