Group permissions are not deleted when group is deleted

Bug #540840 reported by Maximilian Gaß
258
This bug affects 1 person
Affects Status Importance Assigned to Milestone
Odoo Server (MOVED TO GITHUB)
Fix Released
Medium
Unassigned

Bug Description

the group_id field of ir.model.access does not set ondelete='cascade'. Therefore when you delete a group, the permissions that formerly applied to this group now apply to everyone (group_id is NULL).

I think the same problem also applies to ir_rule and ir_actions.

Related branches

Revision history for this message
Maximilian Gaß (mxey) wrote :

I attached a patch to fix this problem. ir_rule and ir_actions are not affected.

Maximilian Gaß (mxey)
visibility: private → public
affects: openobject-addons → openobject-server
Changed in openobject-server:
milestone: none → 5.0.10
status: New → Confirmed
Revision history for this message
Jay Vora (Serpent Consulting Services) (jayvora) wrote :

Thank you for your contribution Maximilian,
It has been fixed by revision 2042 <email address hidden>.

Changed in openobject-server:
status: Confirmed → Fix Released
importance: Undecided → Medium
To post a comment you must log in.
This report contains Public Security information  
Everyone can see this security related information.

Other bug subscribers

Remote bug watches

Bug watches keep track of this bug in other bug trackers.