0b4bd7a6d1
[FIX] mail: allow to delete mail alias all employees
...
It was allowed for all employees to read, create and edit
mail aliases. Only the deletion was prevented.
Nevertheless, giving the possibility to rename a mail alias
is allmost seen as a deletion, as you can rename it to something
that just won't be used anymore. Therefore, we can consider
to give any employees the rights to delete mail aliases.
Besides, not allowing the unlink leads to issues when the
mail alias is associated to a record the user wants to delete.
He was able to create the record, and its mail aliases, but
he could not remove the record, as he was not allowed to remove
the mail alias.
For instance, an HR officer was able to create a job position,
with its mail alias, but couldn't remove the job position he created.
Closes #8466
2015-09-21 14:26:37 +02:00
090123436b
[IMP] mail: updated lambda user, now having less permissive access rights on mail_mail.
...
bzr revid: tde@openerp.com-20121212114905-5kgnoix0puxo30ns
2012-12-12 12:49:05 +01:00
04a05db5c7
[IMP] mail: removed right to write/create mail_messages for users without group.
...
bzr revid: tde@openerp.com-20121212104207-0panipu6sqlbgpwe
2012-12-12 11:42:07 +01:00
45e1682327
[FIX] [CLEAN] mail: fixed some access rules issues; removed now unused files.
...
bzr revid: tde@openerp.com-20121211143301-b52ji02vynvgo3m9
2012-12-11 15:33:01 +01:00
d1f49ab27a
[IMP] removing some warnings (those one are generated by tests).
...
bzr revid: vmt@openerp.com-20121115115916-6i2ljxn7s9qz4rlv
2012-11-15 12:59:16 +01:00
281a4d0801
[FIX] mail: notifications: fixed access rights issues when setting as read/unread for lambda users.
...
bzr revid: tde@openerp.com-20121107153822-j7f1a63a2ix66e5n
2012-11-07 16:38:22 +01:00
abbe3ac1de
[MERGE] removed a few warnings.
...
bzr revid: vmt@openerp.com-20121106150431-rem9us13kevan8y0
2012-11-06 16:04:31 +01:00
2ca6464e66
[MERGE] Sync with trunk
...
bzr revid: jam@tinyerp.com-20121018133243-jybuqt2ub9wcm9h7
2012-10-18 19:02:43 +05:30
4525b411e9
[IMP] mail.followers: users can now read their own subscriptions.
...
bzr revid: tde@openerp.com-20121015151127-5abtwg8uraj0du0u
2012-10-15 17:11:27 +02:00
ff5bded9ab
[FIX]Add access rights for mail.thread and publisher_warranty.contract
...
bzr revid: tch@tinyerp.com-20121009054709-xw0ih1p6yacxv0yu
2012-10-09 11:17:09 +05:30
267fdcff2f
[FIX]mail: remove group_mail_manager
...
bzr revid: chm@openerp.com-20120921114837-v0fhsl3rq45zuk3j
2012-09-21 13:48:37 +02:00
fa63653de9
[MERGE] from trunk-mail-mail-rules-tde
...
bzr revid: chm@openerp.com-20120921095037-czl4s3v0do11yhkq
2012-09-21 11:50:37 +02:00
fa27dde6c9
[MERGE] Merged with addons/trunk.
...
bzr revid: tde@openerp.com-20120919111000-w3xmyatd6new8ghm
2012-09-19 13:10:00 +02:00
585ec570d2
[MERGE] Merged with addons/trunk.
...
bzr revid: tde@openerp.com-20120918155905-rkdtkuu559ii0e6p
bzr revid: tde@openerp.com-20120919075051-zjxrbcbltrlp8h4k
2012-09-19 09:50:51 +02:00
20eee8405a
[IMP] mail: vote: cleaned security rights, available for everybody. Will need to be fixed.
...
bzr revid: tde@openerp.com-20120918122212-vr4h1eo7z9ew02q3
2012-09-18 14:22:12 +02:00
e6cdcb6b51
[MERGE]merge with trunk addons
...
bzr revid: sgo@tinyerp.com-20120917065740-w9a3xhe632368t2n
2012-09-17 12:27:40 +05:30
cb828c535f
[MERGE]: Merged with lp:openobject-addons
...
bzr revid: atp@tinyerp.com-20120917045117-hisv0yrfri1xj0bp
2012-09-17 10:21:17 +05:30
5000fffb1e
[MERGE] merging notes + small cleaning
...
bzr revid: fp@openerp.com-20120916171015-e0n1lq2a5c10a0nb
2012-09-16 19:10:15 +02:00
55ec1211c0
[FIX] mail: security: added read access on notifications.
...
bzr revid: tde@openerp.com-20120914161657-bst7gz4d3er1i2rl
2012-09-14 18:16:57 +02:00
fa5d90e46a
[IMP] mail: security: added all access for system group on mail.notification and mail.followers.
...
bzr revid: tde@openerp.com-20120914141922-it1c4df7k72y8vsq
2012-09-14 16:19:22 +02:00
9a9a56fa49
[WIP] [FIX] mail: fixing access rights: second turn of update.
...
bzr revid: tde@openerp.com-20120914115107-mtgu8soy3ck5xgir
2012-09-14 13:51:07 +02:00
b1122deb38
[IMP] mail: added _search override on mail_message, to filter the results of a search according to our custom rules. Added some tests.
...
bzr revid: tde@openerp.com-20121024141806-8iayf7cz2ndxyz2l
2012-10-24 16:18:06 +02:00
576d664f88
[IMP] note: stage by user, group by stage, access rules
...
bzr revid: chm@openerp.com-20120913171938-0zmtm2ds5mjdgttj
2012-09-13 19:19:38 +02:00
f6ed42db86
[WIP] [FIX] mail: fixing access rights + related tests. WIP, already fixed mail.group and mail.alias, not readable by anonymous not-employee users.
...
bzr revid: tde@openerp.com-20120913170500-um93rzw0nq6njl39
2012-09-13 19:05:00 +02:00
5451ff85f9
[FIX] mail_mail: added security rules for mail.mail, to allow users to send emails.
...
This fixes notably the crash when Demo User tries to send
a quotation by email.
bzr revid: tde@openerp.com-20120913113931-x31vkhihikfdn4bc
2012-09-13 13:39:31 +02:00
e5a76cd41f
[IMP]Remove server warning
...
bzr revid: tch@tinyerp.com-20120907120638-0zeks1ildb1vy8w4
2012-09-07 17:36:38 +05:30
1338046cf0
[IMP]added access to mail_message_subtype
...
bzr revid: sgo@tinyerp.com-20120827052933-6ajhaete5vuzqhiv
2012-08-27 10:59:33 +05:30
22a810507c
[MERGE]: Merged with lp:openobject-addons
...
bzr revid: atp@tinyerp.com-20120816052021-igdj7knaimwg9x7z
2012-08-16 10:50:21 +05:30
a52b57acf4
[REF] Still refactoring of names: propagated to security files.
...
bzr revid: tde@openerp.com-20120813193841-yavky2odabj5li70
2012-08-13 21:38:41 +02:00
c92422b2ac
[ADD]: Add vote system in openchatter
...
bzr revid: atp@tinyerp.com-20120809095341-xn70i8beof20b07h
2012-08-09 15:23:41 +05:30
f0873dcb32
[MERGE] Sync with trunk - bunch of conflicts resolved
...
bzr revid: odo@openerp.com-20120803142450-97z551yam1js822h
2012-08-03 16:24:50 +02:00
01be904ead
[REM] mail: still removing references to subscription hide mechanism.
...
bzr revid: tde@openerp.com-20120717113221-2i1wfwjeyeckss41
2012-07-17 13:32:21 +02:00
289dad87d4
[MERGE] Merged with addons/trunk.
...
bzr revid: tde@openerp.com-20120703122020-79rl9b03mygz5s0h
2012-07-03 14:20:20 +02:00
4602e09c20
[MERGE] lp:~openerp-dev/openobject-addons/trunk-mail-alias-jam-security-tpa
...
bzr revid: jam@tinyerp.com-20120629094331-v2crkkgmnaim8u4t
2012-06-29 15:13:31 +05:30
e461bc1b7c
[ADD] added access rigts for mail.alias
...
bzr revid: tpa@tinyerp.com-20120629084833-sjjsvf0wnc7xh1by
2012-06-29 14:18:33 +05:30
ef3693a03b
[IMP] mail:remove unnecessary code.
...
bzr revid: tpa@tinyerp.com-20120607072620-7rkq9m4svymcw8pv
2012-06-07 12:56:20 +05:30
4510e8e996
[IMP] mail: access rights: added access rights for mail.subscription.hide
...
bzr revid: tde@openerp.com-20120508140750-5te2gpuad253o8fk
2012-05-08 16:07:50 +02:00
d001c67f99
[IMP] mail.message: modified default access rights: now accessible, but will be restricted by rights of the related document (as for attachments)
...
bzr revid: tde@openerp.com-20120508135600-6u231f63f9h9toqf
2012-05-08 15:56:00 +02:00
a936f27674
[FIX] share and mail.thread: tweaked access rights. (TODO: second part of patch: checking access rights to email should check those from its master record, like attachments. Will be done shortly after the CD.)
...
bzr revid: tde@openerp.com-20120410160100-lh4jr3ubkvemggvk
2012-04-10 18:01:00 +02:00
01c62b746d
[IMP] mail.thread: modified access rights. Users should now be able to delete their messages.
...
bzr revid: tde@openerp.com-20120405164719-6tlw4gav88ibb74r
2012-04-05 18:47:19 +02:00
b5fc90ce67
[FIX] Added access rights to mail.message.report
...
bzr revid: tde@openerp.com-20120404132627-19lydfb00f4oukv3
2012-04-04 15:26:27 +02:00
4422451777
[IMP] mail.thread: updated security rules
...
bzr revid: tde@openerp.com-20120329163454-pbk5ivhgzyamd3jw
2012-03-29 18:34:54 +02:00
90c1ff994f
[IMP] First security check.
...
bzr revid: tde@openerp.com-20120329161049-9a7nqm3ij2zsjy3f
2012-03-29 18:10:49 +02:00
ac24b11e82
[MERGE] Merged with main addons
...
bzr revid: tde@openerp.com-20120326092417-9cpagvskhf8u30yq
2012-03-26 11:24:17 +02:00
2eb1c00ad2
[FIX] mail: default permissions should allow write for everyone
...
Mail messages are created in multiple steps that
usually involve calling write() at some point, so
giving all users write access is necessary.
bzr revid: odo@openerp.com-20120322110733-unizfb58f0y8xkfz
2012-03-22 12:07:33 +01:00
cff98a3aeb
[IMP] Improved ThreadView widget display; cleaned ThreadView widget js code; added basic access rules; added message_mark_done method to clean a mail.thread of its need_action_user_id; added auto-push of notifications if user requested to perform an action is not following the object; added first draft of messaging mechanism in hr_holidays
...
bzr revid: tde@openerp.com-20120208152521-68i4nekjj8mnuyc8
2012-02-08 16:25:21 +01:00
aa362f2001
[FIX] mail: access rights: allow msg/thread creation for everyone
...
bzr revid: odo@openerp.com-20111223104157-nu21a7c61cp6su0e
2011-12-23 11:41:57 +01:00
f27318c8af
[IMP] Security Rule: removed duplicates due to inheritancies of groups
...
bzr revid: fp@tinyerp.com-20111212181113-mhnnbps3ip8ls6pp
2011-12-12 19:11:13 +01:00
c996efa2fe
[IMP] mail: another pass of cleanup/refactoring of mail features - finish renaming
...
bzr revid: odo@openerp.com-20110722163457-7g9ngdb2p0bixcst
2011-07-22 18:34:57 +02:00
47a85e9f8f
[IMP] mail: rename module email to mail because of parsing error
...
bzr revid: rha@tinyerp.com-20110404094552-j2rdq2sbeqrbffgn
2011-04-04 15:15:52 +05:30
Adrien Peiffer (ACSONE)
Thibault Delavallée
Vo Minh Thu
Jigar Amin
Twinkle Christian (OpenERP)
Christophe Matthieu
Sanjay Gohel (Open ERP)
Atul Patel (OpenERP)
Fabien Pinckaers
Olivier Dony
Turkesh Patel (Open ERP)
Fabien Pinckaers
Rifakat Haradwala (Open ERP)