From 8e43688530e8e92e5bbb2eb11d5d5f135dc1b1d4 Mon Sep 17 00:00:00 2001 From: Jordi Ballester Alomar Date: Thu, 28 Feb 2019 11:06:23 +0100 Subject: [PATCH] [knowledge][11.0.3.0.0] - add security for access to ir.attachment. Otherwise the module grants too wide permissions for all users. --- document_knowledge/__manifest__.py | 3 ++- document_knowledge/models/res_config.py | 8 +++++++- document_knowledge/readme/CONFIGURE.rst | 20 +++++++++++++++++++ document_knowledge/readme/CONTRIBUTORS.rst | 1 + document_knowledge/readme/ROADMAP.rst | 2 -- document_knowledge/readme/USAGE.rst | 6 ++++-- .../security/knowledge_security.xml | 6 ++++++ document_knowledge/views/knowledge.xml | 4 ++-- document_knowledge/views/res_config.xml | 10 +++++++++- 9 files changed, 51 insertions(+), 9 deletions(-) create mode 100644 document_knowledge/readme/CONFIGURE.rst diff --git a/document_knowledge/__manifest__.py b/document_knowledge/__manifest__.py index 45a9d663..41bc44a1 100644 --- a/document_knowledge/__manifest__.py +++ b/document_knowledge/__manifest__.py @@ -2,10 +2,11 @@ # License AGPL-3.0 or later (http://www.gnu.org/licenses/agpl). { "name": "Knowledge Management System", - "version": "11.0.2.0.0", + "version": "11.0.3.0.0", "author": "OpenERP SA," "MONK Software, " "Tecnativa, " + "Eficent, " "Odoo Community Association (OCA)", "category": "Knowledge", "license": "AGPL-3", diff --git a/document_knowledge/models/res_config.py b/document_knowledge/models/res_config.py index 369bb130..ba6bfd4a 100644 --- a/document_knowledge/models/res_config.py +++ b/document_knowledge/models/res_config.py @@ -9,11 +9,17 @@ class KnowledgeConfigSettings(models.TransientModel): _inherit = 'res.config.settings' module_document = fields.Boolean( - 'Manage documents', + 'Attachments List and Document Indexation', help='Document indexation, full text search of attachements.\n' '- This installs the module document.' ) + group_ir_attachment_user = fields.Boolean( + string='Central access to Documents', + help="When you set this field all users will be able to manage " + "attachments centrally, from the Knowledge/Documents menu.", + implied_group='knowledge.group_ir_attachment_user') + module_document_page = fields.Boolean( 'Manage document pages (Wiki)', help='Provide document page and category as a wiki.\n' diff --git a/document_knowledge/readme/CONFIGURE.rst b/document_knowledge/readme/CONFIGURE.rst new file mode 100644 index 00000000..c6ba45a7 --- /dev/null +++ b/document_knowledge/readme/CONFIGURE.rst @@ -0,0 +1,20 @@ +To set up this module, you need to go to: + +* Knowledge / Configuration / Settings + +From this menu you'll have a central access to install the apps that belong +to Knowledge. + +* Check *Attachments List and Document Indexation* if you want to install the + module that allows users to attach documents to any model. +* Check *Manage attachments centrally* if you want all users to be able to + access to the all attachments to which they have read permissions, from the + menu *Knowledge / Documents* + +If you want to grant Central Access to Documents only to some users: + +#. Go to *Settings/Activate the developer mode*. Only a user with + *Administration / Settings* permissions can do that. + +#. Go to *Settings / Users & Companies / Users* and set the checkbox + *Central access to Documents* to the selected users. diff --git a/document_knowledge/readme/CONTRIBUTORS.rst b/document_knowledge/readme/CONTRIBUTORS.rst index 8f4f234c..b5d4b9fa 100644 --- a/document_knowledge/readme/CONTRIBUTORS.rst +++ b/document_knowledge/readme/CONTRIBUTORS.rst @@ -6,3 +6,4 @@ * Fayez Qandeel * Vicent Cubells * Iván Todorovich +* Jordi Ballester diff --git a/document_knowledge/readme/ROADMAP.rst b/document_knowledge/readme/ROADMAP.rst index ce23930f..e69de29b 100644 --- a/document_knowledge/readme/ROADMAP.rst +++ b/document_knowledge/readme/ROADMAP.rst @@ -1,2 +0,0 @@ -* Migrate related modules to v11 and add options in the settings as soon as - they are installable. diff --git a/document_knowledge/readme/USAGE.rst b/document_knowledge/readme/USAGE.rst index fa66f7bc..328eb25e 100644 --- a/document_knowledge/readme/USAGE.rst +++ b/document_knowledge/readme/USAGE.rst @@ -1,3 +1,5 @@ -To use this module, you need to: +This module adds a new top level menu *Knowledge* -* Go to Knowledge / Configuration / Settings +Users with permission *Central access to Documents* can access in +*Knowledge/Documents* to all the documents attached to records of any model +for which they have read permission. diff --git a/document_knowledge/security/knowledge_security.xml b/document_knowledge/security/knowledge_security.xml index d377b590..a2470037 100644 --- a/document_knowledge/security/knowledge_security.xml +++ b/document_knowledge/security/knowledge_security.xml @@ -7,4 +7,10 @@ + + Central access to Documents + + + + diff --git a/document_knowledge/views/knowledge.xml b/document_knowledge/views/knowledge.xml index 82772fd9..86020124 100644 --- a/document_knowledge/views/knowledge.xml +++ b/document_knowledge/views/knowledge.xml @@ -37,9 +37,9 @@ + sequence="150"/> +
+
+ +
+
+
+
@@ -75,7 +83,7 @@ name="Configuration" parent="menu_document_root" groups="base.group_system" - sequence="50"/> + sequence="200"/>