[knowledge][11.0.3.0.0] - add security for access to ir.attachment.

Otherwise the module grants too wide permissions for all users.
This commit is contained in:
Jordi Ballester Alomar
2019-02-28 11:06:23 +01:00
committed by mle
parent 5d1fdc37a6
commit f32b18f62f
9 changed files with 51 additions and 9 deletions

View File

@@ -7,4 +7,10 @@
<field name="users" eval="[(4, ref('base.user_root'))]"/>
</record>
<record id="group_ir_attachment_user" model="res.groups">
<field name="name">Central access to Documents</field>
<field name="category_id" ref="base.module_category_hidden"/>
<field name="implied_ids" eval="[(4, ref('group_document_user'))]"/>
</record>
</odoo>