Browse Source

[8.0][FIX] web_dashboard_tile security rule

Rule was not being updated because of `<data noupdate="1">`, hence the groups field of the tile was not working.

Conflicts:
	web_dashboard_tile/__openerp__.py
pull/507/head
Iván Todorovich 8 years ago
committed by Nicolas Mac Rouillon
parent
commit
318c66f8d4
  1. 4
      web_dashboard_tile/__openerp__.py
  2. 26
      web_dashboard_tile/migrations/8.0.4.0/post-migration.py

4
web_dashboard_tile/__openerp__.py

@ -23,7 +23,7 @@
{ {
"name": "Dashboard Tile", "name": "Dashboard Tile",
"summary": "Add Tiles to Dashboard", "summary": "Add Tiles to Dashboard",
"version": "8.0.1.0.0",
"version": "9.0.1.0.0",
"depends": [ "depends": [
'web', 'web',
'board', 'board',
@ -46,5 +46,5 @@
'qweb': [ 'qweb': [
'static/src/xml/custom_xml.xml', 'static/src/xml/custom_xml.xml',
], ],
'installable': False,
'installable': True,
} }

26
web_dashboard_tile/migrations/8.0.4.0/post-migration.py

@ -0,0 +1,26 @@
# -*- coding: utf-8 -*-
# © 2016 Iván Todorovich <ivan.todorovich@gmail.com>
# License AGPL-3 - See http://www.gnu.org/licenses/agpl-3.0.html
def migrate(cr, version):
if version is None:
return
# Update ir.rule
cr.execute("""
SELECT res_id FROM ir_model_data
WHERE name = 'model_tile_rule'
AND module = 'web_dashboard_tile'""")
rule_id = cr.fetchone()[0]
new_domain = """[
"|",
("user_id","=",user.id),
("user_id","=",False),
"|",
("group_ids","=",False),
("group_ids","in",[g.id for g in user.groups_id]),
]"""
cr.execute("""
UPDATE ir_rule SET domain_force = '%(domain)s'
WHERE id = '%(id)s' """ % {'domain': new_domain, 'id': rule_id})
Loading…
Cancel
Save