From: Ludovic CHEVALIER <ludovic.chevalier@heureux-cyclage.org>
Date: Thu, 13 Dec 2012 16:14:33 +0000 (+0100)
Subject: [security]
X-Git-Url: https://git.cyclocoop.org/admin/%7B%24admin_url%7Dmembres/Special:FilePath/%7B%24www_url%7Dadmin/compta/operations/%40%20%27info_articles_miens%27%20=%3E%20%27My%20articles%27%2C%20%27info_articles_tous%27%20=%3E%20%27All%20the%20articles%27%2C%20%27info_articles_trouves%27%20=%3E%20%27Articles%20found%27%2C-%27info_articles_trouves_dans_texte%27%20=%3E%20%27Articles%20found%20%28in%20the%20text%29%27%2C%20%27info_attente_validation%27%20=%3E%20%27Your%20articles%20awaiting%20validation%27%2C%20%27info_aucun_article%27%20=%3E%20%27No%20articles%27%2C-%27info_aucun_article_syndique%27%20=%3E%20%27No%20syndicated%20articles%27%2C%20%27info_aucun_auteur%27%20=%3E%20%27No%20authors%27%2C%20%27info_aucun_message%27%20=%3E%20%27No%20messages%27%2C%20%27info_aucun_rubrique%27%20=%3E%20%27No%20sections%27%2C-%27info_aucun_site%27%20=%3E%20%27No%20linked%20sites%27%2C-%27info_aucun_visiteur%27%20=%3E%20%27No%20visitors%27%2C%20%27info_aujourdhui%27%20=%3E%20%27today:%27%2C-%27info_auteur_message%27%20=%3E%20%27MESSAGE%20FROM:%27%2C%20%27info_auteurs%27%20=%3E%20%27Authors%27%2C%20%27info_auteurs_par_tri%27%20=%3E%20%27Authors%40partri%40%27%2C%20%27info_auteurs_trouves%27%20=%3E%20%27Authors%20found%27%2C%40%40%20-298%2C8%20%20254%2C6%20%40%40%20Do%20not%20submit%20this%20import%20request.%3Cp%3EFor%20more%20information%2C%20please%20see%20%3Ca%20href=?a=commitdiff_plain;h=0de9ae5276e4dcd7f7f148585402dec74fe08f57;p=burette%2Fbikecoop.git

[security]
+rectrict access to bikecoop configuration menu for admin group
~access for bikecoop.theme object. Just having read, create access and
unlink access for pos user group
---

diff --git a/security/ir.model.access.csv b/security/ir.model.access.csv
index 79bb7f1..3266959 100644
--- a/security/ir.model.access.csv
+++ b/security/ir.model.access.csv
@@ -9,4 +9,4 @@ access_stock_warehouse_group_pos_user,access_stock_warehouse group_pos_user,stoc
 access_stock_location_group_pos_user,access_stock_location group_pos_user,stock.model_stock_location,point_of_sale.group_pos_user,1,0,0,0
 access_procurement_order_group_pos_user,access_procurement_order group_pos_user,procurement.model_procurement_order,point_of_sale.group_pos_user,1,0,0,0
 access_bikecoop_partner_theme_group_user,access_bikecoop_partner_theme group_user,model_bikecoop_partner_theme,base.group_user,1,1,1,1
-access_bikecoop_partner_theme_group_partner_manager,access_bikecoop_partner_theme group_partner_manager,model_bikecoop_partner_theme,base.group_partner_manager,1,1,1,1
+access_bikecoop_partner_theme_group_partner_manager,access_bikecoop_partner_theme group_partner_manager,model_bikecoop_partner_theme,base.group_partner_manager,1,0,1,1
diff --git a/view/bikecoop.xml b/view/bikecoop.xml
index de132ef..c200c08 100644
--- a/view/bikecoop.xml
+++ b/view/bikecoop.xml
@@ -101,11 +101,11 @@
         <menuitem id="menu_bikecoop" 
             sequence="20"
             name="Bikecoop"
-            web_icon="images/bikecoop.png"
-            web_icon_hover="images/bikecoop-hover.png"
+            groups="base.group_user,point_of_sale.group_pos_user"
             action="act_open_bikecoop_members_view"/>
 
         <menuitem id="menu_bikecoop_members"
+            name="Bikecoop members"
             parent="menu_bikecoop"
             sequence="20"/>
 
@@ -175,6 +175,7 @@
         </record>
 
         <menuitem id="menu_configuration" 
+            groups="base.group_no_one"
             parent="menu_bikecoop"
             sequence="20"
             name="Configuration"/>