[15.0+] mis_builder: non-admin user permission issues

[sbidoul]

You are not allowed to access 'Models' (ir.model) records.

I found this while trying to test the forward port of #410

[pedrobaeza]

I think we can provide a selection with a restricted list of model names, and the modules adding extra models may feed such selection.

[github-actions[bot]]

There hasn't been any activity on this issue in the past 6 months, so it has been marked as stale and it will be closed automatically if no further activity occurs in the next 30 days. If you want this issue to never become stale, please ask a PSC member to apply the "no stale" label.

[rafaelbn]

This is a BUG. I can confirm it in production. We have to give all accountants admin right to work with MIS

Administration/Access Right

Is this related @sbidoul about what you said?

You are not allowed to access 'Models' (ir.model) records.

• [FIX] l10n_es_aeat: do not require administration permissions #2583

@moduon MT-1527

[sbidoul]

Normally the error I had in mind with this issue occurred only when creating report templates. But if it occurs when creating reports, then we can probably split this issue in two that can be fixed independently:

1. make sure you don't need admin rights to view report templates and create reports
2. make sure you don't need admin rights to create report templates

(1) should be easier to solve than (2).

[yajo]

Fix in https://github.com/OCA/mis-builder/pull/476

[sbidoul]

Keeping open as users still need admin right to create report templates.

[AnizR]

I think that adding groups to mis_builder might be a good idea:

• A group to read reports
• A group to edit reports

• A group to create and edit templates

  An idea to tackle the problem of having access to ir_model and ir_model_fields:

  • Adding a configuration that only an admin (group_erp_manager) can set, that states the 'usable' models and fields
  • Having a Selection that displays those 'allowed models and fields' on templates