search

OCA / operating-unit

Manage Operating Units in Odoo
GNU Affero General Public License v3.0
72 stars 237 forks source link

User access not working for reports ? #579

Closed victor-champonnois closed 4 months ago

victor-champonnois commented 1 year ago

Module

operating_unit and project_operating_unit

Describe the bug

A user can see other's operating units projects in the project reporting.

You can check the full example in this runboat : http://oca-operating-unit-14-0-f2ec2199c7ec.runboat.odoo-community.org/web#action=70&model=res.users&view_type=list&cids=1&menu_id=4

Log in as User1 with login "test@test.test" and password "test".

To Reproduce

Affected versions:14

Steps to reproduce the behavior: 1.Remove all special rights regarding "operating units" to Administrator 2.Create an internal user and assign them a new operating unit (User1 in the runbota example, with OU "test")

  1. With this user, create a project ("test" in the example) and a task 4.Log in as Admin, and go to Project>Reporting : you can see the projects "test" created by User1

Expected behavior Admin should not see projects created by User1 in the reporting.

Additional context In the runboat.

github-actions[bot] commented 12 months ago

There hasn't been any activity on this issue in the past 6 months, so it has been marked as stale and it will be closed automatically if no further activity occurs in the next 30 days. If you want this issue to never become stale, please ask a PSC member to apply the "no stale" label.

hurrinico commented 11 months ago

@victor-champonnois Have you fixed the problem? I'm having a similar issue. It seems like the rule is computed when you change group on user.

victor-champonnois commented 11 months ago

@hurrinico Sorry no I didn't find the time

github-actions[bot] commented 5 months ago

There hasn't been any activity on this issue in the past 6 months, so it has been marked as stale and it will be closed automatically if no further activity occurs in the next 30 days. If you want this issue to never become stale, please ask a PSC member to apply the "no stale" label.