[ADD][16.0] base_group_erp_user & base_group_erp_user_role#351
[ADD][16.0] base_group_erp_user & base_group_erp_user_role#351
Conversation
fa9a55a to
2a88798
Compare
d38693f to
9cc5bf1
Compare
9cc5bf1 to
8fadaf6
Compare
|
There hasn't been any activity on this pull request in the past 4 months, so it has been marked as stale and it will be closed automatically if no further activity occurs in the next 30 days. |
|
It looks similar to something I developped, some monthes ago. However, I don't see the possibility to avoid right escalation. Or did I missed something ? https://github.com/grap/grap-odoo-incubator/tree/16.0/user_limited_access_settings |
|
@legalsylvain It looks a bit similar indeed, about rights escalation, we use theses modules with the ones in this PR #349 so there is only a group of users who can edit user rights |
| @api.model | ||
| def _get_erp_user_system_forbidden_fields(self): | ||
| return [ | ||
| "groups_id", |
There was a problem hiding this comment.
You have to call the super and extends/append the result with your new field
There was a problem hiding this comment.
I should have raised a NotImplementedError in the mixin to be honest so I don't think it's necessary here
| @api.model | ||
| def _get_erp_user_system_forbidden_fields(self): | ||
| return [ | ||
| "implied_ids", |
Theses new modules adds a new first level in "Administration" groups to allow create users, groups and roles without being able to change the groups of a user, the groups of a role, the groups of a role and the roles assigned to users.