[6.1] edit approved holiday in calendar view

Bug #1005795 reported by Guewen Baconnier @ Camptocamp
8
This bug affects 1 person
Affects Status Importance Assigned to Milestone
Odoo Web (MOVED TO GITHUB)
Status tracked in Trunk
6.1
Fix Committed
Low
OpenERP Publisher's Warranty Team
Trunk
Invalid
Low
OpenERP Publisher's Warranty Team

Bug Description

Hi,

Using OpenERP 6.1 with webclient.

Users can modify the approved leave requests without HR manager rights from the calendar view, they just have to drag&drop their leave request.

This is an issue because they are able to move their leaves / holidays which have already been approved by their manager ;-)

Actual :
 - An approved holiday can not be modified in form view by an HR user without HR manager rights (fields are read only), but it can be moved in the calendar view, so the start / end dates are modified.

Expected:
 - An approved holiday can never be modified by an HR user without HR manager rights, even in calendar view.

To reproduce :
 - I connect with a user A without HR manager rights
 - I create a leave request from june 25. to june 29.
 - I confirm it (state -> pending approval)
 - I disconnect from user A

 - I connect with user B with HR manager rights
 - I approve the leave request of user A
 - I disconnect from user B

 - I connect with user A without HR manager rights
 - I open my leave request, try to edit in form view -> fields are read only
 - I select the calendar view, drag&drop my leave request to june 18. to june 22.
 -> the leave request is updated my these dates

Have a nice holid... errh a nice day,
Thanks
Guewen

Tags: maintenance

Related branches

affects: openobject-addons → openerp-web
Changed in openerp-web:
importance: Undecided → Low
status: New → Confirmed
assignee: nobody → OpenERP R&D Web Team (openerp-dev-web)
affects: openerp-web → openobject-addons
Changed in openobject-addons:
assignee: OpenERP R&D Web Team (openerp-dev-web) → OpenERP Publisher's Warranty Team (openerp-opw)
tags: added: maintenance
affects: openobject-addons → openerp-web
Revision history for this message
Mohammed Shekha(Open ERP) (msh-openerp) wrote :
Changed in openerp-web:
status: Confirmed → Fix Committed
Revision history for this message
Martin (debacle) wrote :

Version: 6.2dev-20121105-000101-1

I'm not sure whether this is the same problem or another bug should be filed:

Anybody is allowed to change the leave request "meetings" under Emails/Organizer/Calendar. This can even happen accidently, when e.g. being mistaken with the right "meeting". It is not even possible to "undo" any changes in the calendar, nor is there a visible history of changes.

Such an (accidental) change does not actually change the leave requests themselves (sick days, approved legal leaves), but it makes the calendar quite useless as a tool.

To post a comment you must log in.
This report contains Public information  
Everyone can see this information.

Other bug subscribers

Remote bug watches

Bug watches keep track of this bug in other bug trackers.