Odoo Server (MOVED TO GITHUB)

Search of Menu behaves wrongly for non-Admin users

Bug #497364 reported by yya (Axelor)
6
This bug affects 1 person
Affects Status Importance Assigned to Milestone
Odoo Server (MOVED TO GITHUB)
Fix Released
Medium
Jay Vora (Serpent Consulting Services)
Odoo Server (MOVED TO GITHUB) 5.0.8

Bug Description

Problem in search method of ir.ui.menu object:
  In search view of ir.ui,menu when I change search limit it gives wrong data
  like it shows menus in search list even the user (like demo) do not have access on it.

Related branches

lp:openobject-server/5.0
Jay Vora (Serpent Consulting Services) (jayvora)
Changed in openobject-server:
status: New → Confirmed
Jay Vora (Serpent Consulting Services) (jayvora)
Changed in openobject-server:
importance: Undecided → High
assignee: nobody → Jay (Open ERP) (jvo-openerp)
Jay Vora (Serpent Consulting Services) (jayvora)
Changed in openobject-server:
status: Confirmed → In Progress
Revision history for this message
Jay Vora (Serpent Consulting Services) (jayvora) wrote :

Hello YYA(Axelor),

I would like to ask you to apply this patch and notify us the ongoing behaviour.

Thank you for pointing out this issue.

Revision history for this message
Jay Vora (Serpent Consulting Services) (jayvora) wrote :
Revision history for this message
yya (Axelor) (yya) wrote :

Hello Jay (Open ERP),

 I have checked your patch , It displays perfect search result but It shows wrong limit value and speed is too slow.

Revision history for this message
Jay Vora (Serpent Consulting Services) (jayvora) wrote :

It has been fixed by revision 1931 <email address hidden>.

Thank you.

Changed in openobject-server:
status: In Progress → Fix Released
summary: - Problem in search method of ir.ui.menu object
+ Search of Menu behaves wrongly for non-Admin user.
Jay Vora (Serpent Consulting Services) (jayvora)
summary: - Search of Menu behaves wrongly for non-Admin user.
+ Search of Menu behaves wrongly for non-Admin users
Christophe Simonis (OpenERP) (kangol)
Changed in openobject-server:
status: Fix Released → New
Revision history for this message
Richard (John) Nopkins@Servosoft (richard-nopkins) wrote :

This is really annoying admins.
Any news for this Christophe?

Revision history for this message
Christophe Simonis (OpenERP) (kangol) wrote :

The limit and offset argument are now respected in revision "2011 <email address hidden>"

The fact that more entries are shown is a non-issue. The behavior is correct. The user show only the menu which:
* restrict the access to a group he belong to
* he can read the linked model
* have at least a child respecting the previous rules.

In "search" view, all menu are shown, not just the one resticted by the user's "menu action".

Changed in openobject-server:
importance: High → Medium
milestone: none → 5.0.8
status: New → Fix Released
To post a comment you must log in.
This report contains Public information  
Everyone can see this information.
Subscribing...

Other bug subscribers

Remote bug watches

Bug watches keep track of this bug in other bug trackers.