Merge lp:~openerp-dev/openobject-server/trunk-opw-576863-port-mma into lp:openobject-server

[Mayur Maheshwari(OpenERP)]

Hello,

==> Using OpenERP plug-in for OpenOffice, the 'Send to the server' functionality doesn't show the report at destination model if used by user other then Administrator(uid=1).

Steps to Reproduce issue:

1) Create a DB and install base_report_designer module,
2) Configure report_designer_plugin.zip for OpenOffice,
3) Create a user and give him all access as Administrator has,
4) Logged in with this user and create a OpenOffice report, and upload it to destination model in server using 'Send to the server',
5) In OpenERP client, go to destination model and you will not find the uploaded report.

Note: You will notice message, "Operation prohibited by access rules, or performed on an already deleted document (Operation: create, Document type: ir.values)."

The cause of the issue is, plugin sends data with 'key': 'action' and no user information for 'user_id' field of 'ir.values' model and the access rules(orm's def check_access_rule(...)) checks for 'key'='default' and 'user_id'=<current logged in user> which forces the check_access_rule(...) to raise this warning.

I have fixed this issue server side and this fix is dependent on another fix at branch:
https://code.launchpad.net/~openerp-dev/openobject-addons/trunk-opw-576863-port-mma

code is forward port from 6.1

Thanks,
Mayur

Unmerged revisions

4580. By Ravi Gohil (OpenERP) on 2012-11-21

[FIX]base: When you use Send to the server from OpenOffice with user other than Administrator(uid=1) you will notice a warning message saying Access Error and report will not be seen at destination model

=== modified file 'openerp/addons/base/security/base_security.xml'
--- openerp/addons/base/security/base_security.xml	2012-10-23 11:11:22 +0000
+++ openerp/addons/base/security/base_security.xml	2012-11-21 10:11:32 +0000
@@ -66,7 +66,7 @@
         <record model="ir.rule" id="ir_values_default_rule">
             <field name="name">Defaults: alter personal values only</field>
             <field name="model_id" ref="model_ir_values"/>
-            <field name="domain_force">[('key','=','default'),('user_id','=',user.id)]</field>
+            <field name="domain_force">[('key','in',('default','action')),('user_id','=',user.id)]</field>
             <field name="perm_read" eval="False"/>
         </record>