Merge lp:~ruchir.shukla/openobject-server/7.0-bugfix-1157839 into lp:openobject-server/7.0

[Ruchir Shukla(BizzAppDev)]

Unmerged revisions

5007. By Ruchir Shukla(BizzAppDev) on 2013-06-13

[FIX] email field write access to technical feature group only

=== modified file 'openerp/addons/base/res/res_partner.py'
--- openerp/addons/base/res/res_partner.py	2013-06-12 09:53:00 +0000
+++ openerp/addons/base/res/res_partner.py	2013-06-13 09:47:23 +0000
@@ -327,9 +327,20 @@
         'use_parent_address': False,
         'image': False,
     }
-
+    def _check_group_email(self, cr, uid, ids, context=None):
+        user_pool = self.pool.get("res.users")
+        for partner_rec in self.browse(cr, uid, ids, context=context):
+            user = user_pool.search(
+                cr, uid, [("partner_id", "=", partner_rec.id)],
+                context=context);
+            if user and uid != SUPERUSER_ID and uid not in user:
+                check = user_pool.has_group(cr, uid,
+                                            "base.group_no_one")
+                return check
+        return True
     _constraints = [
         (osv.osv._check_recursion, 'You cannot create recursive Partner hierarchies.', ['parent_id']),
+        (_check_group_email, 'You are not authorized to update user information.', ['email']),
     ]
 
     def copy(self, cr, uid, id, default=None, context=None):