Remove access right error message

Question

I have restricted access to users in the Contact app. I only want them to see contacts they created so I added the record rule below:
[('create_uid','=',user.id)]
But when the user views a contact (that they created) the following error message appears:
"
Due to security restrictions, you are not allowed to access 'Contact' (res.partner) records.
Records: feryialmangou (id=7)
User: feryialmangou (id=6)
This restriction is due to the following rules:
- Contact Restriction User
Contact your admini

asma@alhadargroup.com · Answer

Hi Feryial,

Try to replace your record rule with this rule it helps to show only ones created by the user.

Change:
[('create_uid','=',user.id)]

To:

['|',('user_id','=',user.id),('user_id','=',False)]

Best Regards.

Christoph Farnleitner · Answer

You will have to take the chatter section into consideration as well. Any follower on a contact not accessible to the user has the potential to break the the view. Same goes for any related contact (for example a sub-contact (an /individual/) within a /company/-type contact).

Related Posts	Odpovědi	Zobrazení
Time Off - Employees must only see overview of their department record_rules accessrights Timeoff	2 led 25	3052
Read access to form despite not having write access record_rules accessrights odooV13	3 led 24	2942
Model Record Rule Problem contact record_rules studio	0 bře 21	68
Record Rules related to current user Vyřešeno record_rules access_rules accessrights	1 pro 20	8406
How to give condition to a user group and admin using record rules. record_rules accessrights odoo12	0 srp 19	4462

This question has been flagged

Enjoying the discussion? Don't just read, join in!