Odoo is the world's easiest all-in-one management software.
It includes hundreds of business apps:

CRM
e-Commerce
Kirjanpito
Varastointi
PoS
Projekti
MRP

All apps

Kaikki kirjoitukset Ihmiset Merkit

Tunnisteet (Näytä kaikki)

odoo accounting v14 pos v15

Tietoa tästä foorumista

Apua

"Access Denied by record rules" error Adding Company to Contact List (from everyone including admin)

contacts groups

1 Vastaa

6714 Näkymät

Jeremy Okonski

When the Add Customer prompt is brought up as I try to add a new Company, Odoo tells me:

The requested operation cannot be completed due to security restrictions. Please contact your system administrator.(Document type: Contact, Operation: create)

and /var/log/audit/audit.log tells me

2019-02-12 18:04:19,613 3189 INFO odoo12 odoo.models: Access Denied by record rules for operation: create on record ids: [825], uid: 6, model: res.partner
2019-02-12 18:04:19,615 3189 INFO odoo12 werkzeug: 162.246.248.137 - - [12/Feb/2019 18:04:19] "POST /web/dataset/call_kw/res.partner/create HTTP/1.1" 200 - 41 0.016 0.042

The way I got here was that I tried to create an outside_sales group that has limited access to contacts. I think I backed out of my new rules and groups and as far as I can tell, the settings look the same as a new installation. The other change was that new user had a different email domain. That user is completely gone now.

Is there any logging I can turn on or anything that I can do to help debug this? I prefer not to have to build this all from scratch but at this point it is my quickest option to get functional again.

Jeremy Okonski

Tekijä

(EDIT: The stuff below was probably a cause but still didn't fix it for whatever reason. I was able to add a company once and haven't been able to since. )

I tracked down the bad edit.

In Groups there is something called Extra Rights Contact Creation. I had a really bad Record Rules in there that said:

Contact, Contact, [('is_company', '=', False)], [Apply for Create]

If I'm reading that correctly, it is saying if someone is in the company, they cannot create a contact. That seems to be the opposite of what I wanted.

I had to remove it and reboot a couple times. It didn't work at first but did after the 5th time. I have no idea why that is other than maybe I was using some cached version. It works now though after removing that bit.

This answer probably won't help anyone else other than warning people about the dangers of not documenting all changes. But if you are looking to implement that rule, don't!

Nautitko keskustelusta? Älä vain lue, vaan osallistu!

Luo tili jo tänään nauttiaksesi yksinoikeusominaisuuksista ja osallistuaksesi mahtavaan yhteisöömme!

Rekisteröidy

Aiheeseen liittyviä artikkeleita	Vastaukset	Näkymät
field 'x' used in attrs ({'invisible':['x','!=',False]}) is restricted to the group(s) account.group_account_invoice,account.group_account_readonly,account.group_account_manager. accounting contacts groups	0 tammik. 23	3564
importing contacts. Getting blocking error: Contacts require a name at multiple rows contacts	2 lokak. 25	1209
Blocking Errors contacts	1 lokak. 25	920
O18 EE: Completely unknown email addresses in the contacts? contacts	2 marrask. 25	1019
Add contacts to the seller field and not users contacts	1 toukok. 25	2552

Tämä kysymys on merkitty

Nautitko keskustelusta? Älä vain lue, vaan osallistu!