Odoo Help

Welcome!

This community is for beginners and experts willing to share their Odoo knowledge. It's not a forum to discuss ideas, but a knowledge base of questions and their answers.

0

Why does a security rule allowing every employee to view leaves data of other employees?

By
Manvir Kaur
on 5/31/16, 11:47 AM 200 views

<record id="property_rule_holidays_employee" model="ir.rule">
<field name="name">Employee Holidays</field>
<field name="model_id" ref="model_hr_holidays"/>
<field name="domain_force">['|', ('employee_id.user_id','=',user.id), ('state', '=', 'validate')]</field>
<field name="perm_create" eval="False"/>
<field name="perm_write" eval="False"/>
<field name="perm_unlink" eval="False"/>
<field name="groups" eval="[(4,ref('base.group_user'))]"/>
</record>


https://github.com/odoo/odoo/blob/9.0/addons/hr_holidays/security/ir_rule.xml

Due to the state = validate condition that is added to the version 9, all employees can see data of others. Since, it is an or condition either of them can be true.

But what if I do not want all employees to view leaves of others but only their own?

Your Answer

Please try to give a substantial answer. If you wanted to comment on the question or answer, just use the commenting tool. Please remember that you can always revise your answers - no need to answer the same question twice. Also, please don't forget to vote - it really helps to select the best questions and answers!

About This Community

This community is for professionals and enthusiasts of our products and services. Read Guidelines

Question tools

1 follower(s)

Stats

Asked: 5/31/16, 11:47 AM
Seen: 200 times
Last updated: 5/31/16, 3:03 PM