Odoo is the world's easiest all-in-one management software.
It includes hundreds of business apps:
Created a sale order
A user with Inventory Manager and Sale Manager access levels tries to confirm sale order quotation.
An error message appears:
The requested operation cannot be completed due to security restrictions. Please contact your system administrator.
(Document type: stock.location, Operation: read)
Why? Where? How?
Which model? Which group?
How can I find which access permission is missing? How can I debug it?
Thanks in advance.
So here is how I debugged the problem, what was the problem and the way I solved it.
When Odoo nags about access permission it is very cold! There is just a dialog saying that you cannot access a model and that you have to contact the Administrator and if you're the administrator, you gonna' have hard times once your colleagues come to you just to find you clueless about source of the problem.
This is how I debugged it:
I modified the file ./models.py in root folder of Odoo to add traceback and variable dump functionality to it. As I was using official docker image of Odoo I had to modify my docker file to make odoo installation folder writable:
RUN chmod a+rwx -R /usr/lib/python2.7/dist-packages/odoo \
&& apt-get update && apt-get -y install vim
And to add the vim. Later I modified:
/usr/lib/python2.7/dist-packages/odoo/models.py
And here is the diff:
29d28
< import traceback
3172,3175d3170
< _logger.info('HERE!')
< _logger.info(vars(self))
< for line in traceback.format_stack():
< _logger.info(line.strip())
Looking into traceback and vars output told me that the issue is happening due to trying to access a location with some ID.
What was the probem?
Looking into database I found the root cause. Some incompetent personnel of us couldn't do something easy in Odoo so desparately went to warehouse configuration and tried to change anything he could find by random, including changing parent location of locations, etc. so messed with our whole inventory system. In our case an old and archived location was set as parent location of 'Physical Location' therefore rendering all physical locations useless!
How I solved the issue?
Pretty much reverted his changes through database tables.
Conclusion
The access permission error message is pretty useless and just sends employees to administrators. The log output of server doesn't help either. Adding a traceback and vars output to log output helps a lot. I grep'ed the whole source tree for the error message to find that the error is happening in two places within models.py and added traceback and vars output to one of them so I was able to solve the issue.
Thanks.
Hi Aario,
First of all you have to check which user group is currently logged in, ie whether user in sales or manager in sales like that.
Then here in the warning message it is shown that there is no access permission for the model 'stock.location' . So what you have to do is,
Activate the developer mode, then go to Settings -> Users -> Groups , then select the corresponding group and add the model in the access right tab(if it is not there ), with required permission such as read, write, delete and create.
Thanks
Thanks for the reply. I checked the user is member of both Sales Manager and Inventory / Manager and for both groups read permission was already granted for stock.location model. I granted all permissions for this model yet it's not possible to confirm a sale order and same error happens. Any idea is highly appreciated.
Actually no user other than administrator itself can confirm a sale. Even users with all the permissions granted even administration settings.
on clicking the confirm button you getting the above warning message ?
1. Use the live chat to ask your questions.
2. The operator answers within a few minutes.
