Remove access right error message

Question

I have restricted access to users in the Contact app. I only want them to see contacts they created so I added the record rule below:
[('create_uid','=',user.id)]
But when the user views a contact (that they created) the following error message appears:
"
Due to security restrictions, you are not allowed to access 'Contact' (res.partner) records.
Records: feryialmangou (id=7)
User: feryialmangou (id=6)
This restriction is due to the following rules:
- Contact Restriction User
Contact your admini

asma@alhadargroup.com · Answer

Hi Feryial,

Try to replace your record rule with this rule it helps to show only ones created by the user.

Change:
[('create_uid','=',user.id)]

To:

['|',('user_id','=',user.id),('user_id','=',False)]

Best Regards.

Christoph Farnleitner · Answer

You will have to take the chatter section into consideration as well. Any follower on a contact not accessible to the user has the potential to break the the view. Same goes for any related contact (for example a sub-contact (an /individual/) within a /company/-type contact).

Related Posts	Replies	Zobrazenia
Time Off - Employees must only see overview of their department record_rules accessrights Timeoff	2 jan 25	3067
Read access to form despite not having write access record_rules accessrights odooV13	3 jan 24	2995
Model Record Rule Problem contact record_rules studio	0 mar 21	68
Record Rules related to current user Solved record_rules access_rules accessrights	1 dec 20	8455
How to give condition to a user group and admin using record rules. record_rules accessrights odoo12	0 aug 19	4496

This question has been flagged

Enjoying the discussion? Don't just read, join in!