From 0cd54df59660372adffb37d0642caace3612a3c9 Mon Sep 17 00:00:00 2001
From: std-odoo <std@odoo.com>
Date: Tue, 12 Oct 2021 12:38:03 +0000
Subject: [PATCH] [FIX] event: allow internal users to read registrations
Bug
===
Since 85053a8b667429d1510429cf5bd6ff665206a21d we limited the access
of the registration to the event users. But now we want to limit the
access to the internal users.
So only the portal users and the public users will be concerned by this
restriction.
Task-2666823
closes odoo/odoo#78235
Signed-off-by: Thibault Delavallee (tde) <tde@openerp.com>
---
addons/event/i18n/event.pot | 6 ++++++
addons/event/models/event.py | 6 +++++-
2 files changed, 11 insertions(+), 1 deletion(-)
diff --git a/addons/event/i18n/event.pot b/addons/event/i18n/event.pot
index 9aa14ad5fbd2..41be066f01e8 100644
--- a/addons/event/i18n/event.pot
+++ b/addons/event/i18n/event.pot
@@ -1711,6 +1711,12 @@ msgstr ""
msgid "Only event users or managers are allowed to create or update registrations."
msgstr "Only event users or managers are allowed to create or update registrations."
+#. module: event
+#: code:addons/event/models/event.py:441
+#, python-format
+msgid "Only internal users are allowed to read registrations."
+msgstr "Only internal users are allowed to read registrations."
+
#. module: event
#: model_terms:event.event,description:event.event_0
msgid ""
diff --git a/addons/event/models/event.py b/addons/event/models/event.py
index 6d7a4c5067c1..d292dff3a45f 100644
--- a/addons/event/models/event.py
+++ b/addons/event/models/event.py
@@ -436,7 +436,11 @@ class EventRegistration(models.Model):
@api.model
def check_access_rights(self, operation, raise_exception=True):
- if not self.env.is_admin() and not self.user_has_groups('event.group_event_user'):
+ if operation == 'read' and not self.env.is_admin() and not self.user_has_groups('base.group_user'):
+ if raise_exception:
+ raise AccessError(_('Only internal users are allowed to read registrations.'))
+ return False
+ elif operation != 'read' and not self.env.is_admin() and not self.user_has_groups('event.group_event_user'):
if raise_exception:
raise AccessError(_('Only event users or managers are allowed to create or update registrations.'))
return False
--
GitLab