devops_admin
/
odex25_standard
mirror of https://github.com/hydracp9/odex25_standard
1
0
Fork 0
Code Issues Packages Projects Releases Wiki Activity

allows admin see all directories created in the system

This commit is contained in:
Esraa-Exp 2025-02-16 07:08:13 +02:00
parent 0b515a7197
commit 1b95c8fda8
1 changed files with 4 additions and 4 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

8
odex25_dms/dms/models/dms_security_mixin.py
View File

@ -66,7 +66,7 @@ class DmsSecurityMixin(models.AbstractModel):
⚠ Not very performant; only display field on form views. ⚠ Not very performant; only display field on form views.
""" """
# Superuser unrestricted 🦸 # Superuser unrestricted 🦸
if self.env.su: if self.env.su or self.env.user.has_group('base.group_system'):
self.update( self.update(
{ {
"permission_create": True, "permission_create": True,
@ -94,7 +94,7 @@ class DmsSecurityMixin(models.AbstractModel):
@api.model @api.model
def _get_domain_by_inheritance(self, operation): def _get_domain_by_inheritance(self, operation):
"""Get domain for inherited accessible records.""" """Get domain for inherited accessible records."""
if self.env.su: if self.env.su or self.env.user.has_group('base.group_system'):
return [] return []
inherited_access_field = "storage_id_inherit_access_from_parent_record" inherited_access_field = "storage_id_inherit_access_from_parent_record"
if self._name != "dms.directory": if self._name != "dms.directory":
@ -188,13 +188,13 @@ class DmsSecurityMixin(models.AbstractModel):
_self = self _self = self
# HACK ir.rule domain is always computed with sudo, so if this check is # HACK ir.rule domain is always computed with sudo, so if this check is
# true, we can assume safely that you're checking permissions # true, we can assume safely that you're checking permissions
if self.env.su and value == self.env.uid: if self.env.su or self.env.user.has_group('base.group_system') and value == self.env.uid:
_self = self.sudo(False) _self = self.sudo(False)
value = bool(value) value = bool(value)
# Tricky one, to know if you want to search # Tricky one, to know if you want to search
# positive or negative access # positive or negative access
positive = (operator not in NEGATIVE_TERM_OPERATORS) == bool(value) positive = (operator not in NEGATIVE_TERM_OPERATORS) == bool(value)
if _self.env.su: if _self.env.su or self.env.user.has_group('base.group_system'):
# You're SUPERUSER_ID # You're SUPERUSER_ID
return TRUE_DOMAIN if positive else FALSE_DOMAIN return TRUE_DOMAIN if positive else FALSE_DOMAIN
# Obtain and combine domains # Obtain and combine domains