test of access rights and rules (test_access_rights)

Security findings

Repository: odoo/odoo · module folder
Module version: 0.0.1
Category: Hidden/Tests
Folder size: 0.04 MB
License: LGPL-3
Application: No
Auto-installable: No
Website: None
Last tracking update: 2026-08-07 06:47:06
Authors: Odoo S.A.
Maintainers: Odoo S.A.
Committers: Raphael Collet, Julien Castiaux, Paul Morelle, Rémy Voet (ryv), Gorash, Krzysztof Magusiak (krma)

Odoo dependencies

None

Python dependencies

None

System dependencies

None

Required by

None

Description

Testing of access restrictions

Code Analysis info_outline

Views touched (0)

No views found for this module.

HTTP endpoints (0)

No HTTP endpoints found for this module.

Models touched (7)

New fields (2)

currency_id Many2one → res.currency
compute='_get_company_currency' readonly=True args: 'res.currency'
monetary Monetary

Public methods (0)

No public methods.

New fields (1)

parent_id Many2one → test_access_right.some_obj
args: 'test_access_right.some_obj'

Public methods (0)

No public methods.

New fields (1)

some_ids Many2many → test_access_right.some_obj
args: 'test_access_right.some_obj', 'test_access_right_rel', 'container_id', 'some_id'

Public methods (0)

No public methods.

New fields (1)

some_id Many2one → test_access_right.some_obj
ondelete='restrict' required=True args: 'test_access_right.some_obj'

Public methods (0)

No public methods.

New fields (1)

name Char
required=True

Public methods (1)

search_fetch(self, domain, field_names=None, offset=0, limit=None, order=None)
@api.model

New fields (8)

active Boolean
default=True
categ_id Many2one → test_access_right.obj_categ
args: 'test_access_right.obj_categ'
company_id Many2one → res.company
args: 'res.company'
forbidden Integer
default=5 groups='test_access_rights.test_group,base.group_portal'
forbidden2 Integer
groups='test_access_rights.test_group'
forbidden3 Integer
groups=fields.NO_ACCESS
parent_id Many2one → test_access_right.some_obj
args: 'test_access_right.some_obj'
val Integer

Public methods (0)

No public methods.

New fields (2)

message_partner_ids Many2many → res.partner
comodel_name='res.partner'
name Char

Public methods (0)

No public methods.

Loading…

Code Analysis info_outline

Views touched (0)

HTTP endpoints (0)

Models touched (7)

res.partner Extends Model 2 fields 0 methods ResPartner · inherits res.partner User inherits partner, so we are implicitly adding these fields to User This essentially reproduces the (sad) situation introduced by account.

test_access_right.child New model Model 1 field 0 methods Test_Access_RightChild · Object for testing company ir rule

test_access_right.container New model Model 1 field 0 methods Test_Access_RightContainer · Test Access Right Container

test_access_right.inherits New model Model 1 field 0 methods Test_Access_RightInherits · Object for testing related access rights

test_access_right.obj_categ New model Model 1 field 1 method Test_Access_RightObj_Categ · Context dependent searchable model

test_access_right.some_obj New model Model 8 fields 0 methods Test_Access_RightSome_Obj · Object For Test Access Right

test_access_right.ticket New model Model 2 fields 0 methods Test_Access_RightTicket · Fake ticket For Test Access Right We want to simulate a record that would typically be accessed by a portal user, with a relational field to records that could not be accessed by a portal user.