/usr/share/doc/tryton-server-doc/html/topics/access_rights.html is in tryton-server-doc 4.6.3-2.
This file is owned by root:root, with mode 0o644.
The actual contents of the file can be viewed below.
1 2 3 4 5 6 7 8 9 10 11 12 13 14 15 16 17 18 19 20 21 22 23 24 25 26 27 28 29 30 31 32 33 34 35 36 37 38 39 40 41 42 43 44 45 46 47 48 49 50 51 52 53 54 55 56 57 58 59 60 61 62 63 64 65 66 67 68 69 70 71 72 73 74 75 76 77 78 79 80 81 82 83 84 85 86 87 88 89 90 91 92 93 94 95 96 97 98 99 100 101 102 103 104 105 106 107 108 109 110 111 112 113 114 115 116 117 118 119 120 121 122 123 124 125 126 127 128 129 130 131 132 133 134 135 136 137 138 139 140 141 142 143 144 145 146 147 148 149 150 151 152 153 154 155 156 157 158 159 160 161 162 163 164 165 166 167 168 169 170 171 172 173 174 175 176 177 | <!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Transitional//EN"
"http://www.w3.org/TR/xhtml1/DTD/xhtml1-transitional.dtd">
<html xmlns="http://www.w3.org/1999/xhtml">
<head>
<meta http-equiv="Content-Type" content="text/html; charset=utf-8" />
<title>Access Rights — trytond 4.6 documentation</title>
<link rel="stylesheet" href="../_static/classic.css" type="text/css" />
<link rel="stylesheet" href="../_static/pygments.css" type="text/css" />
<script type="text/javascript">
var DOCUMENTATION_OPTIONS = {
URL_ROOT: '../',
VERSION: '4.6',
COLLAPSE_INDEX: false,
FILE_SUFFIX: '.html',
HAS_SOURCE: true,
SOURCELINK_SUFFIX: '.txt'
};
</script>
<script type="text/javascript" src="../_static/jquery.js"></script>
<script type="text/javascript" src="../_static/underscore.js"></script>
<script type="text/javascript" src="../_static/doctools.js"></script>
<link rel="index" title="Index" href="../genindex.html" />
<link rel="search" title="Search" href="../search.html" />
<link rel="next" title="Triggers" href="triggers.html" />
<link rel="prev" title="PYSON" href="pyson.html" />
</head>
<body>
<div class="related" role="navigation" aria-label="related navigation">
<h3>Navigation</h3>
<ul>
<li class="right" style="margin-right: 10px">
<a href="../genindex.html" title="General Index"
accesskey="I">index</a></li>
<li class="right" >
<a href="../py-modindex.html" title="Python Module Index"
>modules</a> |</li>
<li class="right" >
<a href="triggers.html" title="Triggers"
accesskey="N">next</a> |</li>
<li class="right" >
<a href="pyson.html" title="PYSON"
accesskey="P">previous</a> |</li>
<li class="nav-item nav-item-0"><a href="../index.html">trytond 4.6 documentation</a> »</li>
<li class="nav-item nav-item-1"><a href="index.html" accesskey="U">Using trytond</a> »</li>
</ul>
</div>
<div class="document">
<div class="documentwrapper">
<div class="bodywrapper">
<div class="body" role="main">
<div class="section" id="access-rights">
<span id="topics-access-rights"></span><h1>Access Rights<a class="headerlink" href="#access-rights" title="Permalink to this headline">¶</a></h1>
<p>There are 5 levels of access rights: model, actions, field, button and record.
Every access right is based on the groups of the user.
The model and field access rights are checked for every RPC call for which
<a class="reference internal" href="../ref/rpc.html#trytond.rpc.RPC.check_access" title="trytond.rpc.RPC.check_access"><code class="xref py py-attr docutils literal"><span class="pre">trytond.rpc.RPC.check_access</span></code></a> is set. The others are always enforced.</p>
<div class="section" id="model-access">
<h2>Model Access<a class="headerlink" href="#model-access" title="Permalink to this headline">¶</a></h2>
<p>They are defined by records of <cite>ir.model.access</cite> which define for each couple
of model and group, the read, write, create and delete permission. If any group
of the user has the permission activated, then the user is granted this
permission.</p>
</div>
<div class="section" id="actions-access">
<h2>Actions Access<a class="headerlink" href="#actions-access" title="Permalink to this headline">¶</a></h2>
<p>Each action define a list of groups that are allowed to use it.
There is a special case for ref:<cite>wizard <topics-wizard></cite> for which the read
access on the model is also checked and also the write access if there is no
groups linked.</p>
</div>
<div class="section" id="field-access">
<h2>Field Access<a class="headerlink" href="#field-access" title="Permalink to this headline">¶</a></h2>
<p>Same as for model access but applied on the field. It uses records of
<cite>ir.model.field.access</cite>.</p>
</div>
<div class="section" id="button">
<h2>Button<a class="headerlink" href="#button" title="Permalink to this headline">¶</a></h2>
<p>For each button of a model the records of <cite>ir.model.button</cite> define the list of
groups that are allowed to call it.</p>
</div>
<div class="section" id="button-rule">
<h2>Button Rule<a class="headerlink" href="#button-rule" title="Permalink to this headline">¶</a></h2>
<p>The <cite>ir.model.button</cite> could contain a list of rules which define how much
different users must click on the button. Each rule must be passed to actually
trigger the action. The counter can be reset when another defined button is
clicked.</p>
</div>
<div class="section" id="record-rule">
<h2>Record Rule<a class="headerlink" href="#record-rule" title="Permalink to this headline">¶</a></h2>
<p>They are defined by records of <cite>ir.rule.group</cite> which contains a list of
<cite>ir.rule</cite> domain to which the rule applies. The group are selected by groups or
users. The access is granted for a record:</p>
<blockquote>
<div><ul class="simple">
<li>if the user is in at least one group that has the permission activated,</li>
<li>or if the user is in no group by there is a default group with the
permission,</li>
<li>or if there is a global group with the permission.</li>
</ul>
</div></blockquote>
</div>
</div>
</div>
</div>
</div>
<div class="sphinxsidebar" role="navigation" aria-label="main navigation">
<div class="sphinxsidebarwrapper">
<h3><a href="../index.html">Table Of Contents</a></h3>
<ul>
<li><a class="reference internal" href="#">Access Rights</a><ul>
<li><a class="reference internal" href="#model-access">Model Access</a></li>
<li><a class="reference internal" href="#actions-access">Actions Access</a></li>
<li><a class="reference internal" href="#field-access">Field Access</a></li>
<li><a class="reference internal" href="#button">Button</a></li>
<li><a class="reference internal" href="#button-rule">Button Rule</a></li>
<li><a class="reference internal" href="#record-rule">Record Rule</a></li>
</ul>
</li>
</ul>
<h4>Previous topic</h4>
<p class="topless"><a href="pyson.html"
title="previous chapter">PYSON</a></p>
<h4>Next topic</h4>
<p class="topless"><a href="triggers.html"
title="next chapter">Triggers</a></p>
<div role="note" aria-label="source link">
<h3>This Page</h3>
<ul class="this-page-menu">
<li><a href="../_sources/topics/access_rights.rst.txt"
rel="nofollow">Show Source</a></li>
</ul>
</div>
<div id="searchbox" style="display: none" role="search">
<h3>Quick search</h3>
<form class="search" action="../search.html" method="get">
<div><input type="text" name="q" /></div>
<div><input type="submit" value="Go" /></div>
<input type="hidden" name="check_keywords" value="yes" />
<input type="hidden" name="area" value="default" />
</form>
</div>
<script type="text/javascript">$('#searchbox').show(0);</script>
</div>
</div>
<div class="clearer"></div>
</div>
<div class="related" role="navigation" aria-label="related navigation">
<h3>Navigation</h3>
<ul>
<li class="right" style="margin-right: 10px">
<a href="../genindex.html" title="General Index"
>index</a></li>
<li class="right" >
<a href="../py-modindex.html" title="Python Module Index"
>modules</a> |</li>
<li class="right" >
<a href="triggers.html" title="Triggers"
>next</a> |</li>
<li class="right" >
<a href="pyson.html" title="PYSON"
>previous</a> |</li>
<li class="nav-item nav-item-0"><a href="../index.html">trytond 4.6 documentation</a> »</li>
<li class="nav-item nav-item-1"><a href="index.html" >Using trytond</a> »</li>
</ul>
</div>
<div class="footer" role="contentinfo">
© Copyright 2008-2018, Bertrand Chenal, Cédric Krier, Ian Wilson, Udo Spallek.
Created using <a href="http://sphinx-doc.org/">Sphinx</a> 1.6.7.
</div>
</body>
</html>
|