[IMP] portal_backend: enable to create and edit attachments

ingadhoc · Sep 28, 2023 · 374e42d · 374e42d
1 parent f568827
commit 374e42d
Show file tree

Hide file tree

Showing 4 changed files with 17 additions and 2 deletions.
diff --git a/portal_backend/__manifest__.py b/portal_backend/__manifest__.py
@@ -19,7 +19,7 @@
 ##############################################################################
 {
     'name': 'Portal Backend',
-    'version': "16.0.1.0.0",
+    'version': "16.0.1.1.0",
     'category': 'Base',
     'sequence': 14,
     'summary': '',

diff --git a/portal_backend/controllers/__init__.py b/portal_backend/controllers/__init__.py
@@ -4,3 +4,4 @@
 ##############################################################################
 
 from . import patch_web_controller_utils
+from . import discuss
diff --git a/portal_backend/controllers/discuss.py b/portal_backend/controllers/discuss.py
@@ -0,0 +1,14 @@
+from odoo import http, _
+from odoo.exceptions import UserError
+from odoo.http import request
+
+from odoo.addons.mail.controllers.discuss import DiscussController
+
+
+class PortalBackendDiscussController(DiscussController):
+
+    @http.route('/mail/attachment/delete', methods=['POST'], type='json', auth='public')
+    def mail_attachment_delete(self, attachment_id, access_token=None, **kwargs):
+        if request.env.user.has_group('portal_backend.group_portal_backend'):
+            raise UserError(_("You are not allowed to remove attachments"))
+        return super().mail_attachment_delete(attachment_id, access_token=access_token, **kwargs)
diff --git a/portal_backend/security/ir.model.access.csv b/portal_backend/security/ir.model.access.csv
@@ -4,7 +4,7 @@ access_ir_model_portal,ir.model.portal,base.model_ir_model,portal_backend.group_
 access_ir_fields_portal,ir.model.fields.portal,base.model_ir_model_fields,portal_backend.group_portal_backend,1,0,0,0
 access_ir_groups,ir.model.groups.portal,base.model_res_groups,portal_backend.group_portal_backend,1,0,0,0
 access_ir_model_data_portal,ir.model.model.data.portal,base.model_ir_model_data,portal_backend.group_portal_backend,1,0,1,0
-access_ir_attachment_portal,ir_attachment.portal,base.model_ir_attachment,portal_backend.group_portal_backend,1,0,0,0
+access_ir_attachment_portal,ir_attachment.portal,base.model_ir_attachment,portal_backend.group_portal_backend,1,1,1,0
 access_mail_activity_portal,mail.activity.portal,mail.model_mail_activity,portal_backend.group_portal_backend,1,0,1,0
 access_mail_activity_type_portal,access_mail_activity_type_portal.portal,mail.model_mail_activity_type,portal_backend.group_portal_backend,1,0,0,0
 access_mail_channel_portal,mail.group.portal,mail.model_mail_channel,portal_backend.group_portal_backend,1,0,1,0