You signed in with another tab or window. Reload to refresh your session.You signed out in another tab or window. Reload to refresh your session.You switched accounts on another tab or window. Reload to refresh your session.Dismiss alert
Impacted versions:
Odoo 15.0-20211119 (Community Edition)
ALL THE WAY TO
Odoo 15.0-20220826 (Community Edition)
Steps to reproduce:
User Access Rights:
Inventory: Administrator
Administration: (BLANK)
Navigate to: Product -> Any Product -> Print Labels
Current behavior:
[ERROR MESSAGE]
You are not allowed to access 'Choose the sheet layout to print the labels' (product.label.layout) records.
This operation is allowed for the following groups:
- Administration/Settings
Contact your administrator to request access if necessary.
Workaround:
The "workaround" is to give site wide admin to all users that want to print. This BY DESIGN requirement is a security issue and gains users full site manipulation. This is not a Vulnerability. Full site Admin should NOT be a requirement to print a label.
Expected behavior:
"Normal users" should be able to print without site wide Administration rights
Video/Screenshot link (optional):
Support ticket number submitted via odoo.com/help (optional):
The text was updated successfully, but these errors were encountered:
adamflorizone
changed the title
Product Admins MUST be sitewide admins: [ERROR] You are not allowed to access 'Choose the sheet layout to print the labels' (product.label.layout) records.
Product Admins MUST be sitewide admins to print: [ERROR] You are not allowed to access
Sep 1, 2022
adamflorizone
changed the title
Product Admins MUST be sitewide admins to print: [ERROR] You are not allowed to access
Product admins are required be sitewide admin to print: [ERROR] You are not allowed to access
Sep 1, 2022
@adamflorizone tested in runbot and in my local with the given scenario and was not able to reproduce the case.
also checked the security for the model: product.label.layout and seems internal users have access to it
Impacted versions:
Odoo 15.0-20211119 (Community Edition)
ALL THE WAY TO
Odoo 15.0-20220826 (Community Edition)
Steps to reproduce:
User Access Rights:
Navigate to: Product -> Any Product -> Print Labels
Current behavior:
[ERROR MESSAGE]
Workaround:
The "workaround" is to give site wide admin to all users that want to print. This BY DESIGN requirement is a security issue and gains users full site manipulation. This is not a Vulnerability. Full site Admin should NOT be a requirement to print a label.
Expected behavior:
"Normal users" should be able to print without site wide Administration rights
Video/Screenshot link (optional):
Support ticket number submitted via odoo.com/help (optional):
The text was updated successfully, but these errors were encountered: