[Erp5-dev] security problem

[Sebastien Robin]

Hi All,

I have an assignee in a module. This assignee has not the right to add
portal cotent (and the acquire setting is off). But when I go to the
module logged in has the assignee, then I do have in actions 'add New
Something', and I'm able to add it. Is it a configuration problem or an
ERP5 problem ?

And also, I don't have the right to delete, copy, paste something, but
there is the delete, cut, copy, paste icons. I think it should be really
great to disable them when we don't have right to do things. Actually, I
can clic on it and then I'm logged off.


Seb.

[Bartłomiej Górny]

Hello

Does anybody know if there is some EU support available, for development
or localisation of open source products for business, like ERP5?

I mean, we (in Poland) are thinking about developing a Polish version
(translation, accounts etc), and since we are already in the EU perhaps
we could get some financial support.

Thx
Bartek

[Jean-Paul Smets]

Post by Bartłomiej Górny
Hello
Does anybody know if there is some EU support available, for development
or localisation of open source products for business, like ERP5?
I mean, we (in Poland) are thinking about developing a Polish version
(translation, accounts etc), and since we are already in the EU perhaps
we could get some financial support.

Nexedi is part of EDOS EU project (a project related to QA in open source).
The time between applying a projet and getting the cash is between 1 and 2
years. I let you draw all the conclusions you want from that.... (I can not
write it here).

So, if you want a polish version quickly, it is better and cheaper not to
wait for the EU support. If you want to apply for the EU support for a
polish version, maybe you will get it and very likely, the polish support
will be made by someone else by the time the EU cash comes in.

This is why EU support is usually better suited for long term R&D.

JPS.

Post by Bartłomiej Górny
Thx
Bartek

[Bartłomiej Górny]

Thanks, pal - that may save us a lot of time and effort :)

Bartek

Post by Jean-Paul Smets

Post by Bartłomiej Górny
Hello
Does anybody know if there is some EU support available, for development
or localisation of open source products for business, like ERP5?
I mean, we (in Poland) are thinking about developing a Polish version
(translation, accounts etc), and since we are already in the EU perhaps
we could get some financial support.

Nexedi is part of EDOS EU project (a project related to QA in open source).
The time between applying a projet and getting the cash is between 1 and 2
years. I let you draw all the conclusions you want from that.... (I can not
write it here).
So, if you want a polish version quickly, it is better and cheaper not to
wait for the EU support. If you want to apply for the EU support for a
polish version, maybe you will get it and very likely, the polish support
will be made by someone else by the time the EU cash comes in.
This is why EU support is usually better suited for long term R&D.
JPS.

Post by Bartłomiej Górny
Thx
Bartek

[Yoshinori Okuji]

Post by Sebastien Robin
I have an assignee in a module. This assignee has not the right to
add portal cotent (and the acquire setting is off). But when I go to
the module logged in has the assignee, then I do have in actions 'add
New Something', and I'm able to add it. Is it a configuration problem
or an ERP5 problem ?

Are you sure that the account you used for this assignee does not have
any other role? For example, if the account is a Manager (in the ERP5
Site or in the whole Zope), this user can do anything. I think this is
a typical error. If not, I have no idea. I can look at it tomorrow, if
necessary.

Post by Sebastien Robin
And also, I don't have the right to delete, copy, paste something,
but there is the delete, cut, copy, paste icons. I think it should
be really great to disable them when we don't have right to do
things. Actually, I can clic on it and then I'm logged off.

I agree. Do you want to implement it? ;)

YO