[Erp5-dev] security problem

[Sebastien Robin]

Hi All,

I have an assignee in a module. This assignee has not the right to add 
portal cotent (and the acquire setting is off). But when I go to the 
module logged in has the assignee, then I do have in actions 'add New 
Something', and I'm able to add it. Is it a configuration problem or an 
ERP5  problem ?

And also, I don't have the right to delete, copy, paste something, but 
there is the delete,  cut, copy, paste icons. I think it should be really 
great to disable them when we don't have right to do things. Actually, I 
can clic on it and then I'm logged off.


  Seb.
-- 
Sebastien Robin, Nexedi Technical Director
Nexedi: Consulting and Development of Free / Open Source Software
http://www.nexedi.com
ERP5: Free / Open Source ERP Software for small and medium companies
http://www.erp5.org
Storever: OpenBrick, WiFi infrastructure, notebooks and servers
http://www.storever.com