{"action":"created","issue":{"url":"https://api.github.com/repos/odoo/odoo/issues/9900","labels_url":"https://api.github.com/repos/odoo/odoo/issues/9900/labels{/name}","comments_url":"https://api.github.com/repos/odoo/odoo/issues/9900/comments","events_url":"https://api.github.com/repos/odoo/odoo/issues/9900/events","html_url":"https://github.com/odoo/odoo/pull/9900","id":120187035,"number":9900,"title":"[FIX] analytic, sale: timesheet access rights","user":{"login":"simongoffin","id":5430156,"avatar_url":"https://avatars.githubusercontent.com/u/5430156?v=3","gravatar_id":"","url":"https://api.github.com/users/simongoffin","html_url":"https://github.com/simongoffin","followers_url":"https://api.github.com/users/simongoffin/followers","following_url":"https://api.github.com/users/simongoffin/following{/other_user}","gists_url":"https://api.github.com/users/simongoffin/gists{/gist_id}","starred_url":"https://api.github.com/users/simongoffin/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/simongoffin/subscriptions","organizations_url":"https://api.github.com/users/simongoffin/orgs","repos_url":"https://api.github.com/users/simongoffin/repos","events_url":"https://api.github.com/users/simongoffin/events{/privacy}","received_events_url":"https://api.github.com/users/simongoffin/received_events","type":"User","site_admin":false},"labels":[{"url":"https://api.github.com/repos/odoo/odoo/labels/OE","name":"OE","color":"a24689"}],"state":"open","locked":false,"assignee":{"login":"beledouxdenis","id":5822488,"avatar_url":"https://avatars.githubusercontent.com/u/5822488?v=3","gravatar_id":"","url":"https://api.github.com/users/beledouxdenis","html_url":"https://github.com/beledouxdenis","followers_url":"https://api.github.com/users/beledouxdenis/followers","following_url":"https://api.github.com/users/beledouxdenis/following{/other_user}","gists_url":"https://api.github.com/users/beledouxdenis/gists{/gist_id}","starred_url":"https://api.github.com/users/beledouxdenis/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/beledouxdenis/subscriptions","organizations_url":"https://api.github.com/users/beledouxdenis/orgs","repos_url":"https://api.github.com/users/beledouxdenis/repos","events_url":"https://api.github.com/users/beledouxdenis/events{/privacy}","received_events_url":"https://api.github.com/users/beledouxdenis/received_events","type":"User","site_admin":false},"milestone":null,"comments":2,"created_at":"2015-12-03T14:46:53Z","updated_at":"2015-12-08T17:45:02Z","closed_at":null,"pull_request":{"url":"https://api.github.com/repos/odoo/odoo/pulls/9900","html_url":"https://github.com/odoo/odoo/pull/9900","diff_url":"https://github.com/odoo/odoo/pull/9900.diff","patch_url":"https://github.com/odoo/odoo/pull/9900.patch"},"body":"A user with employee rights should be able to create a timesheet line.\r\n\r\nopw:658083"},"comment":{"url":"https://api.github.com/repos/odoo/odoo/issues/comments/162958247","html_url":"https://github.com/odoo/odoo/pull/9900#issuecomment-162958247","issue_url":"https://api.github.com/repos/odoo/odoo/issues/9900","id":162958247,"user":{"login":"beledouxdenis","id":5822488,"avatar_url":"https://avatars.githubusercontent.com/u/5822488?v=3","gravatar_id":"","url":"https://api.github.com/users/beledouxdenis","html_url":"https://github.com/beledouxdenis","followers_url":"https://api.github.com/users/beledouxdenis/followers","following_url":"https://api.github.com/users/beledouxdenis/following{/other_user}","gists_url":"https://api.github.com/users/beledouxdenis/gists{/gist_id}","starred_url":"https://api.github.com/users/beledouxdenis/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/beledouxdenis/subscriptions","organizations_url":"https://api.github.com/users/beledouxdenis/orgs","repos_url":"https://api.github.com/users/beledouxdenis/repos","events_url":"https://api.github.com/users/beledouxdenis/events{/privacy}","received_events_url":"https://api.github.com/users/beledouxdenis/received_events","type":"User","site_admin":false},"created_at":"2015-12-08T17:45:02Z","updated_at":"2015-12-08T17:45:02Z","body":"Not ok to me.\r\n\r\nEmployees should be able to create time-sheet lines, indeed.\r\n\r\nNevertheless, they should not be allowed to create analytic accounts (`model_account_analytic_account`).\r\n\r\nRegarding `sale.order` & `sale.order.line`, same answers: Only Sales > See Own Leads must be able to create those (and for this specific group, only if the `user_id` of these models are themselves)\r\n\r\nI am not sure to follow: Does the creation of a time-sheet line lead to the creation of a `sale order` ? In which conditions ? If this is indeed the case, on purpose, in some conditions, then the sale order should probably be created as `SUPERUSER_ID`. The same can be applied for the `account.analytic.account`"}}