# -*- coding: utf-8 -*- import logging from odoo import SUPERUSER_ID, api, fields, models _logger = logging.getLogger(__name__) class ResUsersRole(models.Model): _name = "res.users.role" _inherits = {"res.groups": "group_id"} _description = "User role" group_id = fields.Many2one( comodel_name="res.groups", required=True, ondelete="cascade", readonly=True, string="Associated group", ) line_ids = fields.One2many( comodel_name="res.users.role.line", inverse_name="role_id", string="Role lines" ) user_ids = fields.One2many( comodel_name="res.users", string="Users list", compute="_compute_user_ids" ) rule_ids = fields.Many2many( comodel_name="ir.rule", compute="_compute_rule_ids", string="Record Rules", required=False, ) rules_count = fields.Integer(compute="_compute_rule_ids") model_access_ids = fields.Many2many( comodel_name="ir.model.access", compute="_compute_model_access_ids", string="Access Rights", required=False, ) model_access_count = fields.Integer(compute="_compute_model_access_ids") group_category_id = fields.Many2one( related="group_id.category_id", default=lambda cls: cls.env.ref("app_user_admin.ir_module_category_role").id, string="Associated category", help="Associated group's category", readonly=False, ) @api.depends("line_ids.user_id") def _compute_user_ids(self): for role in self.sudo() if self._bypass_rules() else self: role.user_ids = role.line_ids.mapped("user_id") @api.depends("implied_ids", "implied_ids.model_access") def _compute_model_access_ids(self): for rec in self: rec.model_access_ids = rec.implied_ids.model_access.ids rec.model_access_count = len(rec.model_access_ids) @api.depends("implied_ids", "implied_ids.rule_groups") def _compute_rule_ids(self): for rec in self: rec.rule_ids = rec.implied_ids.rule_groups.ids rec.rules_count = len(rec.rule_ids) @api.model def _bypass_rules(self): # Run methods as super user to avoid problems by "Administrator/Access Right" return self._name == "res.users.role" and self.env.user.has_group( "base.group_erp_manager" ) @api.model_create_multi def create(self, vals_list): model = (self.sudo() if self._bypass_rules() else self).browse() new_records = super(ResUsersRole, model).create(vals_list) new_records.update_users() return new_records def read(self, fields=None, load="_classic_read"): recs = self.sudo() if self._bypass_rules() else self return super(ResUsersRole, recs).read(fields, load) def write(self, vals): recs = self.sudo() if self._bypass_rules() else self # Workaround to solve issue with broken code in odoo that clear the # cache during the write: see odoo/addons/base/models/res_users.py#L226 groups_vals = {} for field in recs.group_id._fields: if field in vals: groups_vals[field] = vals.pop(field) if groups_vals: recs.group_id.write(groups_vals) res = super(ResUsersRole, recs).write(vals) recs.update_users() return res def unlink(self): users = self.mapped("user_ids") res = super(ResUsersRole, self).unlink() users.set_groups_from_roles(force=True) return res def update_users(self): """Update all the users concerned by the roles identified by `ids`.""" users = self.mapped("user_ids") users.set_groups_from_roles() return True @api.model def cron_update_users(self): logging.info("Update user roles") self.search([]).update_users() def show_rule_ids(self): action = self.env["ir.actions.actions"]._for_xml_id("base.action_rule") action["domain"] = [("id", "in", self.rule_ids.ids)] return action def show_model_access_ids(self): action = self.env["ir.actions.actions"]._for_xml_id("base.ir_access_act") action["domain"] = [("id", "in", self.model_access_ids.ids)] return action