From 083e5ea72aa2c5f5ff8f1b858876623d495ea77f Mon Sep 17 00:00:00 2001
From: Mantavya Gajjar <mga@tinyerp.com>
Date: Tue, 29 Apr 2008 11:15:06 +0000
Subject: [PATCH] Change the Security policy according to the Fabien, keep only
 2 entry on each object

bzr revid: mga@tinyerp.com-1e9f55fb23d77eded992b1f4a37a8fccd0a043e2
---
 addons/hr/hr_security.xml | 52 ++-------------------------------------
 1 file changed, 2 insertions(+), 50 deletions(-)

diff --git a/addons/hr/hr_security.xml b/addons/hr/hr_security.xml
index c79a5c5eee0..b49c0acdc14 100644
--- a/addons/hr/hr_security.xml
+++ b/addons/hr/hr_security.xml
@@ -4,26 +4,18 @@
 
 		<record model="res.groups" id="group_hr_manager">
 			<field name="name">HR Manager</field>
-			<field eval="[(6,0,[ref('hr.menu_open_view_employee_tree'),ref('hr.menu_open_view_employee_list'),ref('hr.menu_open_view_employee_new'),ref('hr.menu_view_employee_category_form')])]" name="menu_access"/>
+			<field eval="[(4, ref('hr.menu_open_view_employee_tree')), (4, ref('hr.menu_open_view_employee_list')), (4, ref('hr.menu_open_view_employee_new')), (4, ref('hr.menu_view_employee_category_form'))]" name="menu_access"/>
 		</record>
 
 		<record model="res.groups" id="group_hr_employee">
 			<field name="name">Employee</field>
-			<field eval="[(6,0,[ref('hr.menu_open_view_employee_tree'),ref('hr.menu_open_view_employee_list'),ref('hr.menu_open_view_employee_new'),ref('hr.menu_view_employee_category_form')])]" name="menu_access"/>
+			<field eval="[(4, ref('hr.menu_open_view_employee_tree')), (4, ref('hr.menu_open_view_employee_list')),(4, ref('hr.menu_open_view_employee_new')), (4, ref('hr.menu_view_employee_category_form'))]" name="menu_access"/>
 		</record>
 
 		<record model="res.users" id="base.group_admin">
 			<field name="groups_id" eval="[(4, ref('base.group_admin')), (4, ref('group_hr_employee')),(4, ref('group_hr_manager'))]"/>
 		</record>
 
-		<!--
-		<record id="hr.group_hr_employee" model="res.users">
-		</record>
-
-		<record id="hr.group_hr_manager" model="res.users">
-		</record>
-		-->
-
 		<!-- Department security -->
 		<record model="ir.model.access" id="access_hr_department">
 			<field name="name">HR Department</field>
@@ -94,16 +86,6 @@
 			<field name="perm_unlink" eval="False"/>
 		</record>
 
-		<record model="ir.model.access" id="access_hr_employee_manager">
-			<field name="name">HR Employee</field>
-			<field name="model_id" model="ir.model" search="[('model', '=', 'hr.employee')]"/>
-			<field name="group_id" ref="group_hr_manager"/>
-			<field name="perm_read" eval="True"/>
-			<field name="perm_write" eval="True"/>
-			<field name="perm_create" eval="True"/>
-			<field name="perm_unlink" eval="True"/>
-		</record>
-
 		<record model="ir.model.access" id="access_hr_employee_employee">
 			<field name="name">HR Employee</field>
 			<field name="model_id" model="ir.model" search="[('model', '=', 'hr.employee')]"/>
@@ -124,16 +106,6 @@
 			<field name="perm_unlink" eval="False"/>
 		</record>
 
-		<record model="ir.model.access" id="access_hr_timesheet_manager">
-			<field name="name">HR Employee Timesheet</field>
-			<field name="model_id" model="ir.model" search="[('model', '=', 'hr.timesheet')]"/>
-			<field name="group_id" ref="group_hr_manager"/>
-			<field name="perm_read" eval="True"/>
-			<field name="perm_write" eval="True"/>
-			<field name="perm_create" eval="True"/>
-			<field name="perm_unlink" eval="True"/>
-		</record>
-
 		<record model="ir.model.access" id="access_hr_timesheet_employee">
 			<field name="name">HR Employee Timesheet</field>
 			<field name="model_id" model="ir.model" search="[('model', '=', 'hr.timesheet')]"/>
@@ -174,16 +146,6 @@
 			<field name="perm_unlink" eval="False"/>
 		</record>
 
-		<record model="ir.model.access" id="access_hr_attendance_manager">
-			<field name="name">HR Attendance</field>
-			<field name="model_id" model="ir.model" search="[('model', '=', 'hr.attendance')]"/>
-			<field name="group_id" ref="group_hr_manager"/>
-			<field name="perm_read" eval="True"/>
-			<field name="perm_write" eval="True"/>
-			<field name="perm_create" eval="True"/>
-			<field name="perm_unlink" eval="True"/>
-		</record>
-
 		<record model="ir.model.access" id="access_hr_attendance_employee">
 			<field name="name">HR Attendance</field>
 			<field name="model_id" model="ir.model" search="[('model', '=', 'hr.attendance')]"/>
@@ -224,16 +186,6 @@
 			<field name="perm_unlink" eval="False"/>
 		</record>
 
-		<record model="ir.model.access" id="access_hr_holiday_manager">
-			<field name="name">HR Holidays</field>
-			<field name="model_id" model="ir.model" search="[('model', '=', 'hr.holidays')]"/>
-			<field name="group_id" ref="group_hr_manager"/>
-			<field name="perm_read" eval="True"/>
-			<field name="perm_write" eval="True"/>
-			<field name="perm_create" eval="True"/>
-			<field name="perm_unlink" eval="True"/>
-		</record>
-
 		<record model="ir.model.access" id="access_hr_holiday_employee">
 			<field name="name">HR Holidays</field>
 			<field name="model_id" model="ir.model" search="[('model', '=', 'hr.holidays')]"/>