From 23b0f38245eced2d40d06e5c3ae2ad5a92d6e396 Mon Sep 17 00:00:00 2001
From: Jorge Pinna Puissant <jpp@odoo.com>
Date: Wed, 3 Jun 2020 10:29:09 +0000
Subject: [PATCH] [FIX] hr_attendance: multi-company rule

Before this commit, a user with attendance administrator rights can see
the attendances of all users of all companies and not only the companies
he is allowed.

Now, the administrator will only see the attendances of the users of the
companies he is allowed.

opw-2263577

closes odoo/odoo#52355

X-original-commit: 0e8f86795db74fe21daa8776243415291371fdf6
Signed-off-by: Nicolas Lempereur (nle) <nle@odoo.com>
Signed-off-by: Jorge Pinna Puissant (jpp) <jpp@odoo.com>
---
 addons/hr_attendance/security/hr_attendance_security.xml | 9 ++++++++-
 1 file changed, 8 insertions(+), 1 deletion(-)

diff --git a/addons/hr_attendance/security/hr_attendance_security.xml b/addons/hr_attendance/security/hr_attendance_security.xml
index 013b6069ac7..f23e6ce9271 100644
--- a/addons/hr_attendance/security/hr_attendance_security.xml
+++ b/addons/hr_attendance/security/hr_attendance_security.xml
@@ -45,7 +45,14 @@
         <field name="comment">The user will have to enter his PIN to check in and out manually at the company screen.</field>
     </record>
 
-    <data noupdate="1">   
+    <data noupdate="1">
+
+        <record id="hr_attendance_rule_employee_company" model="ir.rule">
+            <field name="name">Employee multi company rule</field>
+            <field name="model_id" ref="model_hr_attendance"/>
+            <field name="global" eval="True"/>
+            <field name="domain_force">['|',('employee_id.company_id','=',False),('employee_id.company_id', 'in', company_ids)]</field>
+        </record>
 
         <record id="hr_attendance_rule_attendance_manager" model="ir.rule">
             <field name="name">attendance officer: full access</field>