pengyuthon/odoo_source
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity

[REF] resource: update security rules

Browse Source 
Add some rules to enable the read of calendar records by employees as
those rules should not be defined a bit everywhere in various addons.
This commit is contained in:
Thibault Delavallée
2017-02-27 14:04:48 +01:00
parent ff32384b8f
commit 27d41ccbb5
2 changed files with 18 additions and 9 deletions
Download Patch File Download Diff File Expand all files Collapse all files
addons/resource/security/ir.model.access.csv
+5 -3
View File
@@ -1,7 +1,9 @@
id,name,model_id:id,group_id:id,perm_read,perm_write,perm_create,perm_unlink
access_resource_calendar,resource.calendar,model_resource_calendar,base.group_system,1,1,1,1
access_resource_calendar_attendance,resource.calendar.attendance,model_resource_calendar_attendance,base.group_system,1,1,1,1
access_resource_calendar_user,resource.calendar.user,model_resource_calendar,base.group_user,1,0,0,0
access_resource_calendar_system,resource.calendar.system,model_resource_calendar,base.group_system,1,1,1,1
access_resource_calendar_attendance_user,resource.calendar.attendance.user,model_resource_calendar_attendance,base.group_user,1,0,0,0
access_resource_calendar_attendance_system,resource.calendar.attendance.system,model_resource_calendar_attendance,base.group_system,1,1,1,1
access_resource_resource,resource.resource,model_resource_resource,base.group_system,1,0,0,0
access_resource_resource_all,resource.resource all,model_resource_resource,base.group_user,1,0,0,0
access_resource_calendar_leaves_user,resource.calendar.leaves,model_resource_calendar_leaves,base.group_user,1,0,0,0
access_resource_calendar_leaves_user,resource.calendar.leaves,model_resource_calendar_leaves,base.group_user,1,1,1,1
access_resource_calendar_leaves,resource.calendar.leaves,model_resource_calendar_leaves,base.group_system,1,1,1,1
1 id name model_id:id group_id:id perm_read perm_write perm_create perm_unlink
2 access_resource_calendar access_resource_calendar_user resource.calendar resource.calendar.user model_resource_calendar base.group_system base.group_user 1 1 0 1 0 1 0
3 access_resource_calendar_attendance access_resource_calendar_system resource.calendar.attendance resource.calendar.system model_resource_calendar_attendance model_resource_calendar base.group_system 1 1 1 1
4 access_resource_calendar_attendance_user resource.calendar.attendance.user model_resource_calendar_attendance base.group_user 1 0 0 0
5 access_resource_calendar_attendance_system resource.calendar.attendance.system model_resource_calendar_attendance base.group_system 1 1 1 1
6 access_resource_resource resource.resource model_resource_resource base.group_system 1 0 0 0
7 access_resource_resource_all resource.resource all model_resource_resource base.group_user 1 0 0 0
8 access_resource_calendar_leaves_user resource.calendar.leaves model_resource_calendar_leaves base.group_user 1 0 1 0 1 0 1
9 access_resource_calendar_leaves resource.calendar.leaves model_resource_calendar_leaves base.group_system 1 1 1 1
addons/resource/security/resource_security.xml
+13 -6
View File
@@ -2,15 +2,22 @@
<odoo>
<data noupdate="1">
<record model="ir.rule" id="resource_own_leaves">
<field name="name">Resource: see own leaves</field>
<record model="ir.rule" id="resource_calendar_leaves_rule_group_user_create">
<field name="name">resource.calendar.leaves: employee reads own or global</field>
<field name="model_id" ref="model_resource_calendar_leaves"/>
<field name="groups" eval="[(4, ref('base.group_user'))]"/>
<field name="domain_force">['|',
('resource_id', '=', False),
('resource_id.user_id', '=', user.id),
]</field>
<field name="domain_force">['|', ('resource_id', '=', False), ('resource_id.user_id', '=', user.id)]</field>
<field name="perm_write" eval="False"/>
<field name="perm_create" eval="False"/>
<field name="perm_unlink" eval="False"/>
</record>
<record model="ir.rule" id="resource_calendar_leaves_rule_group_user_modify">
<field name="name">resource.calendar.leaves: employee modifies own</field>
<field name="model_id" ref="model_resource_calendar_leaves"/>
<field name="groups" eval="[(4, ref('base.group_user'))]"/>
<field name="domain_force">[('resource_id.user_id', '=', user.id)]</field>
<field name="perm_read" eval="False"/>
</record>
</data>
</odoo>