From 5ffed3b9235075d6152ca5dcd18a34368547ea18 Mon Sep 17 00:00:00 2001
From: Mantavya Gajjar <mga@tinyerp.com>
Date: Wed, 20 Feb 2008 09:38:04 +0000
Subject: [PATCH] Add access security on purchase module

bzr revid: mga@tinyerp.com-70c696572ec35b0a9cc9d204b2e87041c090bd6b
---
 addons/purchase/purchase_security.xml | 69 +++++++++++++++++++++++++++
 1 file changed, 69 insertions(+)
 create mode 100644 addons/purchase/purchase_security.xml

diff --git a/addons/purchase/purchase_security.xml b/addons/purchase/purchase_security.xml
new file mode 100644
index 00000000000..eb4f06a268b
--- /dev/null
+++ b/addons/purchase/purchase_security.xml
@@ -0,0 +1,69 @@
+<?xml version="1.0"?>
+<terp>
+	<data noupdate="1">
+	
+		<record model="res.groups" id="group_purchase_manager">
+			<field name="name">Purchase Manager</field>
+		</record>
+		
+		<!-- Purchase order security -->
+		<record model="ir.model.access" id="access_purchase_order">
+			<field name="name">Purchase Order</field>
+			<field name="model_id" model="ir.model" search="[('model', '=', 'purchase.order')]"/>
+			<field name="perm_read" eval="True"/>
+			<field name="perm_write" eval="False"/>
+			<field name="perm_create" eval="False"/>
+			<field name="perm_unlink" eval="False"/>
+		</record>
+		
+		<record model="ir.model.access" id="access_purchase_order_admin">
+			<field name="name">Purchase Order</field>
+			<field name="model_id" model="ir.model" search="[('model', '=', 'purchase.order')]"/>
+			<field name="group_id" ref="base.group_admin"/>
+			<field name="perm_read" eval="True"/>
+			<field name="perm_write" eval="True"/>
+			<field name="perm_create" eval="True"/>
+			<field name="perm_unlink" eval="True"/>
+		</record>
+		
+		<record model="ir.model.access" id="access_purchase_order_purchase_manager">
+			<field name="name">Purchase Order</field>
+			<field name="model_id" model="ir.model" search="[('model', '=', 'purchase.order')]"/>
+			<field name="group_id" ref="group_purchase_manager"/>
+			<field name="perm_read" eval="True"/>
+			<field name="perm_write" eval="True"/>
+			<field name="perm_create" eval="True"/>
+			<field name="perm_unlink" eval="True"/>
+		</record>
+		
+		<!-- Purchase order line security -->
+		<record model="ir.model.access" id="access_purchase_order_line">
+			<field name="name">Purchase Order Line</field>
+			<field name="model_id" model="ir.model" search="[('model', '=', 'purchase.order.line')]"/>
+			<field name="perm_read" eval="True"/>
+			<field name="perm_write" eval="False"/>
+			<field name="perm_create" eval="False"/>
+			<field name="perm_unlink" eval="False"/>
+		</record>
+		
+		<record model="ir.model.access" id="access_purchase_order_line_admin">
+			<field name="name">Purchase Order Line</field>
+			<field name="model_id" model="ir.model" search="[('model', '=', 'purchase.order.line')]"/>
+			<field name="group_id" ref="base.group_admin"/>
+			<field name="perm_read" eval="True"/>
+			<field name="perm_write" eval="True"/>
+			<field name="perm_create" eval="True"/>
+			<field name="perm_unlink" eval="True"/>
+		</record>
+		
+		<record model="ir.model.access" id="access_purchase_order_line_purchase_manager">
+			<field name="name">Purchase Order Line</field>
+			<field name="model_id" model="ir.model" search="[('model', '=', 'purchase.order.line')]"/>
+			<field name="group_id" ref="group_purchase_manager"/>
+			<field name="perm_read" eval="True"/>
+			<field name="perm_write" eval="True"/>
+			<field name="perm_create" eval="True"/>
+			<field name="perm_unlink" eval="True"/>
+		</record>
+	</data>
+</terp>
\ No newline at end of file