[IMP] *: remove global ACL

THese are rarely intended for all users but often intended only for
employees.

account:
account.incoterms: only used within internal business models
account.journal.group: same as account.journal, add sudo in computed field

account_edi: need access to accounting objects

base_address_extended:
res.city: only employees should access address data

board: only employees uses this (old) module

crm:
crm.stage: internal users business object

hr_recruitment: employees can read

im_livechat: apply same as for the steps

l10n_ar: used on partner, not only invoices
l10n_ec: accessed only through account.move
l10n_latam: accessed on res.partner

mail:
publisher.warrenty.contract: no data, only static models
mail.channel: group_user has already his own rule
mail.group: group_user has already his own rule
mail.message.subtype: group_user has already his own rule
mail.message.all: remove, already has a portal and employee rule

partner_autocomplete: no interaction with public

project:
project.tags: only needed for project sharing

sale_management:
sale.order.option: same as sale.order

utm: employee already has write access

web_editor: test models that have nothing to do here
web_tour: only employees uses tours

website_sale:
product.ribbon: add sudo for access

base:
ir.default: only employees uses set (could probably be converted to group_system)
ir.ui.view.custom: same as ir.ui.view, add sudo when needed
report.*: portal users don't configure reports
res.users.log: create in sudo, no access needed (adapt test to use another model)
res.lang: still needed for public

closes odoo/odoo#118701

Related: odoo/enterprise#41285
Signed-off-by: Martin Trigaux (mat) <mat@odoo.com>

addons/account/security/ir.model.access.csv

@@ -10,7 +10,7 @@ access_account_invoice_report_readonly,account.invoice.report_user,model_account
 access_account_invoice_report_billing,account.invoice.report_billing,model_account_invoice_report,account.group_account_invoice,1,0,0,0
 access_account_invoice_report,account.invoice.report,model_account_invoice_report,account.group_account_manager,1,1,1,1
 
-access_account_incoterms_all,account.incoterms all,model_account_incoterms,,1,0,0,0
+access_account_incoterms_all,account.incoterms all,model_account_incoterms,base.group_user,1,0,0,0
 access_account_incoterms_manager,account.incoterms manager,model_account_incoterms,account.group_account_manager,1,1,1,1
 
 access_account_fiscal_position_product_manager,account.fiscal.position account.manager,model_account_fiscal_position,account.group_account_manager,1,1,1,1
@@ -51,7 +51,7 @@ access_account_analytic_distribution_invoice,account.analytic.distribution invoi
 access_account_journal_readonly,account.journal,model_account_journal,account.group_account_readonly,1,0,0,0
 access_account_journal_manager,account.journal,model_account_journal,account.group_account_manager,1,1,1,1
 access_account_journal_invoice,account.journal invoice,model_account_journal,account.group_account_invoice,1,0,0,0
-access_account_journal_group_all,account.journal.group all,model_account_journal_group,,1,0,0,0
+access_account_journal_group_all,account.journal.group all,model_account_journal_group,account.group_account_readonly,1,0,0,0
 access_account_journal_group_manager,account.journal.group manager,model_account_journal_group,account.group_account_manager,1,1,1,1
 
 access_account_group_manager,account.group,model_account_group,account.group_account_manager,1,1,1,1

addons/account_edi/models/account_move.py

@@ -127,7 +127,7 @@ class AccountMove(models.Model):
     def _compute_edi_show_abandon_cancel_button(self):
         for move in self:
             move.edi_show_abandon_cancel_button = False
-            for doc in move.edi_document_ids:
+            for doc in move.sudo().edi_document_ids:
                 move_applicability = doc.edi_format_id._get_move_applicability(move)
                 if doc.edi_format_id._needs_web_services() \
                     and doc.state == 'to_cancel' \

addons/account_edi/security/ir.model.access.csv

@@ -1,5 +1,5 @@
 id,name,model_id:id,group_id:id,perm_read,perm_write,perm_create,perm_unlink
-access_account_edi_format_readonly,account.edi.format,model_account_edi_format,,1,0,0,0
+access_account_edi_format_readonly,account.edi.format,model_account_edi_format,account.group_account_readonly,1,0,0,0
 access_account_edi_format_group_invoice,account.edi.format,model_account_edi_format,account.group_account_invoice,1,1,1,1
-access_account_edi_document_readonly,account.edi.document,model_account_edi_document,,1,0,0,0
+access_account_edi_document_readonly,account.edi.document,model_account_edi_document,account.group_account_readonly,1,0,0,0
 access_account_edi_document_group_invoice,account.edi.document,model_account_edi_document,account.group_account_invoice,1,1,1,1

addons/base_address_extended/security/ir.model.access.csv

@@ -1,3 +1,3 @@
 "id","name","model_id:id","group_id:id","perm_read","perm_write","perm_create","perm_unlink"
 "access_res_city_group_user","res_city group_user","model_res_city","base.group_partner_manager",1,1,1,1
-"access_res_city_group_all","res_city group_user_all","model_res_city",,1,0,0,0
+"access_res_city_group_all","res_city group_user_all","model_res_city","base.group_user",1,0,0,0

addons/board/controllers/main.py

@@ -34,7 +34,7 @@ class Board(Controller):
                     })
                     column.insert(0, new_action)
                     arch = ElementTree.tostring(board_arch, encoding='unicode')
-                    request.env['ir.ui.view.custom'].create({
+                    request.env['ir.ui.view.custom'].sudo().create({
                         'user_id': request.session.uid,
                         'ref_id': view_id,
                         'arch': arch

addons/board/models/board.py

@@ -28,7 +28,7 @@ class Board(models.AbstractModel):
 
         res = super().get_view(view_id, view_type, **options)
 
-        custom_view = self.env['ir.ui.view.custom'].search([('user_id', '=', self.env.uid), ('ref_id', '=', view_id)], limit=1)
+        custom_view = self.env['ir.ui.view.custom'].sudo().search([('user_id', '=', self.env.uid), ('ref_id', '=', view_id)], limit=1)
         if custom_view:
             res.update({'custom_view_id': custom_view.id,
                         'arch': custom_view.arch})

addons/board/security/ir.model.access.csv

@@ -1,2 +1,2 @@
 id,name,model_id:id,group_id:id,perm_read,perm_write,perm_create,perm_unlink
-access_board_board_all,board.board,model_board_board,,1,0,0,0
+access_board_board_all,board.board,model_board_board,base.group_user,1,0,0,0

addons/crm/security/ir.model.access.csv

@@ -1,7 +1,7 @@
 id,name,model_id:id,group_id:id,perm_read,perm_write,perm_create,perm_unlink
 access_crm_lead_manager,crm.lead.manager,model_crm_lead,sales_team.group_sale_manager,1,1,1,1
 access_crm_lead,crm.lead,model_crm_lead,sales_team.group_sale_salesman,1,1,1,0
-access_crm_stage,crm.stage,model_crm_stage,,1,0,0,0
+access_crm_stage,crm.stage,model_crm_stage,base.group_user,1,0,0,0
 access_crm_stage_manager,crm.stage,model_crm_stage,sales_team.group_sale_manager,1,1,1,1
 access_res_partner_manager,res.partner.crm.manager,base.model_res_partner,sales_team.group_sale_manager,1,0,0,0
 access_res_partner_category_manager,res.partner.category.crm.manager,base.model_res_partner_category,sales_team.group_sale_manager,1,0,0,0

addons/digest/tests/test_digest.py

@@ -38,8 +38,8 @@ class TestDigest(TestDigestCommon):
         initial_values = self.all_digests.mapped('kpi_res_users_connected_value')
         self.assertEqual(initial_values, [0, 0, 0])
 
-        self.env['res.users.log'].with_user(self.user_employee).create({})
-        self.env['res.users.log'].with_user(self.user_admin).create({})
+        self.env['res.users'].with_user(self.user_employee)._update_last_login()
+        self.env['res.users'].with_user(self.user_admin)._update_last_login()
 
         self.all_digests.invalidate_recordset()
 

addons/hr_presence/models/hr_employee.py

@@ -49,7 +49,7 @@ class Employee(models.AbstractModel):
             ip_list = ip_list.split(',') if ip_list else []
             ip_employees = self.env['hr.employee']
             for employee in employees:
-                employee_ips = self.env['res.users.log'].search([
+                employee_ips = self.env['res.users.log'].sudo().search([
                     ('create_uid', '=', employee.user_id.id),
                     ('ip', '!=', False),
                     ('create_date', '>=', Datetime.to_string(Datetime.now().replace(hour=0, minute=0, second=0, microsecond=0)))]

addons/hr_presence/models/ir_websocket.py

@@ -18,11 +18,11 @@ class IrWebsocket(models.AbstractModel):
         req = request or wsrequest
         if req.env.user._is_internal():
             ip_address = req.httprequest.remote_addr
-            users_log = req.env['res.users.log'].search_count([
+            users_log = req.env['res.users.log'].sudo().search_count([
                 ('create_uid', '=', req.env.user.id),
                 ('ip', '=', ip_address),
                 ('create_date', '>=', Datetime.to_string(Datetime.now().replace(hour=0, minute=0, second=0, microsecond=0)))])
             if not users_log:
                 with registry(req.env.cr.dbname).cursor() as cr:
                     env = Environment(cr, req.env.user.id, {})
-                    env['res.users.log'].create({'ip': ip_address})
+                    env['res.users.log'].sudo().create({'ip': ip_address})

addons/hr_recruitment/security/ir.model.access.csv

@@ -11,8 +11,8 @@ access_hr_recruitment_refuse_reason,hr.applicant.refuse.reason,model_hr_applican
 access_res_partner_hr_user,res.partner.user,base.model_res_partner,group_hr_recruitment_user,1,1,1,1
 access_calendar_event_hruser,calendar.event.hruser,calendar.model_calendar_event,group_hr_recruitment_user,1,1,1,1
 access_hr_recruitment_source_hr_officer,hr.recruitment.source,model_hr_recruitment_source,group_hr_recruitment_user,1,1,1,1
-access_hr_recruitment_source_all,hr.recruitment.source,model_hr_recruitment_source,,1,0,0,0
-access_hr_applicant_category,hr.applicant_category,model_hr_applicant_category,,1,1,1,0
+access_hr_recruitment_source_all,hr.recruitment.source,model_hr_recruitment_source,base.group_user,1,0,0,0
+access_hr_applicant_category,hr.applicant_category,model_hr_applicant_category,base.group_user,1,1,1,0
 access_hr_applicant_category_manager,hr.applicant_category,model_hr_applicant_category,group_hr_recruitment_user,1,1,1,1
 access_calendar_event_type_hr_officer,calendar.event.type.officer,calendar.model_calendar_event_type,group_hr_recruitment_user,1,1,1,0
 access_applicant_get_refuse_reason,access.applicant.get.refuse.reason,model_applicant_get_refuse_reason,hr_recruitment.group_hr_recruitment_user,1,1,1,0

addons/im_livechat/models/discuss_channel.py

@@ -187,7 +187,7 @@ class DiscussChannel(models.Model):
         :param string body: message HTML body """
 
         return self.with_context(mail_create_nosubscribe=True).message_post(
-            author_id=chatbot_script.operator_partner_id.id,
+            author_id=chatbot_script.sudo().operator_partner_id.id,
             body=body,
             message_type='comment',
             subtype_xmlid='mail.mt_comment',

addons/im_livechat/security/ir.model.access.csv

@@ -7,7 +7,7 @@ access_livechat_support_report_operator,im_livechat.report.operator,model_im_liv
 access_livechat_channel_rule,im_livechat.channel.rule,model_im_livechat_channel_rule,,1,0,0,0
 access_livechat_channel_rule_user,im_livechat.channel.rule,model_im_livechat_channel_rule,im_livechat_group_user,1,1,1,0
 access_livechat_channel_rule_manager,im_livechat.channel.rule,model_im_livechat_channel_rule,im_livechat_group_manager,1,1,1,1
-access_chatbot_script,chatbot.script,model_chatbot_script,,1,0,0,0
+access_chatbot_script,chatbot.script,model_chatbot_script,,0,0,0,0
 access_chatbot_script_user,chatbot.script.user,model_chatbot_script,im_livechat_group_user,1,1,1,1
 access_chatbot_script_step,chatbot.script.step,model_chatbot_script_step,,0,0,0,0
 access_chatbot_script_step_user,chatbot.script.step.user,model_chatbot_script_step,im_livechat_group_user,1,1,1,1

addons/l10n_ar/security/ir.model.access.csv

@@ -1,2 +1,2 @@
 id,name,model_id:id,group_id:id,perm_read,perm_write,perm_create,perm_unlink
-access_l10n_ar_afip_responsibility_type_all,l10n_ar.afip.responsibility.type.all,model_l10n_ar_afip_responsibility_type,,1,0,0,0
+access_l10n_ar_afip_responsibility_type_all,l10n_ar.afip.responsibility.type.all,model_l10n_ar_afip_responsibility_type,base.group_user,1,0,0,0

addons/l10n_ec/security/ir.model.access.csv

@@ -1,3 +1,3 @@
 id,name,model_id:id,group_id:id,perm_read,perm_write,perm_create,perm_unlink
-access_l10n_ec_sri_payment_public,l10n_ec_sri_payment_public,model_l10n_ec_sri_payment,,1,0,0,0
+access_l10n_ec_sri_payment_public,l10n_ec_sri_payment_public,model_l10n_ec_sri_payment,account.group_account_readonly,1,0,0,0
 access_l10n_ec_sri_payment_admin,l10n_ec_sri_payment_public,model_l10n_ec_sri_payment,account.group_account_manager,1,1,1,1

addons/l10n_latam_base/security/ir.model.access.csv

@@ -1,3 +1,3 @@
 "id","name","model_id:id","group_id:id","perm_read","perm_write","perm_create","perm_unlink"
-"access_latam_identification_type_all","latam id type all","model_l10n_latam_identification_type",,1,0,0,0
+"access_latam_identification_type_all","latam id type all","model_l10n_latam_identification_type",base.group_user,1,0,0,0
 "access_latam_identification_type_manager","latam id type manager","model_l10n_latam_identification_type","base.group_partner_manager",1,1,0,0

addons/l10n_latam_invoice_document/security/ir.model.access.csv

@@ -1,3 +1,3 @@
 id,name,model_id:id,group_id:id,perm_read,perm_write,perm_create,perm_unlink
-access_l10n_latam_document_type_all,l10n_latam.document.type.all,model_l10n_latam_document_type,,1,0,0,0
+access_l10n_latam_document_type_all,l10n_latam.document.type.all,model_l10n_latam_document_type,account.group_account_readonly,1,0,0,0
 access_l10n_latam_document_type_account_manager,l10n_latam.document.type.all,model_l10n_latam_document_type,account.group_account_manager,1,1,1,0

addons/l10n_pe/security/ir.model.access.csv

@@ -1,3 +1,3 @@
 id,name,model_id/id,group_id/id,perm_read,perm_write,perm_create,perm_unlink
 "access_l10n_pe_district_group_user","access_l10n_pe_district group_user","model_l10n_pe_res_city_district",base.group_user,1,1,1,1
-"access_l10n_pe_district_group_all","access_l10n_pe_district group_all","model_l10n_pe_res_city_district",,1,0,0,0
+"access_l10n_pe_district_group_all","access_l10n_pe_district group_all","model_l10n_pe_res_city_district",,0,0,0,0

addons/mail/security/ir.model.access.csv

@@ -1,6 +1,6 @@
 id,name,model_id:id,group_id:id,perm_read,perm_write,perm_create,perm_unlink
 access_fetchmail_server,fetchmail.server,model_fetchmail_server,base.group_system,1,1,1,1
-access_mail_message_all,mail.message.all,model_mail_message,,1,0,0,0
+access_mail_message_all,mail.message.all,model_mail_message,base.group_public,1,0,0,0
 access_mail_message_portal,mail.message.portal,model_mail_message,base.group_portal,1,1,1,1
 access_mail_message_user,mail.message.user,model_mail_message,base.group_user,1,1,1,1
 access_mail_message_scheduled_all,mail.message.scheduled.all,model_mail_message_schedule,,0,0,0,0
@@ -23,7 +23,7 @@ access_discuss_channel_member_portal,discuss.channel.member.portal,model_discuss
 access_discuss_channel_member_user,discuss.channel.member.user,model_discuss_channel_member,base.group_user,1,1,1,1
 access_discuss_channel_rtc_session_all,discuss.channel.rtc.session.all,model_discuss_channel_rtc_session,,0,0,0,0
 access_discuss_channel_rtc_session_system,discuss.channel.rtc.session.system,model_discuss_channel_rtc_session,base.group_system,1,1,1,1
-access_mail_alias_all,mail.alias.all,model_mail_alias,,1,0,0,0
+access_mail_alias_all,mail.alias.all,model_mail_alias,,0,0,0,0
 access_mail_alias_user,mail.alias.user,model_mail_alias,base.group_user,1,0,0,0
 access_mail_alias_system,mail.alias.system,model_mail_alias,base.group_system,1,1,1,1
 access_mail_gateway_allowed_system,mail.gateway.allowed.system,model_mail_gateway_allowed,base.group_system,1,1,1,1
@@ -35,7 +35,7 @@ access_mail_tracking_value_all,mail.tracking.value.all,model_mail_tracking_value
 access_mail_tracking_value_portal,mail.tracking.value.portal,model_mail_tracking_value,base.group_portal,0,0,0,0
 access_mail_tracking_value_user,mail.tracking.value.user,model_mail_tracking_value,base.group_user,0,0,0,0
 access_mail_tracking_value_system,mail.tracking.value.system,model_mail_tracking_value,base.group_system,1,1,1,1
-access_publisher_warranty_contract_all,publisher.warranty.contract.all,model_publisher_warranty_contract,,1,1,1,1
+access_publisher_warranty_contract_all,publisher.warranty.contract.all,model_publisher_warranty_contract,base.group_system,1,1,1,1
 access_mail_template,mail.template,model_mail_template,base.group_user,1,1,1,1
 access_mail_template_editor,mail.template_editor,model_mail_template,mail.group_mail_template_editor,1,1,1,1
 access_mail_template_system,mail.template_system,model_mail_template,base.group_system,1,1,1,1

addons/partner_autocomplete/security/ir.model.access.csv

@@ -1,5 +1,5 @@
 id,name,model_id:id,group_id:id,perm_read,perm_write,perm_create,perm_unlink
-access_partner_autocomplete_sync_all_all,res.partner.autocomplete.sync.all,model_res_partner_autocomplete_sync,,1,0,0,0
+access_partner_autocomplete_sync_all_all,res.partner.autocomplete.sync.all,model_res_partner_autocomplete_sync,,0,0,0,0
 access_partner_autocomplete_sync_portal,res.partner.autocomplete.sync.portal,model_res_partner_autocomplete_sync,base.group_portal,1,0,1,0
 access_partner_autocomplete_sync_user,res.partner.autocomplete.sync.user,model_res_partner_autocomplete_sync,base.group_user,1,1,1,0
 access_partner_autocomplete_sync_system,res.partner.autocomplete.sync.system,model_res_partner_autocomplete_sync,base.group_system,1,1,1,1

addons/project/security/ir.model.access.csv

@@ -18,7 +18,7 @@ access_project_portal,project_portal,project.model_project_project,base.group_po
 access_resource_calendar,project.resource_calendar user,resource.model_resource_calendar,project.group_project_user,1,0,0,0
 access_resource_calendar_attendance,project.resource_calendar_attendance user,resource.model_resource_calendar_attendance,project.group_project_user,1,0,0,0
 access_resource_calendar_leaves_user,resource.calendar.leaves user,resource.model_resource_calendar_leaves,project.group_project_user,1,1,1,1
-access_project_tags_all,project.project_tags_all,model_project_tags,,1,0,0,0
+access_project_tags_all,project.project_tags_all,model_project_tags,base.group_user,1,0,0,0
 access_project_tags_manager,project.project_tags_manager,model_project_tags,project.group_project_manager,1,1,1,1
 access_project_tags_portal,project_tags_portal,project.model_project_tags,base.group_portal,1,0,0,0
 access_mail_activity_type_project_manager,mail.activity.type.project.manager,mail.model_mail_activity_type,project.group_project_manager,1,1,1,1

addons/sale_management/security/ir.model.access.csv

@@ -7,4 +7,4 @@ access_sale_order_template_line_manager,sale.order.template.line,model_sale_orde
 access_sale_order_template_option,sale.order.template.option,model_sale_order_template_option,sales_team.group_sale_salesman,1,0,0,0
 access_sale_order_template_option_manager,sale.order.template.option,model_sale_order_template_option,sales_team.group_sale_manager,1,1,1,1
 access_sale_order_option,sale.order.option,model_sale_order_option,sales_team.group_sale_salesman,1,1,1,1
-access_sale_order_option_all,sale.order.option,model_sale_order_option,,1,0,0,0
+access_sale_order_option_all,sale.order.option,model_sale_order_option,account.group_account_readonly,1,0,0,0

addons/test_base_automation/security/ir.model.access.csv

@@ -1,7 +1,7 @@
 id,name,model_id:id,group_id:id,perm_read,perm_write,perm_create,perm_unlink
 access_base_automation_lead_test,access_base_automation_lead_test,model_base_automation_lead_test,base.group_system,1,1,1,1
 access_base_automation_line_test,access_base_automation_line_test,model_base_automation_line_test,base.group_system,1,1,1,1
-access_base_automation_link_test,access_base_automation_link_test,model_base_automation_link_test,,1,1,1,1
-access_base_automation_linked_test,access_base_automation_linked_test,model_base_automation_linked_test,,1,1,1,1
-access_test_base_automation_project,access_test_base_automation_project,model_test_base_automation_project,,1,1,1,1
-access_test_base_automation_task,access_test_base_automation_task,model_test_base_automation_task,,1,1,1,1
+access_base_automation_link_test,access_base_automation_link_test,model_base_automation_link_test,base.group_user,1,1,1,1
+access_base_automation_linked_test,access_base_automation_linked_test,model_base_automation_linked_test,base.group_user,1,1,1,1
+access_test_base_automation_project,access_test_base_automation_project,model_test_base_automation_project,base.group_user,1,1,1,1
+access_test_base_automation_task,access_test_base_automation_task,model_test_base_automation_task,base.group_user,1,1,1,1

addons/test_mail/security/ir.model.access.csv

@@ -1,5 +1,5 @@
 id,name,model_id:id,group_id:id,perm_read,perm_write,perm_create,perm_unlink
-access_mail_performance_thread,access_mail_performance_thread,model_mail_performance_thread,,1,1,1,1
+access_mail_performance_thread,access_mail_performance_thread,model_mail_performance_thread,base.group_user,1,1,1,1
 access_mail_performance_tracking_user,mail.performance.tracking,model_mail_performance_tracking,base.group_user,1,1,1,1
 access_mail_test_simple_portal,mail.test.simple.portal,model_mail_test_simple,base.group_portal,1,0,0,0
 access_mail_test_simple_user,mail.test.simple.user,model_mail_test_simple,base.group_user,1,1,1,1
@@ -25,7 +25,7 @@ access_mail_test_ticket_mc_portal,mail.test.ticket.mc.portal,model_mail_test_tic
 access_mail_test_ticket_mc_user,mail.test.ticket.mc.user,model_mail_test_ticket_mc,base.group_user,1,1,1,1
 access_mail_test_composer_mixin_all,mail.test.composer.mixin.all,model_mail_test_composer_mixin,,0,0,0,0
 access_mail_test_composer_mixin_user,mail.test.composer.mixin.user,model_mail_test_composer_mixin,base.group_user,1,1,1,1
-access_mail_test_composer_source_all,mail.test.composer.source.all,model_mail_test_composer_source,,1,0,0,0
+access_mail_test_composer_source_all,mail.test.composer.source.all,model_mail_test_composer_source,base.group_user,1,0,0,0
 access_mail_test_composer_source_user,mail.test.composer.source.user,model_mail_test_composer_source,base.group_user,1,1,1,1
 access_mail_test_container_portal,mail.test.container_portal,model_mail_test_container,base.group_portal,1,0,0,0
 access_mail_test_container_user,mail.test.container.user,model_mail_test_container,base.group_user,1,1,1,1

addons/test_mail_full/security/ir.model.access.csv

@@ -3,7 +3,7 @@ access_mail_test_portal_all,mail.test.portal.all,model_mail_test_portal,,0,0,0,0
 access_mail_test_portal_user,mail.test.portal.user,model_mail_test_portal,base.group_user,1,1,1,1
 access_mail_test_portal_no_partner_all,mail.test.portal.no.partner.all,model_mail_test_portal_no_partner,,1,0,0,0
 access_mail_test_portal_no_partner_user,mail.test.portal.no.partner.user,model_mail_test_portal_no_partner,base.group_user,1,1,1,1
-access_mail_test_rating_all,mail.test.rating.all,model_mail_test_rating,,0,0,0,0
+access_mail_test_rating_all,mail.test.rating.all,model_mail_test_rating,base.group_user,0,0,0,0
 access_mail_test_rating_portal,mail.test.rating.portal,model_mail_test_rating,base.group_portal,1,0,0,0
 access_mail_test_rating_user,mail.test.rating.user,model_mail_test_rating,base.group_user,1,1,1,1
 access_mail_test_rating_thread_all,mail.test.rating.thread.all,model_mail_test_rating_thread,,0,0,0,0

addons/test_spreadsheet/security/ir.model.access.csv

@@ -1,2 +1,2 @@
 id,name,model_id:id,group_id:id,perm_read,perm_write,perm_create,perm_unlink
-access_spreadsheet_test_all,access.spreadsheet.test.all,model_spreadsheet_test,,1,1,1,1
+access_spreadsheet_test_all,access.spreadsheet.test.all,model_spreadsheet_test,base.group_user,1,1,1,1

addons/test_xlsx_export/ir.model.access.csv

@@ -1,4 +1,4 @@
 "id","name","model_id:id","group_id:id","perm_read","perm_write","perm_create","perm_unlink"
-access_export_group_operator,access_export_group_operator,model_export_group_operator,,1,1,1,1
-access_export_group_operator_one2many,access_export_group_operator_one2many,model_export_group_operator_one2many,,1,1,1,1
-access_export_integer,access_export_integer,model_export_integer,,1,1,1,1
+access_export_group_operator,access_export_group_operator,model_export_group_operator,base.group_user,1,1,1,1
+access_export_group_operator_one2many,access_export_group_operator_one2many,model_export_group_operator_one2many,base.group_user,1,1,1,1
+access_export_integer,access_export_integer,model_export_integer,base.group_user,1,1,1,1

addons/utm/security/ir.model.access.csv

@@ -1,11 +1,11 @@
 id,name,model_id:id,group_id:id,perm_read,perm_write,perm_create,perm_unlink
-access_utm_campaign,access_utm_campaign,model_utm_campaign,,1,0,1,0
+access_utm_campaign,access_utm_campaign,model_utm_campaign,base.group_portal,1,0,1,0
 access_utm_campaign_user,access_utm_campaign_user,model_utm_campaign,base.group_user,1,1,1,0
 access_utm_campaign_system,utm.campaign.system,model_utm_campaign,base.group_system,1,1,1,1
-access_utm_medium,access_utm_medium,model_utm_medium,,1,0,1,0
+access_utm_medium,access_utm_medium,model_utm_medium,base.group_portal,1,0,1,0
 access_utm_medium_user,access_utm_medium_user,model_utm_medium,base.group_user,1,1,1,0
 access_utm_medium_system,utm.medium.system,model_utm_medium,base.group_system,1,1,1,1
-access_utm_source,access_utm_source,model_utm_source,,1,0,1,0
+access_utm_source,access_utm_source,model_utm_source,base.group_portal,1,0,1,0
 access_utm_source_user,access_utm_source_user,model_utm_source,base.group_user,1,1,1,0
 access_utm_source_system,utm.source.system,model_utm_source,base.group_system,1,1,1,1
 access_utm_stage_user,mail.utm.stage,model_utm_stage,base.group_user,1,0,0,0

addons/web/controllers/view.py

@@ -1,6 +1,8 @@
 # Part of Odoo. See LICENSE file for full copyright and licensing details.
 
+from odoo.exceptions import AccessError
 from odoo.http import Controller, route, request
+from odoo.tools.translate import _
 
 
 class View(Controller):
@@ -14,6 +16,8 @@ class View(Controller):
         :param str arch: the edited arch of the custom view
         :returns: dict with acknowledged operation (result set to True)
         """
-        custom_view = request.env['ir.ui.view.custom'].browse(custom_id)
+        custom_view = request.env['ir.ui.view.custom'].sudo().browse(custom_id)
+        if not custom_view.user_id == request.env.user:
+            raise AccessError(_("Custom view %s does not belong to user %s", custom_id, self.env.user.login))
         custom_view.write({'arch': arch})
         return {'result': True}

addons/web_editor/security/ir.model.access.csv

@@ -1,3 +1,3 @@
 id,name,model_id:id,group_id:id,perm_read,perm_write,perm_create,perm_unlink
-access_web_editor_converter_test,access_web_editor_converter_test,model_web_editor_converter_test,,1,1,1,1
-access_web_editor_converter_test_sub,access_web_editor_converter_test_sub,model_web_editor_converter_test_sub,,1,1,1,1
+access_web_editor_converter_test,access_web_editor_converter_test,model_web_editor_converter_test,base.group_system,1,1,1,1
+access_web_editor_converter_test_sub,access_web_editor_converter_test_sub,model_web_editor_converter_test_sub,base.group_system,1,1,1,1

addons/web_tour/security/ir.model.access.csv

@@ -1,3 +1,3 @@
 id,name,model_id:id,group_id:id,perm_read,perm_write,perm_create,perm_unlink
 access_web_tour_tour_admin,access_web_tour_tour_admin,model_web_tour_tour,base.group_system,1,0,1,0
-access_web_tour_tour,access_web_tour_tour,model_web_tour_tour,,1,0,0,0
+access_web_tour_tour,access_web_tour_tour,model_web_tour_tour,base.group_user,1,0,0,0

addons/website_crm/models/crm_lead.py

@@ -46,7 +46,7 @@ class Lead(models.Model):
 
     def website_form_input_filter(self, request, values):
         values['medium_id'] = values.get('medium_id') or \
-                              self.default_get(['medium_id']).get('medium_id') or \
+                              self.sudo().default_get(['medium_id']).get('medium_id') or \
                               self.sudo().env.ref('utm.utm_medium_website').id
         values['team_id'] = values.get('team_id') or \
                             request.website.crm_default_team_id.id

addons/website_sale/controllers/main.py

@@ -82,7 +82,7 @@ class TableCompute(object):
                     self.table[(pos // ppr) + y2][(pos % ppr) + x2] = False
             self.table[pos // ppr][pos % ppr] = {
                 'product': p, 'x': x, 'y': y,
-                'ribbon': p._get_website_ribbon(),
+                'ribbon': p.sudo()._get_website_ribbon(),
             }
             if index <= ppg:
                 maxy = max(maxy, y + (pos // ppr))

addons/website_sale/security/ir.model.access.csv

@@ -7,7 +7,7 @@ access_product_category_pos_manager,product.public.category manager,model_produc
 access_product_public_category_public,product.category.public,model_product_public_category,,1,0,0,0
 access_product_pricelist_public,product.pricelist.public,product.model_product_pricelist,,1,0,0,0
 access_product_pricelist_item_public,product.pricelist.item.public,product.model_product_pricelist_item,,1,0,0,0
-access_product_ribbon_public,product.ribbon.public,website_sale.model_product_ribbon,,1,0,0,0
+access_product_ribbon_public,product.ribbon.public,website_sale.model_product_ribbon,base.group_user,1,0,0,0
 access_product_ribbon_sale_manager,product.ribbon.sale_manager,website_sale.model_product_ribbon,sales_team.group_sale_manager,1,1,1,1
 access_product_attribute_public,product.attribute public,product.model_product_attribute,,1,0,0,0
 access_product_attribute_value_public,product.attribute value public,product.model_product_attribute_value,,1,0,0,0

odoo/addons/base/models/ir_ui_view.py

@@ -576,7 +576,7 @@ actual arch.
 
         # drop the corresponding view customizations (used for dashboards for example), otherwise
         # not all users would see the updated views
-        custom_view = self.env['ir.ui.view.custom'].search([('ref_id', 'in', self.ids)])
+        custom_view = self.env['ir.ui.view.custom'].sudo().search([('ref_id', 'in', self.ids)])
         if custom_view:
             custom_view.unlink()
 

odoo/addons/base/models/res_users.py

@@ -740,7 +740,7 @@ class Users(models.Model):
     def _update_last_login(self):
         # only create new records to avoid any side-effect on concurrent transactions
         # extra records will be deleted by the periodical garbage collection
-        self.env['res.users.log'].create({}) # populated by defaults
+        self.env['res.users.log'].sudo().create({}) # populated by defaults
 
     @api.model
     def _get_login_domain(self, login):

odoo/addons/base/security/base_security.xml

@@ -6,6 +6,7 @@
         </record>
 
     <data noupdate="1">
+        <!-- TODO Remove me? Ony group system -->
         <record model="ir.rule" id="res_users_log_rule">
             <field name="name">res.users.log per user</field>
             <field name="model_id" ref="model_res_users_log"/>
@@ -50,6 +51,7 @@
         </record>
 
         <!-- Used for dashboard customizations, users should only be able to edit their own dashboards -->
+        <!-- Remove me? users never create those directly -->
         <record model="ir.rule" id="ir_ui_view_custom_personal">
             <field name="name">ir.ui.view_custom rule</field>
             <field name="model_id" ref="model_ir_ui_view_custom"/>

odoo/addons/base/security/ir.model.access.csv

@@ -33,7 +33,7 @@
 "access_ir_ui_view_group_user","ir_ui_view group_user","model_ir_ui_view",,0,0,0,0
 "access_ir_ui_view_group_system","ir_ui_view group_system","model_ir_ui_view","group_system",1,1,1,1
 "access_reset_view_arch_wizard_group_system","reset_view_arch_wizard group_system","model_reset_view_arch_wizard","group_system",1,1,1,0
-"access_ir_ui_view_custom_group_user","ir_ui_view_custom_group_user","model_ir_ui_view_custom",,1,1,1,1
+"access_ir_ui_view_custom_group_user","ir_ui_view_custom_group_user","model_ir_ui_view_custom","group_system",1,1,1,1
 "access_ir_default_all","ir_default all","model_ir_default",,0,0,0,0
 "access_ir_default_group_user","ir_default group_user","model_ir_default","group_user",1,1,1,1
 "access_ir_default_group_system","ir_default group_system","model_ir_default","group_system",1,1,1,1
@@ -53,7 +53,7 @@
 "access_res_groups_group_erp_manager","res_groups group_erp_manager","model_res_groups","group_erp_manager",1,1,1,1
 "access_res_groups_group_user","res_groups group_user","model_res_groups",group_user,1,0,0,0
 "access_res_lang_group_all","res_lang group_all","model_res_lang",,1,0,0,0
-"access_res_lang_group_user","res_lang group_user","model_res_lang","group_system",1,1,1,1
+"access_res_lang_group_system","res_lang group_user","model_res_lang","group_system",1,1,1,1
 "access_res_partner_public","res_partner group_public","model_res_partner","group_public",1,0,0,0
 "access_res_partner_portal","res_partner group_portal","model_res_partner","group_portal",1,0,0,0
 "access_res_partner_group_partner_manager","res_partner group_partner_manager","model_res_partner","group_partner_manager",1,1,1,1
@@ -65,12 +65,12 @@
 "access_res_partner_industry_group_user","res_partner_industry group_user","model_res_partner_industry","group_user",1,0,0,0
 "access_res_partner_industry_group_system","res_partner_industry group_system","model_res_partner_industry","group_system",1,1,1,1
 "access_res_partner_title_group_user","res_partner_title group_partner_manager","model_res_partner_title","group_partner_manager",1,1,1,1
-"access_res_partner_title_group_partner_manager","res_partner_title group_user","model_res_partner_title",,1,0,0,0
+"access_res_partner_title_group_partner_manager","res_partner_title group_user","model_res_partner_title","group_user",1,0,0,0
 "access_res_users_all","res_users all","model_res_users",,1,0,0,0
 "access_res_users_group_erp_manager","res_users group_erp_manager","model_res_users","group_erp_manager",1,1,1,1
 "access_res_users_deletion_all","res_users_deletion all","model_res_users_deletion",,0,0,0,0
 "access_res_users_deletion_group_erp_manager","res_users_deletion group_erp_manager","model_res_users_deletion","group_erp_manager",1,1,1,1
-"access_res_users_log_all","res_users_log_all","model_res_users_log",,1,0,1,0
+"access_res_users_log_system","res_users_log_all","model_res_users_log","group_system",1,0,1,0
 "access_res_users_identitycheck_employee","id check employees","model_res_users_identitycheck","group_user",1,1,1,0
 "access_res_users_identitycheck_portal","id check portal","model_res_users_identitycheck","group_portal",1,1,1,0
 "access_res_users_apikeys_access_employee","API keys access employees","model_res_users_apikeys","group_user",1,0,0,0
@@ -99,9 +99,9 @@
 "access_ir_config_parameter_system","ir_config_parameter_system","model_ir_config_parameter","group_system",1,1,1,1
 "access_ir_mail_server","ir_mail_server","model_ir_mail_server","group_system",1,1,1,1
 "access_ir_logging","ir_logging admin","model_ir_logging","group_erp_manager",1,1,1,1
-"paperformat_access_portal","ir_actions_report_paperformat group_portal","model_report_paperformat",,1,0,0,0
+"paperformat_access_portal","ir_actions_report_paperformat group_portal","model_report_paperformat","group_user",1,0,0,0
 "paperformat_access_employee","ir_actions_report_paperformat group_system","model_report_paperformat",group_system,1,1,1,1
-"access_report_layout","access_report_layout","model_report_layout",,1,1,1,1
+"access_report_layout","access_report_layout","model_report_layout","group_user",1,1,1,1
 "access_wizard_ir_model_menu_create","access.wizard.ir.model.menu.create","model_wizard_ir_model_menu_create","base.group_system",1,1,1,0
 "access_reset_view_arch_wizard","access.reset.view.arch.wizard","model_reset_view_arch_wizard","base.group_erp_manager",1,1,1,0
 "access_ir_demo","access.ir.demo","model_ir_demo","base.group_system",1,1,1,0

odoo/addons/base/tests/test_ir_attachment.py

@@ -351,7 +351,7 @@ class TestPermissions(TransactionCase):
         wrinkles as the ACLs may diverge a lot more
         """
         # create an other unwritable record in a different model
-        unwritable = self.env['res.users.log'].create({})
+        unwritable = self.env['res.users.apikeys.description'].create({'name': 'Unwritable'})
         with self.assertRaises(AccessError):
             unwritable.write({})  # checks unwritability
         # create a writable record in the same model

odoo/addons/test_action_bindings/ir.model.access.csv

@@ -1,3 +1,3 @@
 id,name,model_id:id,group_id:id,perm_read,perm_write,perm_create,perm_unlink
-access_tab_a,access_tab_a,model_tab_a,,1,1,1,1
-access_tab_b,access_tab_b,model_tab_b,,1,1,1,1
+access_tab_a,access_tab_a,model_tab_a,base.group_user,1,1,1,1
+access_tab_b,access_tab_b,model_tab_b,base.group_user,1,1,1,1

odoo/addons/test_convert/ir.model.access.csv

@@ -1,3 +1,3 @@
 id,name,model_id:id,group_id:id,perm_read,perm_write,perm_create,perm_unlink
 access_test_convert_usered,access_test_convert_usered,model_test_convert_usered,base.group_user,1,1,1,1
-access_test_convert_test_model,access_test_convert_test_model,model_test_convert_test_model,,1,1,1,1
+access_test_convert_test_model,access_test_convert_test_model,model_test_convert_test_model,base.group_user,1,1,1,1

odoo/addons/test_converter/ir.model.access.csv

@@ -1,4 +1,4 @@
 id,name,model_id:id,group_id:id,perm_read,perm_write,perm_create,perm_unlink
-access_converter_model,access_converter_model,model_test_converter_test_model,,1,1,1,1
-access_test_converter_test_model_sub,access_test_converter_test_model_sub,model_test_converter_test_model_sub,,1,1,1,1
-access_test_converter_monetary,access_test_converter_monetary,model_test_converter_monetary,,1,1,1,1
+access_converter_model,access_converter_model,model_test_converter_test_model,base.group_user,1,1,1,1
+access_test_converter_test_model_sub,access_test_converter_test_model_sub,model_test_converter_test_model_sub,base.group_user,1,1,1,1
+access_test_converter_monetary,access_test_converter_monetary,model_test_converter_monetary,base.group_user,1,1,1,1

odoo/addons/test_exceptions/ir.model.access.csv

@@ -1,2 +1,2 @@
 "id","name","model_id:id","group_id:id","perm_read","perm_write","perm_create","perm_unlink"
-access_test_exceptions_model,access_test_exceptions_model,model_test_exceptions_model,,1,1,1,1
+access_test_exceptions_model,access_test_exceptions_model,model_test_exceptions_model,base.group_user,1,1,1,1

odoo/addons/test_impex/ir.model.access.csv

@@ -1,30 +1,30 @@
 "id","name","model_id:id","group_id:id","perm_read","perm_write","perm_create","perm_unlink"
-access_export_boolean,access_export_boolean,model_export_boolean,,1,1,1,1
-access_export_integer,access_export_integer,model_export_integer,,1,1,1,1
-access_export_float,access_export_float,model_export_float,,1,1,1,1
-access_export_decimal,access_export_decimal,model_export_decimal,,1,1,1,1
-access_export_string_bounded,access_export_string_bounded,model_export_string_bounded,,1,1,1,1
-access_export_string_required,access_export_string_required,model_export_string_required,,1,1,1,1
-access_export_string,access_export_string,model_export_string,,1,1,1,1
-access_export_date,access_export_date,model_export_date,,1,1,1,1
-access_export_datetime,access_export_datetime,model_export_datetime,,1,1,1,1
-access_export_text,access_export_text,model_export_text,,1,1,1,1
-access_export_selection,access_export_selection,model_export_selection,,1,1,1,1
-access_export_selection_function,access_export_selection_function,model_export_selection_function,,1,1,1,1
-access_export_many2one,access_export_many2one,model_export_many2one,,1,1,1,1
-access_export_one2many,access_export_one2many,model_export_one2many,,1,1,1,1
-access_export_many2many,access_export_many2many,model_export_many2many,,1,1,1,1
-access_export_function,access_export_function,model_export_function,,1,1,1,1
-access_export_one2many_child,access_export_one2many_child,model_export_one2many_child,,1,1,1,1
-access_export_one2many_multiple,access_export_one2many_multiple,model_export_one2many_multiple,,1,1,1,1
-access_export_one2many_multiple_child,access_export_one2many_multiple_child,model_export_one2many_multiple_child,,1,1,1,1
-access_export_one2many_child_1,access_export_one2many_child_1,model_export_one2many_child_1,,1,1,1,1
-access_export_one2many_child_2,access_export_one2many_child_2,model_export_one2many_child_2,,1,1,1,1
-access_export_many2many_other,access_export_many2many_other,model_export_many2many_other,,1,1,1,1
-access_export_selection_withdefault,access_export_selection_withdefault,model_export_selection_withdefault,,1,1,1,1
-access_export_one2many_recursive,access_export_one2many_recursive,model_export_one2many_recursive,,1,1,1,1
-access_export_unique,access_export_unique,model_export_unique,,1,1,1,1
-access_export_inherits_parent,access_export_inherits_parent,model_export_inherits_parent,,1,1,1,1
-access_export_inherits_child,access_export_inherits_child,model_export_inherits_child,,1,1,1,1
-access_export_m2o_str,access_export_m2o_str,model_export_m2o_str,,1,1,1,1
-access_export_m2o_str_child,access_export_m2o_str_child,model_export_m2o_str_child,,1,1,1,1
+access_export_boolean,access_export_boolean,model_export_boolean,base.group_user,1,1,1,1
+access_export_integer,access_export_integer,model_export_integer,base.group_user,1,1,1,1
+access_export_float,access_export_float,model_export_float,base.group_user,1,1,1,1
+access_export_decimal,access_export_decimal,model_export_decimal,base.group_user,1,1,1,1
+access_export_string_bounded,access_export_string_bounded,model_export_string_bounded,base.group_user,1,1,1,1
+access_export_string_required,access_export_string_required,model_export_string_required,base.group_user,1,1,1,1
+access_export_string,access_export_string,model_export_string,base.group_user,1,1,1,1
+access_export_date,access_export_date,model_export_date,base.group_user,1,1,1,1
+access_export_datetime,access_export_datetime,model_export_datetime,base.group_user,1,1,1,1
+access_export_text,access_export_text,model_export_text,base.group_user,1,1,1,1
+access_export_selection,access_export_selection,model_export_selection,base.group_user,1,1,1,1
+access_export_selection_function,access_export_selection_function,model_export_selection_function,base.group_user,1,1,1,1
+access_export_many2one,access_export_many2one,model_export_many2one,base.group_user,1,1,1,1
+access_export_one2many,access_export_one2many,model_export_one2many,base.group_user,1,1,1,1
+access_export_many2many,access_export_many2many,model_export_many2many,base.group_user,1,1,1,1
+access_export_function,access_export_function,model_export_function,base.group_user,1,1,1,1
+access_export_one2many_child,access_export_one2many_child,model_export_one2many_child,base.group_user,1,1,1,1
+access_export_one2many_multiple,access_export_one2many_multiple,model_export_one2many_multiple,base.group_user,1,1,1,1
+access_export_one2many_multiple_child,access_export_one2many_multiple_child,model_export_one2many_multiple_child,base.group_user,1,1,1,1
+access_export_one2many_child_1,access_export_one2many_child_1,model_export_one2many_child_1,base.group_user,1,1,1,1
+access_export_one2many_child_2,access_export_one2many_child_2,model_export_one2many_child_2,base.group_user,1,1,1,1
+access_export_many2many_other,access_export_many2many_other,model_export_many2many_other,base.group_user,1,1,1,1
+access_export_selection_withdefault,access_export_selection_withdefault,model_export_selection_withdefault,base.group_user,1,1,1,1
+access_export_one2many_recursive,access_export_one2many_recursive,model_export_one2many_recursive,base.group_user,1,1,1,1
+access_export_unique,access_export_unique,model_export_unique,base.group_user,1,1,1,1
+access_export_inherits_parent,access_export_inherits_parent,model_export_inherits_parent,base.group_user,1,1,1,1
+access_export_inherits_child,access_export_inherits_child,model_export_inherits_child,base.group_user,1,1,1,1
+access_export_m2o_str,access_export_m2o_str,model_export_m2o_str,base.group_user,1,1,1,1
+access_export_m2o_str_child,access_export_m2o_str_child,model_export_m2o_str_child,base.group_user,1,1,1,1

odoo/addons/test_inherit/ir.model.access.csv

@@ -1,4 +1,4 @@
 "id","name","model_id:id","group_id:id","perm_read","perm_write","perm_create","perm_unlink"
-access_test_inherit_mother,access_test_inherit_mother,model_test_inherit_mother,,1,1,1,1
-access_test_inherit_daughter,access_test_inherit_daughter,model_test_inherit_daughter,,1,1,1,1
-access_test_inherit_property,access_test_inherit_property,model_test_inherit_property,,1,1,1,1
+access_test_inherit_mother,access_test_inherit_mother,model_test_inherit_mother,base.group_system,1,1,1,1
+access_test_inherit_daughter,access_test_inherit_daughter,model_test_inherit_daughter,base.group_system,1,1,1,1
+access_test_inherit_property,access_test_inherit_property,model_test_inherit_property,base.group_system,1,1,1,1

odoo/addons/test_inherits/ir.model.access.csv

@@ -1,7 +1,7 @@
 "id","name","model_id:id","group_id:id","perm_read","perm_write","perm_create","perm_unlink"
-access_test_unit,access_test_unit,model_test_unit,,1,1,1,1
-access_test_unit_line,access_test_unit_line,model_test_unit_line,,1,1,1,1
-access_test_box,access_test_box,model_test_box,,1,1,1,1
-access_test_pallet,access_test_pallet,model_test_pallet,,1,1,1,1
-access_test_another_unit,access_test_another_unit,model_test_another_unit,,1,1,1,1
-access_test_another_box,access_test_another_box,model_test_another_box,,1,1,1,1
+access_test_unit,access_test_unit,model_test_unit,base.group_system,1,1,1,1
+access_test_unit_line,access_test_unit_line,model_test_unit_line,base.group_system,1,1,1,1
+access_test_box,access_test_box,model_test_box,base.group_system,1,1,1,1
+access_test_pallet,access_test_pallet,model_test_pallet,base.group_system,1,1,1,1
+access_test_another_unit,access_test_another_unit,model_test_another_unit,base.group_system,1,1,1,1
+access_test_another_box,access_test_another_box,model_test_another_box,base.group_system,1,1,1,1

odoo/addons/test_limits/ir.model.access.csv

@@ -1,2 +1,2 @@
 "id","name","model_id:id","group_id:id","perm_read","perm_write","perm_create","perm_unlink"
-access_test_limits_model,access_test_limits_model,model_test_limits_model,,1,1,1,1
+access_test_limits_model,access_test_limits_model,model_test_limits_model,base.group_system,1,1,1,1

odoo/addons/test_new_api/security/ir.model.access.csv

@@ -1,108 +1,108 @@
 "id","name","model_id:id","group_id:id","perm_read","perm_write","perm_create","perm_unlink"
-access_category,test_new_api_category,test_new_api.model_test_new_api_category,,1,1,1,1
-access_decimal_precision_test_all,decimal.precision.test,model_decimal_precision_test,,1,1,1,1
-access_discussion,test_new_api_discussion,test_new_api.model_test_new_api_discussion,,1,1,1,1
-access_message,test_new_api_message,test_new_api.model_test_new_api_message,,1,1,1,1
-access_emailmessage,test_new_api_emailmessage,test_new_api.model_test_new_api_emailmessage,,1,1,1,1
-access_multi,test_new_api_multi,test_new_api.model_test_new_api_multi,,1,1,1,1
-access_multi_line,test_new_api_multi_line,test_new_api.model_test_new_api_multi_line,,1,1,1,1
-access_multi_line2,test_new_api_multi_line2,test_new_api.model_test_new_api_multi_line2,,1,1,1,1
-access_multi_tag,test_new_api_multi_tag,test_new_api.model_test_new_api_multi_tag,,1,1,1,1
-access_creativework_edition,test_new_api_creativework_edition,model_test_new_api_creativework_edition,,1,1,1,1
-access_creativework_book,test_new_api_creativework_book,model_test_new_api_creativework_book,,1,1,1,1
-access_creativework_movie,test_new_api_creativework_movie,model_test_new_api_creativework_movie,,1,1,1,1
-access_mixed,test_new_api_mixed,test_new_api.model_test_new_api_mixed,,1,1,1,1
-access_domain_bool,access_domain_bool,model_domain_bool,,1,1,1,1
-access_test_new_api_foo,access_test_new_api_foo,model_test_new_api_foo,,1,1,1,1
-access_test_new_api_bar,access_test_new_api_bar,model_test_new_api_bar,,1,1,1,1
-access_test_new_api_related,access_test_new_api_related,model_test_new_api_related,,1,1,1,1
-access_test_new_api_company,access_test_new_api_company,model_test_new_api_company,,1,1,1,1
-access_test_new_api_company_attr,access_test_new_api_company_attr,model_test_new_api_company_attr,,1,1,1,1
-access_test_new_api_compute_inverse,access_test_new_api_compute_inverse,model_test_new_api_compute_inverse,,1,1,1,1
-access_test_new_api_compute_readonly,access_test_new_api_compute_readonly,model_test_new_api_compute_readonly,,1,1,1,1
-access_test_new_api_multi_compute_inverse,access_test_new_api_multi_compute_inverse,model_test_new_api_multi_compute_inverse,,1,1,1,1
-access_test_new_api_recursive,access_test_new_api_recursive,model_test_new_api_recursive,,1,1,1,1
-access_test_new_api_recursive_tree,access_test_new_api_recursive_tree,model_test_new_api_recursive_tree,,1,1,1,1
-access_test_new_api_cascade,access_test_new_api_cascade,model_test_new_api_cascade,,1,1,1,1
-access_test_new_api_compute_readwrite,access_test_new_api_compute_readwrite,model_test_new_api_compute_readwrite,,1,1,1,1
-access_test_new_api_compute_onchange,access_test_new_api_compute_onchange,model_test_new_api_compute_onchange,,1,1,1,1
-access_test_new_api_compute_onchange_line,access_test_new_api_compute_onchange_line,model_test_new_api_compute_onchange_line,,1,1,1,1
-access_test_new_api_compute_dynamic_depends,access_test_new_api_compute_dynamic_depends,model_test_new_api_compute_dynamic_depends,,1,1,1,1
-access_test_new_api_compute_unassigned,access_test_new_api_compute_unassigned,model_test_new_api_compute_unassigned,,1,1,1,1
-access_test_new_api_one2many,access_test_new_api_one2many,model_test_new_api_one2many,,1,1,1,1
-access_test_new_api_one2many_line,access_test_new_api_one2many_line,model_test_new_api_one2many_line,,1,1,1,1
-access_test_new_api_binary_svg,access_test_new_api_binary_svg,model_test_new_api_binary_svg,,1,1,1,1
-access_test_new_api_monetary_base,access_test_new_api_monetary_base,model_test_new_api_monetary_base,,1,1,1,1
-access_test_new_api_monetary_related,access_test_new_api_monetary_related,model_test_new_api_monetary_related,,1,1,1,1
-access_test_new_api_monetary_custom,access_test_new_api_monetary_custom,model_test_new_api_monetary_custom,,1,1,1,1
-access_test_new_api_monetary_inherits,access_test_new_api_monetary_inherits,model_test_new_api_monetary_inherits,,1,1,1,1
-access_test_new_api_field_with_caps,access_test_new_api_field_with_caps,model_test_new_api_field_with_caps,,1,1,1,1
-access_test_new_api_req_m2o,access_test_new_api_req_m2o,model_test_new_api_req_m2o,,1,1,1,1
-access_test_new_api_selection,access_test_new_api_selection,model_test_new_api_selection,,1,1,1,1
-access_test_new_api_attachment,access_test_new_api_attachment,model_test_new_api_attachment,,1,1,1,1
-access_test_new_api_attachment_host,access_test_new_api_attachment_host,model_test_new_api_attachment_host,,1,1,1,1
-access_test_new_api_model_image,access_test_new_api_model_image,model_test_new_api_model_image,,1,1,1,1
-access_test_new_api_model_a,access_test_new_api_model_a,model_test_new_api_model_a,,1,1,1,1
-access_test_new_api_model_b,access_test_new_api_model_b,model_test_new_api_model_b,,1,1,1,1
-access_test_new_api_model_parent,access_test_new_api_model_parent,model_test_new_api_model_parent,,1,1,1,1
-access_test_new_api_model_child,access_test_new_api_model_child,model_test_new_api_model_child,,1,1,1,1
-access_test_new_api_model_child_nocheck,access_test_new_api_model_child_nocheck,model_test_new_api_model_child_nocheck,,1,1,1,1
-access_test_new_api_display,access_test_new_api_display,model_test_new_api_display,,1,1,1,1
-access_test_new_api_model_active_field,access_test_new_api_model_active_field,model_test_new_api_model_active_field,,1,1,1,1
-access_test_new_api_model_many2one_reference,access_test_new_api_model_many2one_reference,model_test_new_api_model_many2one_reference,,1,1,1,1
-access_test_new_api_inverse_m2o_ref,access_test_new_api_inverse_m2o_ref,model_test_new_api_inverse_m2o_ref,,1,1,1,1
-access_test_new_api_model_binary,access_test_new_api_model_binary,model_test_new_api_model_binary,,1,1,1,1
-access_test_new_api_model_child_m2o,access_test_new_api_model_child_m2o,model_test_new_api_model_child_m2o,,1,1,1,1
-access_test_new_api_model_parent_m2o,access_test_new_api_model_parent_m2o,model_test_new_api_model_parent_m2o,,1,1,1,1
+access_category,test_new_api_category,test_new_api.model_test_new_api_category,base.group_system,1,1,1,1
+access_decimal_precision_test_all,decimal.precision.test,model_decimal_precision_test,base.group_system,1,1,1,1
+access_discussion,test_new_api_discussion,test_new_api.model_test_new_api_discussion,base.group_user,1,1,1,1
+access_message,test_new_api_message,test_new_api.model_test_new_api_message,base.group_user,1,1,1,1
+access_emailmessage,test_new_api_emailmessage,test_new_api.model_test_new_api_emailmessage,base.group_system,1,1,1,1
+access_multi,test_new_api_multi,test_new_api.model_test_new_api_multi,base.group_system,1,1,1,1
+access_multi_line,test_new_api_multi_line,test_new_api.model_test_new_api_multi_line,base.group_user,1,1,1,1
+access_multi_line2,test_new_api_multi_line2,test_new_api.model_test_new_api_multi_line2,base.group_user,1,1,1,1
+access_multi_tag,test_new_api_multi_tag,test_new_api.model_test_new_api_multi_tag,base.group_user,1,1,1,1
+access_creativework_edition,test_new_api_creativework_edition,model_test_new_api_creativework_edition,base.group_system,1,1,1,1
+access_creativework_book,test_new_api_creativework_book,model_test_new_api_creativework_book,base.group_system,1,1,1,1
+access_creativework_movie,test_new_api_creativework_movie,model_test_new_api_creativework_movie,base.group_system,1,1,1,1
+access_mixed,test_new_api_mixed,test_new_api.model_test_new_api_mixed,base.group_user,1,1,1,1
+access_domain_bool,access_domain_bool,model_domain_bool,base.group_system,1,1,1,1
+access_test_new_api_foo,access_test_new_api_foo,model_test_new_api_foo,base.group_system,1,1,1,1
+access_test_new_api_bar,access_test_new_api_bar,model_test_new_api_bar,base.group_system,1,1,1,1
+access_test_new_api_related,access_test_new_api_related,model_test_new_api_related,base.group_user,1,1,1,1
+access_test_new_api_company,access_test_new_api_company,model_test_new_api_company,base.group_user,1,1,1,1
+access_test_new_api_company_attr,access_test_new_api_company_attr,model_test_new_api_company_attr,base.group_user,1,1,1,1
+access_test_new_api_compute_inverse,access_test_new_api_compute_inverse,model_test_new_api_compute_inverse,base.group_system,1,1,1,1
+access_test_new_api_compute_readonly,access_test_new_api_compute_readonly,model_test_new_api_compute_readonly,base.group_system,1,1,1,1
+access_test_new_api_multi_compute_inverse,access_test_new_api_multi_compute_inverse,model_test_new_api_multi_compute_inverse,base.group_system,1,1,1,1
+access_test_new_api_recursive,access_test_new_api_recursive,model_test_new_api_recursive,base.group_system,1,1,1,1
+access_test_new_api_recursive_tree,access_test_new_api_recursive_tree,model_test_new_api_recursive_tree,base.group_system,1,1,1,1
+access_test_new_api_cascade,access_test_new_api_cascade,model_test_new_api_cascade,base.group_system,1,1,1,1
+access_test_new_api_compute_readwrite,access_test_new_api_compute_readwrite,model_test_new_api_compute_readwrite,base.group_system,1,1,1,1
+access_test_new_api_compute_onchange,access_test_new_api_compute_onchange,model_test_new_api_compute_onchange,base.group_system,1,1,1,1
+access_test_new_api_compute_onchange_line,access_test_new_api_compute_onchange_line,model_test_new_api_compute_onchange_line,base.group_system,1,1,1,1
+access_test_new_api_compute_dynamic_depends,access_test_new_api_compute_dynamic_depends,model_test_new_api_compute_dynamic_depends,base.group_system,1,1,1,1
+access_test_new_api_compute_unassigned,access_test_new_api_compute_unassigned,model_test_new_api_compute_unassigned,base.group_user,1,1,1,1
+access_test_new_api_one2many,access_test_new_api_one2many,model_test_new_api_one2many,base.group_system,1,1,1,1
+access_test_new_api_one2many_line,access_test_new_api_one2many_line,model_test_new_api_one2many_line,base.group_system,1,1,1,1
+access_test_new_api_binary_svg,access_test_new_api_binary_svg,model_test_new_api_binary_svg,base.group_user,1,1,1,1
+access_test_new_api_monetary_base,access_test_new_api_monetary_base,model_test_new_api_monetary_base,base.group_system,1,1,1,1
+access_test_new_api_monetary_related,access_test_new_api_monetary_related,model_test_new_api_monetary_related,base.group_system,1,1,1,1
+access_test_new_api_monetary_custom,access_test_new_api_monetary_custom,model_test_new_api_monetary_custom,base.group_system,1,1,1,1
+access_test_new_api_monetary_inherits,access_test_new_api_monetary_inherits,model_test_new_api_monetary_inherits,base.group_system,1,1,1,1
+access_test_new_api_field_with_caps,access_test_new_api_field_with_caps,model_test_new_api_field_with_caps,base.group_system,1,1,1,1
+access_test_new_api_req_m2o,access_test_new_api_req_m2o,model_test_new_api_req_m2o,base.group_system,1,1,1,1
+access_test_new_api_selection,access_test_new_api_selection,model_test_new_api_selection,base.group_system,1,1,1,1
+access_test_new_api_attachment,access_test_new_api_attachment,model_test_new_api_attachment,base.group_system,1,1,1,1
+access_test_new_api_attachment_host,access_test_new_api_attachment_host,model_test_new_api_attachment_host,base.group_system,1,1,1,1
+access_test_new_api_model_image,access_test_new_api_model_image,model_test_new_api_model_image,base.group_system,1,1,1,1
+access_test_new_api_model_a,access_test_new_api_model_a,model_test_new_api_model_a,base.group_system,1,1,1,1
+access_test_new_api_model_b,access_test_new_api_model_b,model_test_new_api_model_b,base.group_system,1,1,1,1
+access_test_new_api_model_parent,access_test_new_api_model_parent,model_test_new_api_model_parent,base.group_system,1,1,1,1
+access_test_new_api_model_child,access_test_new_api_model_child,model_test_new_api_model_child,base.group_system,1,1,1,1
+access_test_new_api_model_child_nocheck,access_test_new_api_model_child_nocheck,model_test_new_api_model_child_nocheck,base.group_system,1,1,1,1
+access_test_new_api_display,access_test_new_api_display,model_test_new_api_display,base.group_system,1,1,1,1
+access_test_new_api_model_active_field,access_test_new_api_model_active_field,model_test_new_api_model_active_field,base.group_system,1,1,1,1
+access_test_new_api_model_many2one_reference,access_test_new_api_model_many2one_reference,model_test_new_api_model_many2one_reference,base.group_system,1,1,1,1
+access_test_new_api_inverse_m2o_ref,access_test_new_api_inverse_m2o_ref,model_test_new_api_inverse_m2o_ref,base.group_system,1,1,1,1
+access_test_new_api_model_binary,access_test_new_api_model_binary,model_test_new_api_model_binary,base.group_system,1,1,1,1
+access_test_new_api_model_child_m2o,access_test_new_api_model_child_m2o,model_test_new_api_model_child_m2o,base.group_system,1,1,1,1
+access_test_new_api_model_parent_m2o,access_test_new_api_model_parent_m2o,model_test_new_api_model_parent_m2o,base.group_system,1,1,1,1
 access_test_new_api_model_private_address_onchange,access_test_new_api_model_private_address_onchange,model_test_new_api_model_private_address_onchange,base.group_user,1,1,1,1
-access_test_new_api_partner,access_test_new_api_partner,test_new_api.model_test_new_api_partner,,1,1,1,1
-access_test_new_api_req_m2o_transient,access_test_new_api_req_m2o_transient,model_test_new_api_req_m2o_transient,,0,0,0,0
+access_test_new_api_partner,access_test_new_api_partner,test_new_api.model_test_new_api_partner,base.group_system,1,1,1,1
+access_test_new_api_req_m2o_transient,access_test_new_api_req_m2o_transient,model_test_new_api_req_m2o_transient,base.group_system,0,0,0,0
 access_test_new_api_country,access_test_new_api_country,model_test_new_api_country,base.group_user,1,1,1,1
 access_test_new_api_city,access_test_new_api_city,model_test_new_api_city,base.group_user,1,1,1,1
-access_test_new_api_monetary_order,access_test_new_api_monetary_order,model_test_new_api_monetary_order,,1,1,1,1
-access_test_new_api_monetary_order_line,access_test_new_api_monetary_order_line,model_test_new_api_monetary_order_line,,1,1,1,1
-access_test_new_api_model_selection_base,access_test_new_api_model_selection_base,model_test_new_api_model_selection_base,,1,1,1,1
-access_test_new_api_model_selection_required,access_test_new_api_model_selection_required,model_test_new_api_model_selection_required,,1,1,1,1
-access_test_new_api_model_selection_non_stored,access_test_new_api_model_selection_non_stored,model_test_new_api_model_selection_non_stored,,1,1,1,1
-access_test_new_api_model_selection_required_for_write_override,access_test_new_api_model_selection_required_for_write_override,model_test_new_api_model_selection_required_for_write_override,,1,1,1,1
+access_test_new_api_monetary_order,access_test_new_api_monetary_order,model_test_new_api_monetary_order,base.group_system,1,1,1,1
+access_test_new_api_monetary_order_line,access_test_new_api_monetary_order_line,model_test_new_api_monetary_order_line,base.group_system,1,1,1,1
+access_test_new_api_model_selection_base,access_test_new_api_model_selection_base,model_test_new_api_model_selection_base,base.group_system,1,1,1,1
+access_test_new_api_model_selection_required,access_test_new_api_model_selection_required,model_test_new_api_model_selection_required,base.group_system,1,1,1,1
+access_test_new_api_model_selection_non_stored,access_test_new_api_model_selection_non_stored,model_test_new_api_model_selection_non_stored,base.group_system,1,1,1,1
+access_test_new_api_model_selection_required_for_write_override,access_test_new_api_model_selection_required_for_write_override,model_test_new_api_model_selection_required_for_write_override,base.group_system,1,1,1,1
 access_test_new_api_model_selection_related,access_test_new_api_model_selection_related,test_new_api.model_test_new_api_model_selection_related,base.group_user,1,1,1,1
 access_test_new_api_model_selection_related_updatable,access_test_new_api_model_selection_related_updatable,test_new_api.model_test_new_api_model_selection_related_updatable,base.group_user,1,1,1,1
-access_test_new_api_move,access_test_new_api_move,model_test_new_api_move,,1,1,1,1
-access_test_new_api_move_line,access_test_new_api_move_line,model_test_new_api_move_line,,1,1,1,1
-access_test_new_api_payment,access_test_new_api_payment,model_test_new_api_payment,,1,1,1,1
-access_test_new_api_order,access_test_new_api_order,model_test_new_api_order,,1,1,1,1
-access_test_new_api_order_line,access_test_new_api_order_line,model_test_new_api_order_line,,1,1,1,1
-access_test_new_api_model_shared_cache_compute_parent,access_test_new_api.model_shared_cache_compute_parent,model_test_new_api_model_shared_cache_compute_parent,,1,1,1,1
-access_test_new_api_model_shared_cache_compute_line,access_test_new_api.model_shared_cache_compute_line,model_test_new_api_model_shared_cache_compute_line,,1,1,1,1
-access_test_new_api_compute_container,access_test_new_api_compute_container,model_test_new_api_compute_container,,1,1,1,1
-access_test_new_api_compute_member,access_test_new_api_compute_member,model_test_new_api_compute_member,,1,1,1,1
-access_test_new_api_user,access_test_new_api_user,model_test_new_api_user,,1,1,1,1
-access_test_new_api_group,access_test_new_api_group,model_test_new_api_group,,1,1,1,1
-access_test_new_api_compute_editable,access_test_new_api_compute_editable,model_test_new_api_compute_editable,,1,1,1,1
-access_test_new_api_compute_editable_line,access_test_new_api_compute_editable_line,model_test_new_api_compute_editable_line,,1,1,1,1
-access_test_new_api_model_constrained_unlinks,access_test_new_api_model_constrained_unlinks,model_test_new_api_model_constrained_unlinks,,1,1,1,1
-access_test_new_api_trigger_left,access_test_new_api_trigger_left,model_test_new_api_trigger_left,,1,1,1,1
-access_test_new_api_trigger_middle,access_test_new_api_trigger_middle,model_test_new_api_trigger_middle,,1,1,1,1
-access_test_new_api_trigger_right,access_test_new_api_trigger_right,model_test_new_api_trigger_right,,1,1,1,1
+access_test_new_api_move,access_test_new_api_move,model_test_new_api_move,base.group_system,1,1,1,1
+access_test_new_api_move_line,access_test_new_api_move_line,model_test_new_api_move_line,base.group_user,1,1,1,1
+access_test_new_api_payment,access_test_new_api_payment,model_test_new_api_payment,base.group_system,1,1,1,1
+access_test_new_api_order,access_test_new_api_order,model_test_new_api_order,base.group_system,1,1,1,1
+access_test_new_api_order_line,access_test_new_api_order_line,model_test_new_api_order_line,base.group_system,1,1,1,1
+access_test_new_api_model_shared_cache_compute_parent,access_test_new_api.model_shared_cache_compute_parent,model_test_new_api_model_shared_cache_compute_parent,base.group_user,1,1,1,1
+access_test_new_api_model_shared_cache_compute_line,access_test_new_api.model_shared_cache_compute_line,model_test_new_api_model_shared_cache_compute_line,base.group_user,1,1,1,1
+access_test_new_api_compute_container,access_test_new_api_compute_container,model_test_new_api_compute_container,base.group_system,1,1,1,1
+access_test_new_api_compute_member,access_test_new_api_compute_member,model_test_new_api_compute_member,base.group_system,1,1,1,1
+access_test_new_api_user,access_test_new_api_user,model_test_new_api_user,base.group_system,1,1,1,1
+access_test_new_api_group,access_test_new_api_group,model_test_new_api_group,base.group_system,1,1,1,1
+access_test_new_api_compute_editable,access_test_new_api_compute_editable,model_test_new_api_compute_editable,base.group_system,1,1,1,1
+access_test_new_api_compute_editable_line,access_test_new_api_compute_editable_line,model_test_new_api_compute_editable_line,base.group_system,1,1,1,1
+access_test_new_api_model_constrained_unlinks,access_test_new_api_model_constrained_unlinks,model_test_new_api_model_constrained_unlinks,base.group_system,1,1,1,1
+access_test_new_api_trigger_left,access_test_new_api_trigger_left,model_test_new_api_trigger_left,base.group_system,1,1,1,1
+access_test_new_api_trigger_middle,access_test_new_api_trigger_middle,model_test_new_api_trigger_middle,base.group_system,1,1,1,1
+access_test_new_api_trigger_right,access_test_new_api_trigger_right,model_test_new_api_trigger_right,base.group_system,1,1,1,1
 access_test_new_api_crew,access_test_new_api_crew,model_test_new_api_crew,base.group_user,1,1,1,1
 access_test_new_api_ship,access_test_new_api_ship,model_test_new_api_ship,base.group_user,1,1,1,1
 access_test_new_api_pirate,access_test_new_api_pirate,model_test_new_api_pirate,base.group_user,1,1,1,1
 access_test_new_api_prisoner,access_test_new_api_prisoner,model_test_new_api_prisoner,base.group_user,1,1,1,1
-access_test_new_api_precompute,access_test_new_api_precompute,model_test_new_api_precompute,,1,0,0,0
-access_test_new_api_precompute_line,access_test_new_api_precompute_line,model_test_new_api_precompute_line,,1,0,0,0
-access_test_new_api_precompute_combo,access_test_new_api_precompute_combo,model_test_new_api_precompute_combo,,1,0,0,0
-access_test_new_api_precompute_editable,access_test_new_api_precompute_editable,model_test_new_api_precompute_editable,,1,0,0,0
-access_test_new_api_precompute_readonly,access_test_new_api_precompute_readonly,model_test_new_api_precompute_readonly,,1,0,0,0
-access_test_new_api_precompute_required,access_test_new_api_precompute_required,model_test_new_api_precompute_required,,1,0,0,0
-access_test_new_api_precompute_monetary,access_test_new_api_precompute_monetary,model_test_new_api_precompute_monetary,,1,0,0,0
-access_test_new_api_prefetch,access_test_new_api_prefetch,model_test_new_api_prefetch,,1,0,0,0
+access_test_new_api_precompute,access_test_new_api_precompute,model_test_new_api_precompute,base.group_system,1,0,0,0
+access_test_new_api_precompute_line,access_test_new_api_precompute_line,model_test_new_api_precompute_line,base.group_system,1,0,0,0
+access_test_new_api_precompute_combo,access_test_new_api_precompute_combo,model_test_new_api_precompute_combo,base.group_system,1,0,0,0
+access_test_new_api_precompute_editable,access_test_new_api_precompute_editable,model_test_new_api_precompute_editable,base.group_system,1,0,0,0
+access_test_new_api_precompute_readonly,access_test_new_api_precompute_readonly,model_test_new_api_precompute_readonly,base.group_system,1,0,0,0
+access_test_new_api_precompute_required,access_test_new_api_precompute_required,model_test_new_api_precompute_required,base.group_system,1,0,0,0
+access_test_new_api_precompute_monetary,access_test_new_api_precompute_monetary,model_test_new_api_precompute_monetary,base.group_system,1,0,0,0
+access_test_new_api_prefetch,access_test_new_api_prefetch,model_test_new_api_prefetch,base.group_system,1,0,0,0
 access_test_new_api_modified,access_test_new_api_modified,model_test_new_api_modified,base.group_user,1,1,1,1
 access_test_new_api_modified_line,access_test_new_api_modified_line,model_test_new_api_modified_line,base.group_user,1,1,1,1
-access_test_new_api_related_translation_1,access_test_new_api_related_translation_1,model_test_new_api_related_translation_1,,1,1,1,1
-access_test_new_api_related_translation_2,access_test_new_api_related_translation_2,model_test_new_api_related_translation_2,,1,1,1,1
-access_test_new_api_related_translation_3,access_test_new_api_related_translation_3,model_test_new_api_related_translation_3,,1,1,1,1
-access_test_new_api_indexed_translation,access_test_new_api_indexed_translation,model_test_new_api_indexed_translation,,1,1,1,1
-access_test_new_api_empty_char,access_test_new_api_empty_char,model_test_new_api_empty_char,,1,1,1,1
+access_test_new_api_related_translation_1,access_test_new_api_related_translation_1,model_test_new_api_related_translation_1,base.group_system,1,1,1,1
+access_test_new_api_related_translation_2,access_test_new_api_related_translation_2,model_test_new_api_related_translation_2,base.group_system,1,1,1,1
+access_test_new_api_related_translation_3,access_test_new_api_related_translation_3,model_test_new_api_related_translation_3,base.group_system,1,1,1,1
+access_test_new_api_indexed_translation,access_test_new_api_indexed_translation,model_test_new_api_indexed_translation,base.group_system,1,1,1,1
+access_test_new_api_empty_char,access_test_new_api_empty_char,model_test_new_api_empty_char,base.group_system,1,1,1,1
 access_test_new_api_course,access_test_new_api_course,model_test_new_api_course,base.group_user,1,1,1,1
 access_test_new_api_lesson,access_test_new_api_lesson,model_test_new_api_lesson,base.group_user,1,1,1,1
 access_test_new_api_person,access_test_new_api_person,model_test_new_api_person,base.group_user,1,1,1,1

odoo/addons/test_performance/security/ir.model.access.csv

@@ -1,7 +1,7 @@
 id,name,model_id:id,group_id:id,perm_read,perm_write,perm_create,perm_unlink
-access_test_performance_base,access_test_performance_base,model_test_performance_base,,1,1,1,1
-access_test_performance_line,access_test_performance_line,model_test_performance_line,,1,1,1,1
-access_test_performance_tag,access_test_performance_tag,model_test_performance_tag,,1,1,1,1
-access_test_performance_bacon,access_test_performance_bacon,model_test_performance_bacon,,1,1,1,1
-access_test_performance_eggs,access_test_performance_eggs,model_test_performance_eggs,,1,1,1,1
-access_test_performance_mozzarella,access_test_performance_mozzarella,model_test_performance_mozzarella,,1,1,1,1
+access_test_performance_base,access_test_performance_base,model_test_performance_base,base.group_user,1,1,1,1
+access_test_performance_line,access_test_performance_line,model_test_performance_line,base.group_user,1,1,1,1
+access_test_performance_tag,access_test_performance_tag,model_test_performance_tag,base.group_user,1,1,1,1
+access_test_performance_bacon,access_test_performance_bacon,model_test_performance_bacon,base.group_system,1,1,1,1
+access_test_performance_eggs,access_test_performance_eggs,model_test_performance_eggs,base.group_system,1,1,1,1
+access_test_performance_mozzarella,access_test_performance_mozzarella,model_test_performance_mozzarella,base.group_system,1,1,1,1

odoo/addons/test_populate/ir.model.access.csv

@@ -1,5 +1,5 @@
 "id","name","model_id:id","group_id:id","perm_read","perm_write","perm_create","perm_unlink"
-access_test_populate,access_test_populate,model_test_populate,,1,1,1,1
-access_test_populate_category,access_test_populate_category,model_test_populate_category,,1,1,1,1
-access_test_no_populat,access_test_no_populat,model_test_no_populate,,1,1,1,1
-access_test_populate_inherit,access_test_populate_inherit,model_test_populate_inherit,,1,1,1,1
+access_test_populate,access_test_populate,model_test_populate,base.group_system,1,1,1,1
+access_test_populate_category,access_test_populate_category,model_test_populate_category,base.group_system,1,1,1,1
+access_test_no_populat,access_test_no_populat,model_test_no_populate,base.group_system,1,1,1,1
+access_test_populate_inherit,access_test_populate_inherit,model_test_populate_inherit,base.group_system,1,1,1,1

odoo/addons/test_read_group/ir.model.access.csv

@@ -1,10 +1,10 @@
 "id","name","model_id:id","group_id:id","perm_read","perm_write","perm_create","perm_unlink"
-access_test_read_group_on_date,access_test_read_group_on_date,model_test_read_group_on_date,,1,0,0,0
-access_test_read_group_aggregate_boolean,access_test_read_group_aggregate_boolean,model_test_read_group_aggregate_boolean,,1,0,0,0
-access_test_read_group_aggregate,access_test_read_group_aggregate,model_test_read_group_aggregate,,1,0,0,0
-access_test_read_group_on_selection,access_test_read_group_on_selection,model_test_read_group_on_selection,,1,0,0,0
-access_test_read_group_fill_temporal,access_test_read_group_fill_temporal,model_test_read_group_fill_temporal,,1,0,0,0
-access_test_read_group_order,access_test_read_group_order,model_test_read_group_order,,1,0,0,0
-access_test_read_group_order_line,access_test_read_group_order_line,model_test_read_group_order_line,,1,0,0,0
-access_test_read_group_user,access_test_read_group_user,model_test_read_group_user,,1,0,0,0
-access_test_read_group_task,access_test_read_group_task,model_test_read_group_task,,1,0,0,0
+access_test_read_group_on_date,access_test_read_group_on_date,model_test_read_group_on_date,base.group_system,1,0,0,0
+access_test_read_group_aggregate_boolean,access_test_read_group_aggregate_boolean,model_test_read_group_aggregate_boolean,base.group_system,1,0,0,0
+access_test_read_group_aggregate,access_test_read_group_aggregate,model_test_read_group_aggregate,base.group_system,1,0,0,0
+access_test_read_group_on_selection,access_test_read_group_on_selection,model_test_read_group_on_selection,base.group_system,1,0,0,0
+access_test_read_group_fill_temporal,access_test_read_group_fill_temporal,model_test_read_group_fill_temporal,base.group_system,1,0,0,0
+access_test_read_group_order,access_test_read_group_order,model_test_read_group_order,base.group_system,1,0,0,0
+access_test_read_group_order_line,access_test_read_group_order_line,model_test_read_group_order_line,base.group_system,1,0,0,0
+access_test_read_group_user,access_test_read_group_user,model_test_read_group_user,base.group_user,1,0,0,0
+access_test_read_group_task,access_test_read_group_task,model_test_read_group_task,base.group_user,1,0,0,0

odoo/addons/test_rpc/ir.model.access.csv

@@ -1,3 +1,3 @@
 "id","name","model_id:id","group_id:id","perm_read","perm_write","perm_create","perm_unlink"
-access_test_rpc_model_a,access_test_rpc_model_a,model_test_rpc_model_a,,1,1,1,1
-access_test_rpc_model_b,access_test_rpc_model_b,model_test_rpc_model_b,,1,1,1,1
+haccess_test_rpc_model_a,access_test_rpc_model_a,model_test_rpc_model_a,base.group_system,1,1,1,1
+access_test_rpc_model_b,access_test_rpc_model_b,model_test_rpc_model_b,base.group_system,1,1,1,1

odoo/addons/test_search_panel/ir.model.access.csv

@@ -1,5 +1,5 @@
 "id","name","model_id:id","group_id:id","perm_read","perm_write","perm_create","perm_unlink"
-access_test_search_panel_source_model,access_test_search_panel_source_model,model_test_search_panel_source_model,,1,0,0,0
-access_test_search_panel_category_target_model,access_test_search_panel_category_target_model,model_test_search_panel_category_target_model,,1,0,0,0
-access_test_search_panel_category_target_model_no_parent_name,access_test_search_panel_category_target_model_no_parent_name,model_test_search_panel_category_target_model_no_parent_name,,1,0,0,0
-access_test_search_panel_filter_target_model,access_test_search_panel_filter_target_model,model_test_search_panel_filter_target_model,,1,0,0,0
+access_test_search_panel_source_model,access_test_search_panel_source_model,model_test_search_panel_source_model,base.group_system,1,0,0,0
+access_test_search_panel_category_target_model,access_test_search_panel_category_target_model,model_test_search_panel_category_target_model,base.group_system,1,0,0,0
+access_test_search_panel_category_target_model_no_parent_name,access_test_search_panel_category_target_model_no_parent_name,model_test_search_panel_category_target_model_no_parent_name,base.group_system,1,0,0,0
+access_test_search_panel_filter_target_model,access_test_search_panel_filter_target_model,model_test_search_panel_filter_target_model,base.group_system,1,0,0,0

odoo/addons/test_testing_utilities/ir.model.access.csv

@@ -1,25 +1,25 @@
 id,name,model_id:id,group_id:id,perm_read,perm_write,perm_create,perm_unlink
-access_test_testing_utilities_a,access_test_testing_utilities_a,model_test_testing_utilities_a,,1,0,0,0
-access_test_testing_utilities_readonly,access_test_testing_utilities_readonly,model_test_testing_utilities_readonly,,1,0,0,0
-access_test_testing_utilities_c,access_test_testing_utilities_c,model_test_testing_utilities_c,,1,0,0,0
-access_test_testing_utilities_d,access_test_testing_utilities_d,model_test_testing_utilities_d,,1,0,0,0
-access_test_testing_utilities_e,access_test_testing_utilities_e,model_test_testing_utilities_e,,1,0,0,0
-access_test_testing_utilities_f,access_test_testing_utilities_f,model_test_testing_utilities_f,,1,0,0,0
-access_test_testing_utilities_g,access_test_testing_utilities_g,model_test_testing_utilities_g,,1,0,0,0
-access_test_testing_utilities_m2o,access_test_testing_utilities_m2o,model_test_testing_utilities_m2o,,1,0,0,0
-access_test_testing_utilities_default,access_test_testing_utilities_default,model_test_testing_utilities_default,,1,0,0,0
-access_test_testing_utilities_parent,access_test_testing_utilities_parent,model_test_testing_utilities_parent,,1,0,0,0
-access_test_testing_utilities_sub,access_test_testing_utilities_sub,model_test_testing_utilities_sub,,1,0,0,0
-access_test_testing_utilities_sub2,access_test_testing_utilities_sub2,model_test_testing_utilities_sub2,,1,0,0,0
-access_test_testing_utilities_sub3,access_test_testing_utilities_sub3,model_test_testing_utilities_sub3,,1,0,0,0
-access_test_testing_utilities_recursive,access_test_testing_utilities_recursive,model_test_testing_utilities_recursive,,1,0,0,0
-access_test_testing_utilities_onchange_parent,access_test_testing_utilities_onchange_parent,model_test_testing_utilities_onchange_parent,,1,0,0,0
-access_test_testing_utilities_onchange_line,access_test_testing_utilities_onchange_line,model_test_testing_utilities_onchange_line,,1,0,0,0
-access_model_test_testing_utilities_onchange_count,access_model_test_testing_utilities_onchange_count,model_test_testing_utilities_onchange_count,,1,1,1,1
-access_test_testing_utilities_onchange_count_sub,access_test_testing_utilities_onchange_count_sub,model_test_testing_utilities_onchange_count_sub,,1,1,1,1
-access_o2m_readonly_subfield_parent,access_o2m_readonly_subfield_parent,model_o2m_readonly_subfield_parent,,1,1,1,1
-access_o2m_readonly_subfield_child,access_o2m_readonly_subfield_child,model_o2m_readonly_subfield_child,,1,1,1,1
-access_test_testing_utilities_req_bool,access_test_testing_utilities_req_bool,model_test_testing_utilities_req_bool,,1,0,0,0
+access_test_testing_utilities_a,access_test_testing_utilities_a,model_test_testing_utilities_a,base.group_user,1,0,0,0
+access_test_testing_utilities_readonly,access_test_testing_utilities_readonly,model_test_testing_utilities_readonly,base.group_user,1,0,0,0
+access_test_testing_utilities_c,access_test_testing_utilities_c,model_test_testing_utilities_c,base.group_user,1,0,0,0
+access_test_testing_utilities_d,access_test_testing_utilities_d,model_test_testing_utilities_d,base.group_user,1,0,0,0
+access_test_testing_utilities_e,access_test_testing_utilities_e,model_test_testing_utilities_e,base.group_user,1,0,0,0
+access_test_testing_utilities_f,access_test_testing_utilities_f,model_test_testing_utilities_f,base.group_user,1,0,0,0
+access_test_testing_utilities_g,access_test_testing_utilities_g,model_test_testing_utilities_g,base.group_user,1,0,0,0
+access_test_testing_utilities_m2o,access_test_testing_utilities_m2o,model_test_testing_utilities_m2o,base.group_user,1,0,0,0
+access_test_testing_utilities_default,access_test_testing_utilities_default,model_test_testing_utilities_default,base.group_user,1,0,0,0
+access_test_testing_utilities_parent,access_test_testing_utilities_parent,model_test_testing_utilities_parent,base.group_user,1,0,0,0
+access_test_testing_utilities_sub,access_test_testing_utilities_sub,model_test_testing_utilities_sub,base.group_user,1,0,0,0
+access_test_testing_utilities_sub2,access_test_testing_utilities_sub2,model_test_testing_utilities_sub2,base.group_user,1,0,0,0
+access_test_testing_utilities_sub3,access_test_testing_utilities_sub3,model_test_testing_utilities_sub3,base.group_user,1,0,0,0
+access_test_testing_utilities_recursive,access_test_testing_utilities_recursive,model_test_testing_utilities_recursive,base.group_user,1,0,0,0
+access_test_testing_utilities_onchange_parent,access_test_testing_utilities_onchange_parent,model_test_testing_utilities_onchange_parent,base.group_user,1,0,0,0
+access_test_testing_utilities_onchange_line,access_test_testing_utilities_onchange_line,model_test_testing_utilities_onchange_line,base.group_user,1,0,0,0
+access_model_test_testing_utilities_onchange_count,access_model_test_testing_utilities_onchange_count,model_test_testing_utilities_onchange_count,base.group_user,1,1,1,1
+access_test_testing_utilities_onchange_count_sub,access_test_testing_utilities_onchange_count_sub,model_test_testing_utilities_onchange_count_sub,base.group_user,1,1,1,1
+access_o2m_readonly_subfield_parent,access_o2m_readonly_subfield_parent,model_o2m_readonly_subfield_parent,base.group_user,1,1,1,1
+access_o2m_readonly_subfield_child,access_o2m_readonly_subfield_child,model_o2m_readonly_subfield_child,base.group_user,1,1,1,1
+access_test_testing_utilities_req_bool,access_test_testing_utilities_req_bool,model_test_testing_utilities_req_bool,base.group_user,1,0,0,0
 access_o2m_changes_parent,access_o2m_changes_parent,model_o2m_changes_parent,base.group_user,1,0,0,0
 access_o2m_changes_children,access_o2m_changes_children,model_o2m_changes_children,base.group_user,1,0,0,0
 access_o2m_changes_children_lines,access_o2m_changes_children_lines,model_o2m_changes_children_lines,base.group_user,1,0,0,0

odoo/addons/test_uninstall/ir.model.access.csv

@@ -1,2 +1,2 @@
 "id","name","model_id:id","group_id:id","perm_read","perm_write","perm_create","perm_unlink"
-access_test_uninstall_model,access_test_uninstall_model,model_test_uninstall_model,,1,1,1,1
+access_test_uninstall_model,access_test_uninstall_model,model_test_uninstall_model,base.group_user,1,1,1,1