[IMP]: Add security for particular users

bzr revid: ksa@tinyerp.co.in-20101014122629-cvdu43g3jmhpvzfy

addons/account/security/ir.model.access.csv

@@ -151,33 +151,3 @@
 "access_report_account_receivable_invoice","report.account.receivable.invoice","model_report_account_receivable","account.group_account_invoice",1,1,1,1
 "access_report_account_receivable_user","report.account.receivable.user","model_report_account_receivable","account.group_account_user",1,1,1,1
 "access_account_sequence_fiscal_year_invoice","account.sequence.fiscalyear invoice","model_account_sequence_fiscalyear","account.group_account_invoice",1,1,1,1
-"access_account_invoice","account.invoice","model_account_invoice","project.group_project_finance_user",1,1,0,0
-"access_account_bank_statement","account.bank.statement","model_account_bank_statement","project.group_project_finance_user",1,1,0,0
-"access_account_move_line","account.move.line","model_account_move_line","project.group_project_finance_user",1,1,0,0
-"access_account_move","account.move","model_account_move","project.group_project_finance_user",1,1,0,0
-"access_account_analytic_line","account.analytic.line","model_account_analytic_line","project.group_project_finance_user",1,1,0,0
-"access_account_move_line","account.move.line","model_account_move_line","project.group_project_finance_user",1,1,0,0
-"access_account_subscription","account.subscription","model_account_subscription","project.group_project_finance_user",1,1,0,0
-"access_account_period","account.period","model_account_period","project.group_project_finance_user",1,1,0,0
-"access_account_analytic_journal","account.analytic.journal","model_account_analytic_journal","project.group_project_finance_user",1,1,0,0
-"access_account_invoice_report","account.invoice.report","model_account_invoice_report","project.group_project_finance_user",1,1,0,0
-"access_account_entries_report","account.entries.report","model_account_entries_report","project.group_project_finance_user",1,1,0,0
-"access_analytic_entries_report","analytic.entries.report","model_analytic_entries_report","project.group_project_finance_user",1,1,0,0
-"access_account_journal_view","account.journal.view","model_account_journal_view","project.group_project_finance_user",1,1,0,0
-"access_account_account_type","account.account.type","model_account_account_type","project.group_project_finance_user",1,1,0,0
-"access_account_tax_code","account.tax.code","model_account_tax_code","project.group_project_finance_user",1,1,0,0
-"access_account_fiscalyear","account.fiscalyear","model_account_fiscalyear","project.group_project_finance_user",1,1,0,0
-"access_account_account","account.account","model_account_account","project.group_project_finance_user",1,1,0,0
-"access_account_journal","account.journal","model_account_journal","project.group_project_finance_user",1,1,0,0
-"access_account_tax","account.tax","model_account_tax","project.group_project_finance_user",1,1,0,0
-"access_account_fiscal_position","account.fiscal.position","model_account_fiscal_position","project.group_project_finance_user",1,1,0,0
-"access_account_chart_template","account.chart.template","model_account_chart_template","project.group_project_finance_user",1,1,0,0
-"access_account_account_template","account.account.template","model_account_account_template","project.group_project_finance_user",1,1,0,0
-"access_account_tax_template","account.tax.template","model_account_tax_template","project.group_project_finance_user",1,1,0,0
-"access_account_tax_code_template","account.tax.code.template","model_account_tax_code_template","project.group_project_finance_user",1,1,0,0
-"access_account_fiscal_position_template","account.fiscal.position.template","model_account_fiscal_position_template","project.group_project_finance_user",1,1,0,0
-"access_account_analytic_journal","account.analytic.journal","model_account_analytic_journal","project.group_project_finance_user",1,1,0,0
-"access_account_model","account.model","model_account_model","project.group_project_finance_user",1,1,0,0
-"access_account_payment_term","account.payment.term","model_account_payment_term","project.group_project_finance_user",1,1,0,0
-"access_res_currency","res.currency","base.model_res_currency","project.group_project_finance_user",1,1,0,0
-"access_account_analytic_account","account.analytic.account","analytic.model_account_analytic_account","project.group_project_finance_user",1,1,0,0

addons/crm/security/crm_security.xml

@@ -20,6 +20,7 @@
         <field name="domain_force">['|',('user_id','=',user.id),('user_id','=',False)]</field>
         <field name="groups" eval="[(4, ref('base.group_sale_salesman'))]"/>
     </record>
+
     <record id="crm_rule_all_lead" model="ir.rule">
         <field name="name">All Leads</field>
         <field ref="model_crm_lead" name="model_id"/>
@@ -34,6 +35,6 @@
     <record model="ir.ui.menu" id="base.menu_base_config">
         <field eval="[(4, ref('base.group_sale_manager'))]" name="groups_id"/>
     </record>
-    
+
     </data>
 </openerp>

addons/hr/board_hr_view.xml

@@ -32,6 +32,8 @@
             <field name="usage">menu</field>
             <field name="view_id" ref="board_hr_form"/>
         </record>
-        <menuitem id="menu_hr_root" icon="terp-hr" name="Human Resources" sequence="15" action="open_board_hr"/>
+
+        <menuitem id="menu_hr_root" icon="terp-hr" name="Human Resources" sequence="15" action="open_board_hr"
+        groups="project.group_project_finance_user"/>
     </data>
 </openerp>

addons/hr_timesheet_sheet/hr_timesheet_sheet_view.xml

@@ -323,8 +323,8 @@
             </field>
         </record>
   <!-- Timesheet Button on Employee Form -->
-  <act_window 
-           context="{'search_default_employee_id': [active_id]}" 
+  <act_window
+           context="{'search_default_employee_id': [active_id]}"
            id="act_hr_employee_2_hr_timesheet" name="Timesheets" res_model="hr_timesheet_sheet.sheet" src_model="hr.employee"/>
 
     </data>

addons/hr_timesheet_sheet/security/ir.model.access.csv

@@ -7,4 +7,4 @@
 "access_hr_timesheet_report","hr.timesheet.report","model_hr_timesheet_report","base.group_hr_manager",1,1,1,1
 "access_hr_analytic_timesheet_system_user","hr.analytic.timesheet.system.user","model_hr_analytic_timesheet","base.group_user",1,0,0,0
 "access_hr_timesheet_sheet_sheet_day","hr.timesheet.sheet.sheet.day.user","model_hr_timesheet_sheet_sheet_day","base.group_user",1,0,0,0
-"access_model_hr_analytic_timesheet","hr.analytic.timesheet","model_hr_analytic_timesheet","project.group_project_finance_user",1,1,0,0
+"access_hr_analytic_timesheet","hr.analytic.timesheet","model_hr_analytic_timesheet","project.group_project_finance_user",1,1,0,0

addons/project/project_view.xml

@@ -548,6 +548,7 @@
             </page>
        </field>
     </record>
+
     <act_window context="{'search_default_user_id': [active_id]}" domain="[('state', '&lt;&gt;', 'cancelled'),('state', '&lt;&gt;', 'done')]" id="act_res_users_2_project_task_opened" name="Assigned tasks" res_model="project.task" src_model="res.users" view_mode="tree,form,gantt,calendar,graph" view_type="form"/>
     <act_window context="{'search_default_user_id': [active_id]}" domain="[('date', '&gt;=', time.strftime('%Y-%m-01'))]" id="act_res_users_2_project_task_work_month" name="Month works" res_model="project.task.work" src_model="res.users" view_mode="tree,form" view_type="form"/>
     </data>

addons/project/security/ir.model.access.csv

@@ -5,7 +5,7 @@
 "access_account_analytic_account","account.analytic.account","analytic.model_account_analytic_account","project.group_project_user",1,1,1,1
 "access_project_task_type_user","project.task.type user","model_project_task_type","project.group_project_user",1,1,1,1
 "access_project_task_type","project.task.type","model_project_task_type","project.group_project_manager",1,1,1,1
-"access_project_task_manager","project.task manager","model_project_task","project.group_project_manager",1,1,1,1
+"access_project_task_manager","project.task manager","model_project_task","project.group_project_manager",0,0,0,0
 "access_project_task","project.task","model_project_task","project.group_project_user",1,1,1,0
 "access_project_task_work","project.task.work","model_project_task_work","project.group_project_user",1,1,1,1
 "access_project_task_work_manager","project.task.work.manager","model_project_task_work","project.group_project_manager",1,1,1,1
@@ -38,6 +38,5 @@
 "access_project_vs_hours_project_financial_user","project.vs.hours.project.financial.user","model_project_vs_hours","group_project_finance_user",1,0,0,0
 "access_project_project","project.project","model_project_project","group_project_finance_user",1,0,0,0
 "access_project_task","project.task","model_project_task","group_project_finance_user",1,0,0,0
-"access_account_analytic_line","account.analytic.line","account.model_account_analytic_line","group_project_finance_user",1,0,0,0
 "access_report_project_task_user","report.project.task.user","model_report_project_task_user","group_project_finance_user",1,0,0,0
 "access_project_task_type","project.task.type","model_project_task_type","group_project_finance_user",1,0,0,0

addons/project/security/project_security.xml

@@ -48,18 +48,20 @@
     </record>
 
      <record model="ir.rule" id="project_details_comp_rule">
-        <field name="name" >Projects According to User</field>
+        <field name="name" >Projects According to User or Members</field>
         <field name="model_id" ref="model_project_project"/>
         <field name="groups" eval="[(6, 0, [ref('group_project_manager')])]"/>
-        <field name="domain_force">[('members','in',[user.id])]</field>
+        <field name="domain_force">['|',('members','in',[user.id]),('user_id','=',user.id)]</field>
     </record>
 
      <record model="ir.rule" id="project_user_rule">
-        <field name="name" >Projects According to Members</field>
+        <field name="name" >Projects According to Members or Users</field>
         <field name="model_id" ref="model_project_project"/>
          <field eval="1" name="perm_read"/>
+         <field eval="1" name="perm_write"/>
+         <field eval="1" name="perm_create"/>
         <field name="groups" eval="[(6, 0, [ref('group_project_user')])]"/>
-        <field name="domain_force">[('members','in',[user.id])]</field>
+        <field name="domain_force">['|',('members','in',[user.id]),('user_id','=',user.id)]</field>
     </record>
 
 </data>

addons/project_issue/board_project_issue_view.xml

@@ -126,7 +126,7 @@
             	<xpath expr="/form/hpaned/child1/action[@string='My Delegated Tasks']" position="after">
 						<action colspan="4"  height="100" name="%(action_view_my_project_issue_tree)d" string="My Issues" />
             	</xpath>
-            	<xpath expr="/form/hpaned/child2/vpaned/child2/action[@string='My Remaining Hours by Project']" position="after">
+            	<xpath expr="/form/hpaned/child2/action[@string='My Remaining Hours by Project']" position="after">
 						<action colspan="4" height="100"  name="%(action_view_my_open_project_issue_tree)d" string="My Open Issues by Creation Date" />
             	</xpath>
             </field>

addons/project_issue/security/ir.model.access.csv

@@ -27,3 +27,5 @@
 "access_project_issue_version","project.issue.version","model_project_issue_version","project.group_project_finance_user",1,0,0,0
 "access_crm_case_categ","crm.case.categ","crm.model_crm_case_categ","project.group_project_finance_user",1,0,0,0
 "access_resource_calendar","resource.calendar","resource.model_resource_calendar","project.group_project_finance_user",1,0,0,0
+"access_resource_resource","resource.resource","resource.model_resource_resource","project.group_project_manager",1,1,1,1
+"access_resource_resource","resource.resource","resource.model_resource_resource","project.group_project_user",1,0,0,0

addons/project_issue/security/project_issue_security.xml

@@ -4,15 +4,15 @@
 	     <record id="group_project_supporter" model="res.groups">
 	        <field name="name">Project / Support Manager</field>
 	    </record>
-	    
+
 	    <record model="ir.rule" id="project_issue_rule">
-        <field name="name" >Issues according to Users</field>
+        <field name="name" >Issues according to Users or Members</field>
         <field name="model_id" ref="model_project_issue"/>
          <field eval="1" name="perm_read"/>
          <field eval="1" name="perm_create"/>
          <field eval="1" name="perm_write"/>
         <field name="groups" eval="[(6, 0, [ref('project.group_project_user')])]"/>
-        <field name="domain_force">[('project_id.members','in',[user.id])]</field>
+        <field name="domain_force">['|',('members','in',[user.id]),('user_id','=',user.id)]</field>
     </record>
  	</data>
 </openerp>

addons/project_timesheet/project_timesheet_view.xml

@@ -33,7 +33,9 @@
         </record>
 
         <menuitem id="menu_project_billing" name="Billing"
-                  parent="base.menu_main_pm" sequence="5"/>
+                  parent="base.menu_main_pm" sequence="5"
+                  groups="project.group_project_finance_user"/>
+
         <menuitem id="menu_project_billing_line" name="Bill Tasks Work"
             parent="menu_project_billing" action="hr_timesheet_invoice.action_hr_analytic_timesheet_open_tree"/>
     </data>

addons/project_timesheet/security/ir.model.access.csv

@@ -7,3 +7,33 @@
 "access_project_timesheet_project_financial_user","hr_timesheet_sheet.sheet.project.financial.user","hr_timesheet_sheet.model_hr_timesheet_sheet_sheet","project.group_project_finance_user",1,1,1,0
 "access_report_timesheet_task_user_financial_user","report.timesheet.task.user.financial.user","model_report_timesheet_task_user","project.group_project_finance_user",1,0,0,0
 "access_hr_analytic_timesheet","hr.analytic.timesheet","hr_timesheet_sheet.model_hr_analytic_timesheet","project.group_project_finance_user",1,1,0,0
+"access_account_invoice","account.invoice","account.model_account_invoice","project.group_project_finance_user",1,1,0,0
+"access_account_bank_statement","account.bank.statement","account.model_account_bank_statement","project.group_project_finance_user",1,1,0,0
+"access_account_move_line","account.move.line","account.model_account_move_line","project.group_project_finance_user",1,1,0,0
+"access_account_move","account.move","account.model_account_move","project.group_project_finance_user",1,1,0,0
+"access_account_analytic_line","account.analytic.line","account.model_account_analytic_line","project.group_project_finance_user",1,1,0,0
+"access_account_move_line","account.move.line","account.model_account_move_line","project.group_project_finance_user",1,1,0,0
+"access_account_subscription","account.subscription","account.model_account_subscription","project.group_project_finance_user",1,1,0,0
+"access_account_period","account.period","account.model_account_period","project.group_project_finance_user",1,1,0,0
+"access_account_analytic_journal","account.analytic.journal","account.model_account_analytic_journal","project.group_project_finance_user",1,1,0,0
+"access_account_invoice_report","account.invoice.report","account.model_account_invoice_report","project.group_project_finance_user",1,1,0,0
+"access_account_entries_report","account.entries.report","account.model_account_entries_report","project.group_project_finance_user",1,1,0,0
+"access_analytic_entries_report","analytic.entries.report","account.model_analytic_entries_report","project.group_project_finance_user",1,1,0,0
+"access_account_journal_view","account.journal.view","account.model_account_journal_view","project.group_project_finance_user",1,1,0,0
+"access_account_account_type","account.account.type","account.model_account_account_type","project.group_project_finance_user",1,1,0,0
+"access_account_tax_code","account.tax.code","account.model_account_tax_code","project.group_project_finance_user",1,1,0,0
+"access_account_fiscalyear","account.fiscalyear","account.model_account_fiscalyear","project.group_project_finance_user",1,1,0,0
+"access_account_account","account.account","account.model_account_account","project.group_project_finance_user",1,1,0,0
+"access_account_journal","account.journal","account.model_account_journal","project.group_project_finance_user",1,1,0,0
+"access_account_tax","account.tax","account.model_account_tax","project.group_project_finance_user",1,1,0,0
+"access_account_fiscal_position","account.fiscal.position","account.model_account_fiscal_position","project.group_project_finance_user",1,1,0,0
+"access_account_chart_template","account.chart.template","account.model_account_chart_template","project.group_project_finance_user",1,1,0,0
+"access_account_account_template","account.account.template","account.model_account_account_template","project.group_project_finance_user",1,1,0,0
+"access_account_tax_template","account.tax.template","account.model_account_tax_template","project.group_project_finance_user",1,1,0,0
+"access_account_tax_code_template","account.tax.code.template","account.model_account_tax_code_template","project.group_project_finance_user",1,1,0,0
+"access_account_fiscal_position_template","account.fiscal.position.template","account.model_account_fiscal_position_template","project.group_project_finance_user",1,1,0,0
+"access_account_analytic_journal","account.analytic.journal","account.model_account_analytic_journal","project.group_project_finance_user",1,1,0,0
+"access_account_model","account.model","account.model_account_model","project.group_project_finance_user",1,1,0,0
+"access_account_payment_term","account.payment.term","account.model_account_payment_term","project.group_project_finance_user",1,1,0,0
+"access_res_currency","res.currency","base.model_res_currency","project.group_project_finance_user",1,1,0,0
+"access_account_analytic_account","account.analytic.account","analytic.model_account_analytic_account","project.group_project_finance_user",1,1,0,0