From 8f24480b265bf503f1d1da4e7505e29ac8008c8c Mon Sep 17 00:00:00 2001
From: Mantavya Gajjar <mga@tinyerp.com>
Date: Thu, 21 Feb 2008 07:24:15 +0000
Subject: [PATCH] Add more access security on product module *
 product.pricelist * product.pricelist.version * product.pricelist.item

bzr revid: mga@tinyerp.com-b1d77e1b5cb757b340a7eacae5c11b895a7ab237
---
 addons/product/product_security.xml | 91 ++++++++++++++++++++++++++++-
 1 file changed, 90 insertions(+), 1 deletion(-)

diff --git a/addons/product/product_security.xml b/addons/product/product_security.xml
index a26183a813b..bdf87700dda 100644
--- a/addons/product/product_security.xml
+++ b/addons/product/product_security.xml
@@ -65,7 +65,96 @@
 			<field name="perm_create" eval="True"/>
 			<field name="perm_unlink" eval="True"/>
 		</record>
-	
+		
+		<!-- Pricelist security -->
+		<record model="ir.model.access" id="access_product_pricelist">
+			<field name="name">Product Pricelist</field>
+			<field name="model_id" model="ir.model" search="[('model', '=', 'product.pricelist')]"/>
+			<field name="perm_read" eval="True"/>
+			<field name="perm_write" eval="False"/>
+			<field name="perm_create" eval="False"/>
+			<field name="perm_unlink" eval="False"/>
+		</record>
+		
+		<record model="ir.model.access" id="access_product_pricelist_manager">
+			<field name="name">Product Pricelist</field>
+			<field name="model_id" model="ir.model" search="[('model', '=', 'product.pricelist')]"/>
+			<field name="group_id" ref="group_product_manager"/>
+			<field name="perm_read" eval="True"/>
+			<field name="perm_write" eval="True"/>
+			<field name="perm_create" eval="True"/>
+			<field name="perm_unlink" eval="True"/>
+		</record>
+		
+		<record model="ir.model.access" id="access_product_pricelist_admin">
+			<field name="name">Product Pricelist</field>
+			<field name="model_id" model="ir.model" search="[('model', '=', 'product.pricelist')]"/>
+			<field name="group_id" ref="base.group_admin"/>
+			<field name="perm_read" eval="True"/>
+			<field name="perm_write" eval="True"/>
+			<field name="perm_create" eval="True"/>
+			<field name="perm_unlink" eval="True"/>
+		</record>
+		
+		<!-- Pricelist Version security -->
+		<record model="ir.model.access" id="access_product_pricelist_version">
+			<field name="name">Product Pricelist Version</field>
+			<field name="model_id" model="ir.model" search="[('model', '=', 'product.pricelist.version')]"/>
+			<field name="perm_read" eval="True"/>
+			<field name="perm_write" eval="False"/>
+			<field name="perm_create" eval="False"/>
+			<field name="perm_unlink" eval="False"/>
+		</record>
+		
+		<record model="ir.model.access" id="access_product_pricelist_version_manager">
+			<field name="name">Product Pricelist Version</field>
+			<field name="model_id" model="ir.model" search="[('model', '=', 'product.pricelist.version')]"/>
+			<field name="group_id" ref="group_product_manager"/>
+			<field name="perm_read" eval="True"/>
+			<field name="perm_write" eval="True"/>
+			<field name="perm_create" eval="True"/>
+			<field name="perm_unlink" eval="True"/>
+		</record>
+		
+		<record model="ir.model.access" id="access_product_pricelist_version_admin">
+			<field name="name">Product Pricelist Version</field>
+			<field name="model_id" model="ir.model" search="[('model', '=', 'product.pricelist.version')]"/>
+			<field name="group_id" ref="base.group_admin"/>
+			<field name="perm_read" eval="True"/>
+			<field name="perm_write" eval="True"/>
+			<field name="perm_create" eval="True"/>
+			<field name="perm_unlink" eval="True"/>
+		</record>
+		
+		<!-- Pricelist Item security -->
+		<record model="ir.model.access" id="access_product_pricelist_item_version">
+			<field name="name">Product Pricelist Item</field>
+			<field name="model_id" model="ir.model" search="[('model', '=', 'product.pricelist.item')]"/>
+			<field name="perm_read" eval="True"/>
+			<field name="perm_write" eval="False"/>
+			<field name="perm_create" eval="False"/>
+			<field name="perm_unlink" eval="False"/>
+		</record>
+		
+		<record model="ir.model.access" id="access_product_pricelist_item_manager">
+			<field name="name">Product Pricelist Item</field>
+			<field name="model_id" model="ir.model" search="[('model', '=', 'product.pricelist.item')]"/>
+			<field name="group_id" ref="group_product_manager"/>
+			<field name="perm_read" eval="True"/>
+			<field name="perm_write" eval="True"/>
+			<field name="perm_create" eval="True"/>
+			<field name="perm_unlink" eval="True"/>
+		</record>
+		
+		<record model="ir.model.access" id="access_product_pricelist_item_admin">
+			<field name="name">Product Pricelist Item</field>
+			<field name="model_id" model="ir.model" search="[('model', '=', 'product.pricelist.item')]"/>
+			<field name="group_id" ref="base.group_admin"/>
+			<field name="perm_read" eval="True"/>
+			<field name="perm_write" eval="True"/>
+			<field name="perm_create" eval="True"/>
+			<field name="perm_unlink" eval="True"/>
+		</record>
 	</data>
 </terp>