pengyuthon/odoo_source
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity

[FIX] hr_expense: delete expense

Browse Source 
A regular employee is allowed to delete an expense reported already
approved. This should not be possible, only an officer could do it.

Fixes #19044
opw-767549
This commit is contained in:
Nicolas Martinelli
2017-08-28 13:30:10 +02:00
parent 22eb3ee971
commit c478e94450
1 changed files with 20 additions and 0 deletions
Download Patch File Download Diff File Expand all files Collapse all files
addons/hr_expense/security/ir_rule.xml
+20
View File
@@ -26,6 +26,26 @@
<field eval="True" name="global"/>
<field name="domain_force">['|',('company_id', '=', False), ('company_id', 'child_of', [user.company_id.id])]</field>
</record>
<record id="hr_expense_report_prevent_unlink" model="ir.rule">
<field name="name">Expense Report Prevent Delete Employee</field>
<field name="model_id" ref="model_hr_expense_sheet"/>
<field name="domain_force">[('state', '=', 'submit')]</field>
<field name="groups" eval="[(4, ref('base.group_user'))]"/>
<field name="perm_read" eval="False"/>
<field name="perm_write" eval="False"/>
<field name="perm_create" eval="False"/>
<field name="perm_unlink" eval="True"/>
</record>
<record id="hr_expense_report_auth_unlink" model="ir.rule">
<field name="name">Expense Report Authorize Delete Officer</field>
<field name="model_id" ref="model_hr_expense_sheet"/>
<field name="domain_force">[(1, '=', 1)]</field>
<field name="groups" eval="[(4, ref('hr_expense.group_hr_expense_user'))]"/>
<field name="perm_read" eval="False"/>
<field name="perm_write" eval="False"/>
<field name="perm_create" eval="False"/>
<field name="perm_unlink" eval="True"/>
</record>
</data>
</odoo>