From d316dda7271fdb45ad7777e2bacfa55ba82ace67 Mon Sep 17 00:00:00 2001
From: Mantavya Gajjar <mga@tinyerp.com>
Date: Wed, 20 Feb 2008 09:10:28 +0000
Subject: [PATCH] Add access security on sale module

bzr revid: mga@tinyerp.com-1a23f560d5dc090f62de46ce6abb513633f4677c
---
 addons/sale/sale_security.xml | 92 +++++++++++++++++++++++++++++++++++
 1 file changed, 92 insertions(+)
 create mode 100644 addons/sale/sale_security.xml

diff --git a/addons/sale/sale_security.xml b/addons/sale/sale_security.xml
new file mode 100644
index 00000000000..274e454c465
--- /dev/null
+++ b/addons/sale/sale_security.xml
@@ -0,0 +1,92 @@
+<?xml version="1.0"?>
+<terp>
+	<data>
+	
+		<record model="res.groups" id="group_sale_manager">
+			<field name="name">Sale Manager</field>
+		</record>
+		<record model="res.groups" id="group_sale_salesman">
+			<field name="name">Salesman</field>
+		</record>
+		
+		<!-- Sales order security -->
+		<record model="ir.model.access" id="access_sale_order">
+			<field name="name">Sale Order</field>
+			<field name="model_id" model="ir.model" search="[('model', '=', 'sale.order')]"/>
+			<field name="perm_read" eval="True"/>
+			<field name="perm_write" eval="False"/>
+			<field name="perm_create" eval="False"/>
+			<field name="perm_unlink" eval="False"/>
+		</record>
+		
+		<record model="ir.model.access" id="access_sale_order_sale_manager">
+			<field name="name">Sale Order</field>
+			<field name="model_id" model="ir.model" search="[('model', '=', 'sale.order')]"/>
+			<field name="group_id" ref="group_sale_manager"/>
+			<field name="perm_read" eval="True"/>
+			<field name="perm_write" eval="True"/>
+			<field name="perm_create" eval="True"/>
+			<field name="perm_unlink" eval="True"/>
+		</record>
+		
+		<record model="ir.model.access" id="access_sale_order_salesman">
+			<field name="name">Sale Order</field>
+			<field name="model_id" model="ir.model" search="[('model', '=', 'sale.order')]"/>
+			<field name="group_id" ref="group_sale_salesman"/>
+			<field name="perm_read" eval="True"/>
+			<field name="perm_write" eval="True"/>
+			<field name="perm_create" eval="True"/>
+			<field name="perm_unlink" eval="True"/>
+		</record>
+		
+		<record model="ir.model.access" id="access_sale_order_admin">
+			<field name="name">Sale Order</field>
+			<field name="model_id" model="ir.model" search="[('model', '=', 'sale.order')]"/>
+			<field name="group_id" ref="base.group_admin"/>
+			<field name="perm_read" eval="True"/>
+			<field name="perm_write" eval="True"/>
+			<field name="perm_create" eval="True"/>
+			<field name="perm_unlink" eval="True"/>
+		</record>
+		
+		<!-- Sales order line security -->
+		<record model="ir.model.access" id="access_sale_order_line">
+			<field name="name">Sale Order Line</field>
+			<field name="model_id" model="ir.model" search="[('model', '=', 'sale.order.line')]"/>
+			<field name="perm_read" eval="True"/>
+			<field name="perm_write" eval="False"/>
+			<field name="perm_create" eval="False"/>
+			<field name="perm_unlink" eval="False"/>
+		</record>
+		
+		<record model="ir.model.access" id="access_sale_order_line_manager">
+			<field name="name">Sale Order Line</field>
+			<field name="model_id" model="ir.model" search="[('model', '=', 'sale.order.line')]"/>
+			<field name="group_id" ref="group_sale_manager"/>
+			<field name="perm_read" eval="True"/>
+			<field name="perm_write" eval="True"/>
+			<field name="perm_create" eval="True"/>
+			<field name="perm_unlink" eval="True"/>
+		</record>
+		
+		<record model="ir.model.access" id="access_sale_order_line_salesman">
+			<field name="name">Sale Order Line</field>
+			<field name="model_id" model="ir.model" search="[('model', '=', 'sale.order.line')]"/>
+			<field name="group_id" ref="group_sale_salesman"/>
+			<field name="perm_read" eval="True"/>
+			<field name="perm_write" eval="True"/>
+			<field name="perm_create" eval="True"/>
+			<field name="perm_unlink" eval="True"/>
+		</record>
+		
+		<record model="ir.model.access" id="access_sale_order_line_admin">
+			<field name="name">Sale Order Line</field>
+			<field name="model_id" model="ir.model" search="[('model', '=', 'sale.order.line')]"/>
+			<field name="group_id" ref="base.group_admin"/>
+			<field name="perm_read" eval="True"/>
+			<field name="perm_write" eval="True"/>
+			<field name="perm_create" eval="True"/>
+			<field name="perm_unlink" eval="True"/>
+		</record>
+	</data>
+</terp>