From fea8d452b28d1ec004ae3cf9988cfbde2964c92b Mon Sep 17 00:00:00 2001
From: mcm-odoo <mcm@odoo.com>
Date: Thu, 7 Nov 2019 12:37:34 +0000
Subject: [PATCH] [FIX] im_livechat: allow manager to read all sessions

Managers could see only their sessions like other operators.
Now they can see all the sessions so they can check and help the operators.

task-2048498

closes odoo/odoo#41175

X-original-commit: 6ae791335a1986aa4cc72f7ed9aadd471c1774c5
Signed-off-by: Thibault Delavallee (tde) <tde@openerp.com>
---
 .../security/im_livechat_channel_security.xml          | 10 ++++++++++
 addons/mail/security/mail_security.xml                 |  1 +
 2 files changed, 11 insertions(+)

diff --git a/addons/im_livechat/security/im_livechat_channel_security.xml b/addons/im_livechat/security/im_livechat_channel_security.xml
index 8a2b78ce614..be4753f9d4a 100644
--- a/addons/im_livechat/security/im_livechat_channel_security.xml
+++ b/addons/im_livechat/security/im_livechat_channel_security.xml
@@ -20,6 +20,16 @@
             <field name="users" eval="[(4, ref('base.user_root')), (4, ref('base.user_admin'))]"/>
         </record>
 
+        <record id="im_livechat_rule_manager_read_all_mail_channel" model="ir.rule">
+            <field name="name">Livechat: Administrator: read all livechat channel</field>
+            <field name="model_id" ref="model_mail_channel"/>
+            <field name="groups" eval="[(4, ref('im_livechat_group_manager'))]"/>
+            <field name="domain_force">[('channel_type', '=', 'livechat')]</field>
+            <field name="perm_read" eval="True"/>
+            <field name="perm_create" eval="False"/>
+            <field name="perm_write" eval="False"/>
+            <field name="perm_unlink" eval="False"/>
+        </record>
 
     <data noupdate="1">
         <record id="base.default_user" model="res.users">
diff --git a/addons/mail/security/mail_security.xml b/addons/mail/security/mail_security.xml
index f4493dad93a..3ffe43e35eb 100644
--- a/addons/mail/security/mail_security.xml
+++ b/addons/mail/security/mail_security.xml
@@ -5,6 +5,7 @@
         <record id="mail_channel_rule" model="ir.rule">
             <field name="name">Mail.channel: access only public and joined groups</field>
             <field name="model_id" ref="model_mail_channel"/>
+            <field name="groups" eval="[(4, ref('base.group_user')), (4, ref('base.group_portal')), (4, ref('base.group_public'))]"/>
             <field name="domain_force">['|', '|',
 ('public', '=', 'public'),
 '&amp;', ('public', '=', 'private'), ('channel_partner_ids', 'in', [user.partner_id.id]),