Martin Trigaux
604a47ead8
THese are rarely intended for all users but often intended only for employees. account: account.incoterms: only used within internal business models account.journal.group: same as account.journal, add sudo in computed field account_edi: need access to accounting objects base_address_extended: res.city: only employees should access address data board: only employees uses this (old) module crm: crm.stage: internal users business object hr_recruitment: employees can read im_livechat: apply same as for the steps l10n_ar: used on partner, not only invoices l10n_ec: accessed only through account.move l10n_latam: accessed on res.partner mail: publisher.warrenty.contract: no data, only static models mail.channel: group_user has already his own rule mail.group: group_user has already his own rule mail.message.subtype: group_user has already his own rule mail.message.all: remove, already has a portal and employee rule partner_autocomplete: no interaction with public project: project.tags: only needed for project sharing sale_management: sale.order.option: same as sale.order utm: employee already has write access web_editor: test models that have nothing to do here web_tour: only employees uses tours website_sale: product.ribbon: add sudo for access base: ir.default: only employees uses set (could probably be converted to group_system) ir.ui.view.custom: same as ir.ui.view, add sudo when needed report.*: portal users don't configure reports res.users.log: create in sudo, no access needed (adapt test to use another model) res.lang: still needed for public closes odoo/odoo#118701 Related: odoo/enterprise#41285 Signed-off-by: Martin Trigaux (mat) <mat@odoo.com>
62 lines
2.1 KiB
Python
62 lines
2.1 KiB
Python
# -*- coding: utf-8 -*-
|
|
# Part of Odoo. See LICENSE file for full copyright and licensing details.
|
|
|
|
from odoo import api, fields, models
|
|
|
|
|
|
class Board(models.AbstractModel):
|
|
_name = 'board.board'
|
|
_description = "Board"
|
|
_auto = False
|
|
|
|
# This is necessary for when the web client opens a dashboard. Technically
|
|
# speaking, the dashboard is a form view, and opening it makes the client
|
|
# initialize a dummy record by invoking onchange(). And the latter requires
|
|
# an 'id' field to work properly...
|
|
id = fields.Id()
|
|
|
|
@api.model_create_multi
|
|
def create(self, vals_list):
|
|
return self
|
|
|
|
@api.model
|
|
def get_view(self, view_id=None, view_type='form', **options):
|
|
"""
|
|
Overrides orm field_view_get.
|
|
@return: Dictionary of Fields, arch and toolbar.
|
|
"""
|
|
|
|
res = super().get_view(view_id, view_type, **options)
|
|
|
|
custom_view = self.env['ir.ui.view.custom'].sudo().search([('user_id', '=', self.env.uid), ('ref_id', '=', view_id)], limit=1)
|
|
if custom_view:
|
|
res.update({'custom_view_id': custom_view.id,
|
|
'arch': custom_view.arch})
|
|
res['arch'] = self._arch_preprocessing(res['arch'])
|
|
return res
|
|
|
|
@api.model
|
|
def get_views(self, views, options=None):
|
|
res = super().get_views(views, options)
|
|
for view in res['views'].values():
|
|
view['toolbar'] = {'print': [], 'action': [], 'relate': []}
|
|
return res
|
|
|
|
@api.model
|
|
def _arch_preprocessing(self, arch):
|
|
from lxml import etree
|
|
|
|
def remove_unauthorized_children(node):
|
|
for child in node.iterchildren():
|
|
if child.tag == 'action' and child.get('invisible'):
|
|
node.remove(child)
|
|
else:
|
|
remove_unauthorized_children(child)
|
|
return node
|
|
|
|
archnode = etree.fromstring(arch)
|
|
# add the js_class 'board' on the fly to force the webclient to
|
|
# instantiate a BoardView instead of FormView
|
|
archnode.set('js_class', 'board')
|
|
return etree.tostring(remove_unauthorized_children(archnode), pretty_print=True, encoding='unicode')
|