Files
odoo_source/addons/hr_expense/security/ir.model.access.csv
T
RomainLibert 5c24368e33 [IMP] hr_expense : improve access rights of manager/officer
Currently the distinction between expense officers and expense managers
doesn't make sense because they both have the same rights.

This commit aims at making a clear difference between an officer and a
manager.

After this commit the rights will look like this :

  * Expense Manager :
  	- See and approve any expense

  * Expense Officer :
  	- Can see and approve the expenses of employees in his department
	  or employees for which he is the manager (field parent_id on
	  hr_employee)

	- Cannot approve his own expenses

  * Simple user :
  	- Can only see his own expenses

	- Can only send his expenses to a manager (either the manager of
	  his department, his direct manager [parent_id field] or an
	  expense manager)

Related to task #51520
Closes #23033
2018-05-25 11:52:17 +02:00

2.1 KiB

1idnamemodel_id:idgroup_id:idperm_readperm_writeperm_createperm_unlink
2access_hr_expense_userhr.expense.usermodel_hr_expensehr_expense.group_hr_expense_user1111
3access_hr_expense_employeehr.expense.employeemodel_hr_expensebase.group_user1111
4access_hr_expense_sheet_managerhr.expense.sheet.managermodel_hr_expense_sheethr_expense.group_hr_expense_manager1111
5access_hr_expense_sheet_userhr.expense.sheet.usermodel_hr_expense_sheethr_expense.group_hr_expense_user1111
6access_hr_expense_sheet_employeehr.expense.sheet.employeemodel_hr_expense_sheetbase.group_user1111
7access_product_product_hr_expense_userproduct.product.hr.expense.userproduct.model_product_producthr_expense.group_hr_expense_user1111
8access_product_template_hr_expense_userproduct.template.hr.expense.userproduct.model_product_templatehr_expense.group_hr_expense_user1111
9access_uom_uom_hr_expense_useruom.uom.hr.expense.useruom.model_uom_uomhr_expense.group_hr_expense_user1111
10access_account_journal_useraccount.journal.useraccount.model_account_journalhr_expense.group_hr_expense_user1111
11access_account_journal_employeeaccount.journal.employeeaccount.model_account_journalbase.group_user1000
12access_account_invoice_useraccount.invoice.useraccount.model_account_invoicehr_expense.group_hr_expense_user1111
13access_account_invoice_line_useraccount.invoice.line.useraccount.model_account_invoice_linehr_expense.group_hr_expense_user1111
14access_account_invoice_tax_useraccount.invoice.tax.useraccount.model_account_invoice_taxhr_expense.group_hr_expense_user1000
15access_account_move_useraccount.move.useraccount.model_account_movehr_expense.group_hr_expense_user1000
16access_account_move_line_useraccount.move.line.useraccount.model_account_move_linehr_expense.group_hr_expense_user1000
17access_account_analytic_line_useraccount.analytic.line.useraccount.model_account_analytic_linehr_expense.group_hr_expense_user1111
18access_mail_activity_type_expense_usermail.activity.type.expense.usermail.model_mail_activity_typehr_expense.group_hr_expense_manager1111