Sunil Shrimali
d790b7e6a2
Right now, the 'CRM > Reporting' menu is accessible only to the sales managers. However, we should let users of all access right levels to see their reporting while making sure it does not give them access to data that does not match their rights. This commit thus changes group applied on 'CRM > Reporting' menu from 'sales_team.group_sale_manager' to 'sales_team.group_sale_salesman' so that from sales person to manager, everyone is able to the reporting based on their rights. For the below sub-menus, record rules already exist, preventing data breach: - Dashboard (crm_enterprise) - Leads (crm) - Pipelines (crm) - Activities (crm) However, for data under 'Partnership'(website_crm_partner_assign) and 'Lead Generation Views' sub-menus(crm_iap_lead_website), we introduced the needed access rights / record rules to ensure basic users can only see the data they have rights for. TaskId - 2357311 closes odoo/odoo#64202 Signed-off-by: Thibault Delavallee (tde) <tde@openerp.com>
40 lines
2.1 KiB
XML
40 lines
2.1 KiB
XML
<?xml version="1.0" encoding="utf-8"?>
|
|
<odoo noupdate="1">
|
|
|
|
<!-- CRM Lead portal -->
|
|
<record id="assigned_lead_portal_rule_1" model="ir.rule">
|
|
<field name="name">Portal Graded Partner: read and write assigned leads</field>
|
|
<field name="model_id" ref="crm.model_crm_lead"/>
|
|
<field name="groups" eval="[(4, ref('base.group_portal'))]"/>
|
|
<field name="domain_force">[('partner_assigned_id','child_of',user.commercial_partner_id.id)]</field>
|
|
<field name="perm_read" eval="True"/>
|
|
<field name="perm_write" eval="True"/>
|
|
<field name="perm_create" eval="False"/>
|
|
<field name="perm_unlink" eval="False"/>
|
|
</record>
|
|
|
|
<!-- Partner Grade : portal and public -->
|
|
<record id="res_partner_grade_rule_portal_public" model="ir.rule">
|
|
<field name="name">Portal/Public user: read only website published</field>
|
|
<field name="model_id" ref="website_crm_partner_assign.model_res_partner_grade"/>
|
|
<field name="groups" eval="[(4, ref('base.group_portal')), (4, ref('base.group_public'))]"/>
|
|
<field name="domain_force">[('website_published','=', True)]</field>
|
|
<field name="perm_read" eval="True"/>
|
|
</record>
|
|
|
|
<record id="ir_rule_crm_partner_report_assign_all" model="ir.rule">
|
|
<field name="name">CRM partner assign report: All Assignations</field>
|
|
<field name="model_id" ref="model_crm_partner_report_assign"/>
|
|
<field name="domain_force">[(1, '=', 1)]</field>
|
|
<field name="groups" eval="[(4, ref('sales_team.group_sale_salesman_all_leads'))]"/>
|
|
</record>
|
|
|
|
<record id="ir_rule_crm_partner_report_assign_salesman" model="ir.rule">
|
|
<field name="name">CRM partner assign report: Personal / Global Assignations</field>
|
|
<field name="model_id" ref="model_crm_partner_report_assign"/>
|
|
<field name="domain_force">['|', ('user_id', '=', user.id), ('user_id', '=', False)]</field>
|
|
<field name="groups" eval="[(4, ref('sales_team.group_sale_salesman'))]"/>
|
|
</record>
|
|
|
|
</odoo>
|