Olivier Dony
6922668a77
New features: can share to groups if user has "Share / User (Extended)" group. Warning message if user does not have email and cannot share by email. Names of sharing groups are now hidden in ORM access denied messages. Better error reporting. UI: more user-friendly labels, titles. More visibible button in web client. Bugfixes: better handling of sharing objects with _inherits, can combine ir.rules if already exist for same (object,group). Button is now hidden in web client if user is not in "Share/User" group. bzr revid: odo@openerp.com-20110408133608-vmdrzfeo0dz28wer
46 lines
2.0 KiB
Python
46 lines
2.0 KiB
Python
# -*- coding: utf-8 -*-
|
|
##############################################################################
|
|
#
|
|
# OpenERP, Open Source Management Solution
|
|
# Copyright (C) 2004-2011 OpenERP S.A. (<http://www.openerp.com>).
|
|
#
|
|
# This program is free software: you can redistribute it and/or modify
|
|
# it under the terms of the GNU Affero General Public License as
|
|
# published by the Free Software Foundation, either version 3 of the
|
|
# License, or (at your option) any later version.
|
|
#
|
|
# This program is distributed in the hope that it will be useful,
|
|
# but WITHOUT ANY WARRANTY; without even the implied warranty of
|
|
# MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the
|
|
# GNU Affero General Public License for more details.
|
|
#
|
|
# You should have received a copy of the GNU Affero General Public License
|
|
# along with this program. If not, see <http://www.gnu.org/licenses/>.
|
|
#
|
|
##############################################################################
|
|
from osv import fields, osv
|
|
|
|
class ir_model_access(osv.osv):
|
|
_inherit = 'ir.model.access'
|
|
|
|
# overload group_names_with_access() to avoid returning sharing groups
|
|
# by filtering out groups with share=true.
|
|
def group_names_with_access(self, cr, model_name, access_mode):
|
|
"""Returns the names of visible groups which have been granted ``access_mode`` on
|
|
the model ``model_name``.
|
|
:rtype: list
|
|
"""
|
|
assert access_mode in ['read','write','create','unlink'], 'Invalid access mode: %s' % access_mode
|
|
cr.execute('''SELECT
|
|
g.name
|
|
FROM
|
|
ir_model_access a
|
|
JOIN ir_model m ON (a.model_id=m.id)
|
|
JOIN res_groups g ON (a.group_id=g.id)
|
|
WHERE
|
|
m.model=%s AND
|
|
(g.share IS NULL or g.share IS false) AND
|
|
a.perm_''' + access_mode, (model_name,))
|
|
return [x[0] for x in cr.fetchall()]
|
|
|
|
ir_model_access() |