Files
odoo_source/addons/payment/security/payment_security.xml
T
Antoine Vandevenne (anv)andVictor Feyens 573ed74c12 [REF] payment, *: refactor online payments API
This commit replaces the old online payments API of the `payment`
module with the new one and adapts to it all the implementing modules.

See the merge commit for more details.

task-2085989
task-2119838
task-2165982
task-2289255

Co-authored-by: Victor Feyens <vfe@odoo.com>
2021-03-30 09:25:51 +02:00

59 lines
2.7 KiB
XML

<?xml version="1.0" encoding="utf-8"?>
<odoo noupdate="1">
<!-- Acquirers -->
<record id="payment_acquirer_company_rule" model="ir.rule">
<field name="name">Access acquirers in own companies only</field>
<field name="model_id" ref="payment.model_payment_acquirer"/>
<field name="domain_force">[('company_id', 'in', company_ids)]</field>
</record>
<!-- Transactions -->
<record id="payment_transaction_user_rule" model="ir.rule">
<field name="name">Access own transactions only</field>
<field name="model_id" ref="payment.model_payment_transaction"/>
<field name="domain_force">['|', ('partner_id', '=', False), ('partner_id', '=', user.partner_id.id)]</field>
<field name="groups" eval="[(4, ref('base.group_user')), (4, ref('base.group_portal')), (4, ref('base.group_public'))]"/>
</record>
<record id="payment_transaction_billing_rule" model="ir.rule">
<field name="name">Access every transaction</field>
<field name="model_id" ref="payment.model_payment_transaction"/>
<!-- Reset the domain defined by payment.transaction_user_rule -->
<field name="domain_force">[(1, '=', 1)]</field>
<field name="groups" eval="[(4, ref('account.group_account_invoice'))]"/>
</record>
<record id="transaction_company_rule" model="ir.rule">
<field name="name">Access transactions in own companies only</field>
<field name="model_id" ref="payment.model_payment_transaction"/>
<field name="domain_force">[('company_id', 'in', company_ids)]</field>
</record>
<!-- Tokens -->
<record id="payment_token_user_rule" model="ir.rule">
<field name="name">Access only tokens belonging to commercial partner</field>
<field name="model_id" ref="payment.model_payment_token"/>
<field name="domain_force">[('partner_id', 'child_of', user.partner_id.commercial_partner_id.id)]</field>
<field name="groups" eval="[(4, ref('base.group_user')), (4, ref('base.group_portal')), (4, ref('base.group_public'))]"/>
</record>
<record id="payment_token_billing_rule" model="ir.rule">
<field name="name">Access every token</field>
<field name="model_id" ref="payment.model_payment_token"/>
<!-- Reset the domain defined by payment.token_user_rule -->
<field name="domain_force">[(1, '=', 1)]</field>
<field name="groups" eval="[(4, ref('account.group_account_invoice'))]"/>
</record>
<record id="payment_token_company_rule" model="ir.rule">
<field name="name">Access tokens in own companies only</field>
<field name="model_id" ref="payment.model_payment_token"/>
<field name="domain_force">[('company_id', 'in', company_ids)]</field>
</record>
</odoo>