Jorge Pinna Puissant
23b0f38245
Before this commit, a user with attendance administrator rights can see the attendances of all users of all companies and not only the companies he is allowed. Now, the administrator will only see the attendances of the users of the companies he is allowed. opw-2263577 closes odoo/odoo#52355 X-original-commit: 0e8f86795db74fe21daa8776243415291371fdf6 Signed-off-by: Nicolas Lempereur (nle) <nle@odoo.com> Signed-off-by: Jorge Pinna Puissant (jpp) <jpp@odoo.com>
77 lines
3.8 KiB
XML
77 lines
3.8 KiB
XML
<?xml version="1.0" encoding="utf-8"?>
|
|
<odoo>
|
|
<record model="ir.module.category" id="base.module_category_human_resources_attendances">
|
|
<field name="description">Helps you manage the attendances.</field>
|
|
<field name="sequence">14</field>
|
|
</record>
|
|
|
|
<record id="group_hr_attendance_kiosk" model="res.groups">
|
|
<field name="name">Kiosk Attendance</field>
|
|
<field name="category_id" ref="base.module_category_human_resources_employees"/>
|
|
<field name="comment">The user will be able to open the kiosk mode and validate the employee PIN.</field>
|
|
<field name="implied_ids" eval="[(6, 0, [ref('base.group_user')])]"/>
|
|
</record>
|
|
|
|
<record id="hr.group_hr_user" model="res.groups">
|
|
<field name="implied_ids" eval="[(4, ref('hr_attendance.group_hr_attendance_kiosk'))]"/>
|
|
</record>
|
|
|
|
<record id="group_hr_attendance" model="res.groups">
|
|
<field name="name">Manual Attendance</field>
|
|
<field name="category_id" ref="base.module_category_human_resources_attendances"/>
|
|
<field name="comment">The user will gain access to the human resources attendance menu, enabling him to manage his own attendance.</field>
|
|
</record>
|
|
|
|
<record id="group_hr_attendance_user" model="res.groups">
|
|
<field name="name">Officer</field>
|
|
<field name="category_id" ref="base.module_category_human_resources_attendances"/>
|
|
<field name="implied_ids" eval="[(4, ref('hr.group_hr_user')), (4, ref('hr_attendance.group_hr_attendance'))]"/>
|
|
</record>
|
|
|
|
<record id="group_hr_attendance_manager" model="res.groups">
|
|
<field name="name">Administrator</field>
|
|
<field name="category_id" ref="base.module_category_human_resources_attendances"/>
|
|
<field name="implied_ids" eval="[(4, ref('hr_attendance.group_hr_attendance_user'))]"/>
|
|
<field name="users" eval="[(4, ref('base.user_root')), (4, ref('base.user_admin'))]"/>
|
|
</record>
|
|
|
|
<record id="base.default_user" model="res.users">
|
|
<field name="groups_id" eval="[(4,ref('hr_attendance.group_hr_attendance_manager'))]"/>
|
|
</record>
|
|
|
|
<record id="group_hr_attendance_use_pin" model="res.groups">
|
|
<field name="name">Enable PIN use</field>
|
|
<field name="category_id" ref="base.module_category_hidden"/>
|
|
<field name="comment">The user will have to enter his PIN to check in and out manually at the company screen.</field>
|
|
</record>
|
|
|
|
<data noupdate="1">
|
|
|
|
<record id="hr_attendance_rule_employee_company" model="ir.rule">
|
|
<field name="name">Employee multi company rule</field>
|
|
<field name="model_id" ref="model_hr_attendance"/>
|
|
<field name="global" eval="True"/>
|
|
<field name="domain_force">['|',('employee_id.company_id','=',False),('employee_id.company_id', 'in', company_ids)]</field>
|
|
</record>
|
|
|
|
<record id="hr_attendance_rule_attendance_manager" model="ir.rule">
|
|
<field name="name">attendance officer: full access</field>
|
|
<field name="model_id" ref="model_hr_attendance"/>
|
|
<field name="domain_force">[(1,'=',1)]</field>
|
|
<field name="groups" eval="[(4,ref('hr_attendance.group_hr_attendance_user'))]"/>
|
|
</record>
|
|
|
|
<record id="hr_attendance_rule_attendance_employee" model="ir.rule">
|
|
<field name="name">user: modify own attendance only</field>
|
|
<field name="model_id" ref="model_hr_attendance"/>
|
|
<field name="domain_force">[('employee_id.user_id','=',user.id)]</field>
|
|
<field name="perm_read" eval="0"/>
|
|
<field name="perm_write" eval="1"/>
|
|
<field name="perm_create" eval="1"/>
|
|
<field name="perm_unlink" eval="0"/>
|
|
<field name="groups" eval="[(4,ref('base.group_user'))]"/>
|
|
</record>
|
|
|
|
</data>
|
|
</odoo>
|