Sunil Shrimali
d790b7e6a2
Right now, the 'CRM > Reporting' menu is accessible only to the sales managers. However, we should let users of all access right levels to see their reporting while making sure it does not give them access to data that does not match their rights. This commit thus changes group applied on 'CRM > Reporting' menu from 'sales_team.group_sale_manager' to 'sales_team.group_sale_salesman' so that from sales person to manager, everyone is able to the reporting based on their rights. For the below sub-menus, record rules already exist, preventing data breach: - Dashboard (crm_enterprise) - Leads (crm) - Pipelines (crm) - Activities (crm) However, for data under 'Partnership'(website_crm_partner_assign) and 'Lead Generation Views' sub-menus(crm_iap_lead_website), we introduced the needed access rights / record rules to ensure basic users can only see the data they have rights for. TaskId - 2357311 closes odoo/odoo#64202 Signed-off-by: Thibault Delavallee (tde) <tde@openerp.com>
29 lines
1.6 KiB
XML
29 lines
1.6 KiB
XML
<?xml version="1.0" encoding="utf-8"?>
|
|
<odoo noupdate="1">
|
|
<record id="ir_rule_crm_reveal_rule_all" model="ir.rule">
|
|
<field name="name">CRM Reveal Rules: All Rules</field>
|
|
<field name="model_id" ref="model_crm_reveal_rule"/>
|
|
<field name="domain_force">[(1, '=', 1)]</field>
|
|
<field name="groups" eval="[(4, ref('sales_team.group_sale_salesman_all_leads'))]"/>
|
|
</record>
|
|
<record id="ir_rule_crm_reveal_rule_salesman" model="ir.rule">
|
|
<field name="name">CRM Reveal Rules: Personal / Global Rules</field>
|
|
<field name="model_id" ref="model_crm_reveal_rule"/>
|
|
<field name="domain_force">['|', ('user_id', '=', user.id), ('user_id', '=', False)]</field>
|
|
<field name="groups" eval="[(4, ref('sales_team.group_sale_salesman'))]"/>
|
|
</record>
|
|
|
|
<record id="ir_rule_crm_reveal_view_all" model="ir.rule">
|
|
<field name="name">CRM Reveal Views: All Views</field>
|
|
<field name="model_id" ref="model_crm_reveal_view"/>
|
|
<field name="domain_force">[(1, '=', 1)]</field>
|
|
<field name="groups" eval="[(4, ref('sales_team.group_sale_salesman_all_leads'))]"/>
|
|
</record>
|
|
<record id="ir_rule_crm_reveal_view_salesman" model="ir.rule">
|
|
<field name="name">CRM Reveal Views: Personal / Global Views</field>
|
|
<field name="model_id" ref="model_crm_reveal_view"/>
|
|
<field name="domain_force">['|', ('reveal_rule_id.user_id', '=', user.id), ('reveal_rule_id.user_id', '=', False)]</field>
|
|
<field name="groups" eval="[(4, ref('sales_team.group_sale_salesman'))]"/>
|
|
</record>
|
|
</odoo>
|