Sébastien Theys
90cb44e1e1
* = bus, calendar, crm_livechat, hr, hr_holidays, im_livechat, mail_bot,
mass_mailing, privacy_lookup, test_discuss_full, test_mail,
test_mail_full, website_crm_livechat, website_livechat, base
In preparation of splitting discuss and mail modules.
Part of task-3265211
closes odoo/odoo#118354
Related: odoo/upgrade#4553
Related: odoo/enterprise#39661
Signed-off-by: Sébastien Theys (seb) <seb@odoo.com>
163 lines
8.6 KiB
XML
163 lines
8.6 KiB
XML
<?xml version="1.0" encoding="utf-8"?>
|
|
<odoo noupdate="1">
|
|
|
|
<!-- RULES -->
|
|
<record id="discuss_channel_rule" model="ir.rule">
|
|
<field name="name">discuss.channel: access only public and joined groups</field>
|
|
<field name="model_id" ref="mail.model_discuss_channel"/>
|
|
<field name="groups" eval="[Command.link(ref('base.group_user')), Command.link(ref('base.group_portal')), Command.link(ref('base.group_public'))]"/>
|
|
<field name="domain_force">[
|
|
'|',
|
|
'&',
|
|
('channel_type', '!=', 'channel'),
|
|
('is_member', '=', True),
|
|
'&',
|
|
('channel_type', '=', 'channel'),
|
|
'|',
|
|
('group_public_id', '=', False),
|
|
('group_public_id', 'in', [g.id for g in user.groups_id])]
|
|
</field>
|
|
<field name="perm_create" eval="False"/>
|
|
</record>
|
|
|
|
<record id="discuss_channel_admin" model="ir.rule">
|
|
<field name="name">discuss.channel: admin full access</field>
|
|
<field name="model_id" ref="mail.model_discuss_channel"/>
|
|
<field name="groups" eval="[Command.link(ref('base.group_system'))]"/>
|
|
<field name="domain_force">[(1, '=', 1)]</field>
|
|
</record>
|
|
|
|
<record id="ir_rule_discuss_channel_member_group_user" model="ir.rule">
|
|
<field name="name">discuss.channel.member: write its own entries</field>
|
|
<field name="model_id" ref="mail.model_discuss_channel_member"/>
|
|
<field name="groups" eval="[(4, ref('base.group_user')), (4, ref('base.group_portal'))]"/>
|
|
<field name="domain_force">[
|
|
'|',
|
|
'&',
|
|
('channel_id.channel_type', '!=', 'channel'),
|
|
('channel_id.is_member', '=', True),
|
|
'&',
|
|
('channel_id.channel_type', '=', 'channel'),
|
|
'|',
|
|
('channel_id.group_public_id', '=', False),
|
|
('channel_id.group_public_id', 'in', [g.id for g in user.groups_id])]
|
|
</field>
|
|
<field name="perm_read" eval="False"/>
|
|
<field name="perm_write" eval="True"/>
|
|
<field name="perm_create" eval="False"/>
|
|
<field name="perm_unlink" eval="True"/>
|
|
</record>
|
|
|
|
<record id="ir_rule_discuss_channel_member_group_system" model="ir.rule">
|
|
<field name="name">discuss.channel.member: admin can manipulate all entries</field>
|
|
<field name="model_id" ref="mail.model_discuss_channel_member"/>
|
|
<field name="groups" eval="[Command.link(ref('base.group_system'))]"/>
|
|
<field name="domain_force">[(1, '=', 1)]</field>
|
|
</record>
|
|
|
|
<record id="ir_rule_mail_notifications_group_user" model="ir.rule">
|
|
<field name="name">mail.notifications: group_user: write its own entries</field>
|
|
<field name="model_id" ref="model_mail_notification"/>
|
|
<field name="groups" eval="[Command.link(ref('base.group_user')), Command.link(ref('base.group_portal'))]"/>
|
|
<field name="domain_force">[('res_partner_id', '=', user.partner_id.id)]</field>
|
|
<field name="perm_create" eval="False"/>
|
|
<field name="perm_unlink" eval="False"/>
|
|
<field name="perm_read" eval="False"/>
|
|
</record>
|
|
|
|
<record id="mail_message_subtype_rule_public" model="ir.rule">
|
|
<field name="name">mail.message.subtype: portal/public: read public subtypes</field>
|
|
<field name="model_id" ref="model_mail_message_subtype"/>
|
|
<field name="domain_force">[('internal', '=', False)]</field>
|
|
<field name="groups" eval="[Command.link(ref('base.group_portal')), Command.link(ref('base.group_public'))]"/>
|
|
</record>
|
|
|
|
<record id="mail_activity_rule_user" model="ir.rule">
|
|
<field name="name">mail.activity: user: write/unlink only (created or assigned)</field>
|
|
<field name="model_id" ref="model_mail_activity"/>
|
|
<field name="domain_force">['|', ('user_id', '=', user.id), ('create_uid', '=', user.id)]</field>
|
|
<field name="groups" eval="[Command.link(ref('base.group_user'))]"/>
|
|
<field name="perm_create" eval="False"/>
|
|
<field name="perm_read" eval="False"/>
|
|
<field name="perm_write" eval="True"/>
|
|
<field name="perm_unlink" eval="True"/>
|
|
</record>
|
|
|
|
<record id="mail_compose_message_rule" model="ir.rule">
|
|
<field name="name">Mail Compose Message Rule</field>
|
|
<field name="model_id" ref="model_mail_compose_message"/>
|
|
<field name="domain_force">[('create_uid', '=', user.id)]</field>
|
|
<field name="perm_create" eval="False"/>
|
|
<field name="perm_read" eval="True"/>
|
|
<field name="perm_write" eval="True"/>
|
|
<field name="perm_unlink" eval="False"/>
|
|
</record>
|
|
|
|
<record id="mail_template_employee_rule" model="ir.rule">
|
|
<field name="name">Employees can only change their own templates</field>
|
|
<field name="model_id" ref="model_mail_template"/>
|
|
<field name="domain_force">[('create_uid', '=', user.id)]</field>
|
|
<field name="groups" eval="[Command.link(ref('base.group_user'))]"/>
|
|
<field name="perm_create" eval="True"/>
|
|
<field name="perm_read" eval="False"/>
|
|
<field name="perm_write" eval="True"/>
|
|
<field name="perm_unlink" eval="True"/>
|
|
</record>
|
|
|
|
<record id="mail_template_editor_rule" model="ir.rule">
|
|
<field name="name">Mail Template Editors - Edit All Templates</field>
|
|
<field name="model_id" ref="model_mail_template"/>
|
|
<field name="domain_force">[(1, '=', 1)]</field>
|
|
<field name="groups" eval="[Command.link(ref('group_mail_template_editor')), Command.link(ref('base.group_system'))]"/>
|
|
<field name="perm_create" eval="True"/>
|
|
<field name="perm_read" eval="False"/>
|
|
<field name="perm_write" eval="True"/>
|
|
<field name="perm_unlink" eval="True"/>
|
|
</record>
|
|
|
|
<record id="res_users_settings_rule_admin" model="ir.rule">
|
|
<field name="name">Administrators can access all User Settings.</field>
|
|
<field name="model_id" ref="model_res_users_settings"/>
|
|
<field name="groups" eval="[Command.link(ref('base.group_system'))]"/>
|
|
<field name="domain_force">[(1, '=', 1)]</field>
|
|
<field name="perm_read" eval="True"/>
|
|
<field name="perm_write" eval="True"/>
|
|
<field name="perm_create" eval="True"/>
|
|
<field name="perm_unlink" eval="True"/>
|
|
</record>
|
|
|
|
<record id="res_users_settings_rule_user" model="ir.rule">
|
|
<field name="name">res.users.settings: access their own entries</field>
|
|
<field name="model_id" ref="model_res_users_settings"/>
|
|
<field name="groups" eval="[Command.link(ref('base.group_user'))]"/>
|
|
<field name="domain_force">[('user_id', '=', user.id)]</field>
|
|
<field name="perm_read" eval="True"/>
|
|
<field name="perm_write" eval="True"/>
|
|
<field name="perm_create" eval="True"/>
|
|
<field name="perm_unlink" eval="True"/>
|
|
</record>
|
|
|
|
<record id="res_users_settings_volumes_rule_user" model="ir.rule">
|
|
<field name="name">res.users.settings.volumes: access their own entries</field>
|
|
<field name="model_id" ref="model_res_users_settings_volumes"/>
|
|
<field name="groups" eval="[Command.link(ref('base.group_user'))]"/>
|
|
<field name="domain_force">[('user_setting_id.user_id', '=', user.id)]</field>
|
|
<field name="perm_read" eval="True"/>
|
|
<field name="perm_write" eval="True"/>
|
|
<field name="perm_create" eval="True"/>
|
|
<field name="perm_unlink" eval="True"/>
|
|
</record>
|
|
|
|
<record id="res_users_settings_volumes_rule_admin" model="ir.rule">
|
|
<field name="name">Administrators can access all User Settings volumes.</field>
|
|
<field name="model_id" ref="model_res_users_settings_volumes"/>
|
|
<field name="groups" eval="[Command.link(ref('base.group_system'))]"/>
|
|
<field name="domain_force">[(1, '=', 1)]</field>
|
|
<field name="perm_read" eval="True"/>
|
|
<field name="perm_write" eval="True"/>
|
|
<field name="perm_create" eval="True"/>
|
|
<field name="perm_unlink" eval="True"/>
|
|
</record>
|
|
|
|
</odoo>
|