odoo
/
odoo
2
0
Fork 0
Code Pull Requests Releases Activity

[IMP]resource: avoid better permissions on calendar_leaves 

bzr revid: mat@openerp.com-20130514134227-xnvyzjikwph8bp5k
This commit is contained in:
Martin Trigaux 2013-05-14 15:42:27 +02:00
parent c697009dea
commit 143b485baf
4 changed files with 18 additions and 1 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

1
addons/project/security/ir.model.access.csv
View File

@ -19,7 +19,6 @@ access_project_task_history,project.task.history project,project.model_project_t
access_project_task_history_cumulative,project.task.history project,project.model_project_task_history_cumulative,project.group_project_manager,1,0,0,0
access_project_task_history_cumulative,project.task.history project,project.model_project_task_history_cumulative,project.group_project_user,1,0,0,0
access_resource_calendar,project.resource_calendar manager,resource.model_resource_calendar,project.group_project_manager,1,0,0,0
access_resource_calendar_leaves,project.resource_calendar_leaves manager,resource.model_resource_calendar_leaves,project.group_project_manager,1,0,0,0
access_project_category,project.project_category,model_project_category,,1,0,0,0
access_project_category_manager,project.project_category,model_project_category,project.group_project_manager,1,1,1,1
access_mail_alias,mail.alias,mail.model_mail_alias,project.group_project_manager,1,1,1,1

1 id name model_id:id group_id:id perm_read perm_write perm_create perm_unlink
19 access_project_task_history_cumulative project.task.history project project.model_project_task_history_cumulative project.group_project_manager 1 0 0 0
20 access_project_task_history_cumulative project.task.history project project.model_project_task_history_cumulative project.group_project_user 1 0 0 0
21 access_resource_calendar project.resource_calendar manager resource.model_resource_calendar project.group_project_manager 1 0 0 0
access_resource_calendar_leaves project.resource_calendar_leaves manager resource.model_resource_calendar_leaves project.group_project_manager 1 0 0 0
22 access_project_category project.project_category model_project_category 1 0 0 0
23 access_project_category_manager project.project_category model_project_category project.group_project_manager 1 1 1 1
24 access_mail_alias mail.alias mail.model_mail_alias project.group_project_manager 1 1 1 1

1
addons/resource/__openerp__.py
View File

@ -38,6 +38,7 @@ associated to every resource. It also manages the leaves of every resource.
'depends': ['process'],
'data': [
'security/ir.model.access.csv',
'security/resource_security.xml',
'resource_view.xml',
],
'demo': ['resource_demo.xml'],

1
addons/resource/security/ir.model.access.csv
View File

@ -3,4 +3,5 @@ access_resource_calendar,resource.calendar,model_resource_calendar,base.group_sy
access_resource_calendar_attendance,resource.calendar.attendance,model_resource_calendar_attendance,base.group_system,1,1,1,1
access_resource_resource,resource.resource,model_resource_resource,base.group_system,1,0,0,0
access_resource_resource_all,resource.resource all,model_resource_resource,,1,0,0,0
access_resource_calendar_leaves_all,resource.calendar.leaves,model_resource_calendar_leaves,,1,0,0,0
access_resource_calendar_leaves,resource.calendar.leaves,model_resource_calendar_leaves,base.group_system,1,1,1,1

1 id name model_id:id group_id:id perm_read perm_write perm_create perm_unlink
3 access_resource_calendar_attendance resource.calendar.attendance model_resource_calendar_attendance base.group_system 1 1 1 1
4 access_resource_resource resource.resource model_resource_resource base.group_system 1 0 0 0
5 access_resource_resource_all resource.resource all model_resource_resource 1 0 0 0
6 access_resource_calendar_leaves_all resource.calendar.leaves model_resource_calendar_leaves 1 0 0 0
7 access_resource_calendar_leaves resource.calendar.leaves model_resource_calendar_leaves base.group_system 1 1 1 1

16
addons/resource/security/resource_security.xml Normal file
View File

@ -0,0 +1,16 @@
<?xml version="1.0" encoding="utf-8"?>
<openerp>
<data noupdate="1">
<record model="ir.rule" id="resource_own_leaves">
<field name="name">Resource: see own leaves</field>
<field name="model_id" ref="model_resource_calendar_leaves"/>
<field name="global" eval="True"/>
<field name="domain_force">['|',
('resource_id', '=', False),
('resource_id.user_id', '=', user.id),
]</field>
</record>
</data>
</openerp>