From 5e051e9484d8e44da9742d623326c1e09b21aec3 Mon Sep 17 00:00:00 2001
From: Martin Trigaux <mat@openerp.com>
Date: Wed, 11 Sep 2013 16:25:49 +0200
Subject: [PATCH] [FIX] resource: better access rights

bzr revid: mat@openerp.com-20130911142549-cpzg8588ol31b8k1
---
 addons/hr_holidays/security/ir_rule.xml        | 7 +++++++
 addons/resource/security/ir.model.access.csv   | 2 +-
 addons/resource/security/resource_security.xml | 2 +-
 3 files changed, 9 insertions(+), 2 deletions(-)

diff --git a/addons/hr_holidays/security/ir_rule.xml b/addons/hr_holidays/security/ir_rule.xml
index e2c0ffb1a6f..1ff12f41244 100644
--- a/addons/hr_holidays/security/ir_rule.xml
+++ b/addons/hr_holidays/security/ir_rule.xml
@@ -15,5 +15,12 @@
         <field name="groups" eval="[(4,ref('base.group_hr_user'))]"/>
     </record>
     
+    <record id="resource_leaves_officer" model="ir.rule">
+        <field name="name">Leaves Officer</field>
+        <field name="model_id" ref="model_resource_calendar_leaves"/>
+        <field name="domain_force">[(1,'=',1)]</field>
+        <field name="groups" eval="[(4,ref('base.group_hr_user'))]"/>
+    </record>
+
   </data>
 </openerp>
diff --git a/addons/resource/security/ir.model.access.csv b/addons/resource/security/ir.model.access.csv
index 058626831c6..bf8504e2f46 100644
--- a/addons/resource/security/ir.model.access.csv
+++ b/addons/resource/security/ir.model.access.csv
@@ -3,5 +3,5 @@ access_resource_calendar,resource.calendar,model_resource_calendar,base.group_sy
 access_resource_calendar_attendance,resource.calendar.attendance,model_resource_calendar_attendance,base.group_system,1,1,1,1
 access_resource_resource,resource.resource,model_resource_resource,base.group_system,1,0,0,0
 access_resource_resource_all,resource.resource all,model_resource_resource,,1,0,0,0
-access_resource_calendar_leaves_all,resource.calendar.leaves,model_resource_calendar_leaves,,1,0,0,0
+access_resource_calendar_leaves_user,resource.calendar.leaves,model_resource_calendar_leaves,base.group_user,1,0,0,0
 access_resource_calendar_leaves,resource.calendar.leaves,model_resource_calendar_leaves,base.group_system,1,1,1,1
diff --git a/addons/resource/security/resource_security.xml b/addons/resource/security/resource_security.xml
index 77d9a11751a..43bfa6c3a4b 100644
--- a/addons/resource/security/resource_security.xml
+++ b/addons/resource/security/resource_security.xml
@@ -5,7 +5,7 @@
     <record model="ir.rule" id="resource_own_leaves">
         <field name="name">Resource: see own leaves</field>
         <field name="model_id" ref="model_resource_calendar_leaves"/>
-        <field name="global" eval="True"/>
+        <field name="groups" eval="[(4, ref('base.group_user'))]"/>
         <field name="domain_force">['|',
                                         ('resource_id', '=', False),
                                         ('resource_id.user_id', '=', user.id),