addons/payment/security/payment_security.xml

   1 <?xml version="1.0" encoding="utf-8"?>
   2 <openerp>
   3     <data noupdate="1">
   4
   5         <record id="payment_transaction_user_rule" model="ir.rule">
   6             <field name="name">Access own payment transaction only</field>
   7             <field name="model_id" ref="payment.model_payment_transaction"/>
   8             <field name="domain_force">[
   9                 '|',
  10                     ('partner_id','=',False),
  11                     ('partner_id','=',user.partner_id.id)
  12                 ]</field>
  13             <field name="groups" eval="[(4, ref('base.group_user')), (4, ref('base.group_portal')), (4, ref('base.group_public'))]"/>
  14         </record>
  15
  16         <record id="payment_transaction_salesman_rule" model="ir.rule">
  17             <field name="name">Access every payment transaction</field>
  18             <field name="model_id" ref="payment.model_payment_transaction"/>
  19             <field name="domain_force">[(1, '=', 1)]</field>
  20             <field name="groups" eval="[(4, ref('base.group_sale_salesman'))]"/>
  21         </record>
  22
  23     </data>
  24 </openerp>