openerp/addons/base/security/base_security.xml

   1 <?xml version="1.0"?>
   2 <openerp>
   3     <data>
   4
   5     <!--
   6         Users Groups
   7         [Note] Field 'category_id' is set later in base/module/module_data.xml
   8     -->
   9     <record model="res.groups" id="group_erp_manager">
  10         <field name="name">Access Rights</field>
  11     </record>
  12     <record model="res.groups" id="group_system">
  13         <field name="name">Configuration</field>
  14         <field name="implied_ids" eval="[(4, ref('group_erp_manager'))]"/>
  15         <field name="users" eval="[(4, ref('base.user_root'))]"/>
  16     </record>
  17
  18     <record model="res.groups" id="group_user">
  19         <field name="name">Employee</field>
  20         <field name="users" eval="[(4, ref('base.user_root'))]"/>
  21     </record>
  22
  23     <record model="res.groups" id="group_multi_company">
  24         <field name="name">Multi Companies</field>
  25     </record>
  26
  27     <record model="res.groups" id="group_multi_currency">
  28         <field name="name">Multi Currencies</field>
  29     </record>
  30
  31     <record model="res.groups" id="group_no_one">
  32         <field name="name">Technical Features</field>
  33     </record>
  34
  35     <record id="group_sale_salesman" model="res.groups">
  36         <field name="name">User</field>
  37     </record>
  38     <record id="group_sale_manager" model="res.groups">
  39         <field name="name">Manager</field>
  40         <field name="implied_ids" eval="[(4, ref('group_sale_salesman'))]"/>
  41     </record>
  42
  43     <!-- Set accesses to menu -->
  44     <record model="ir.ui.menu" id="base.menu_administration">
  45         <field name="groups_id" eval="[(6,0, [ref('group_system'), ref('group_erp_manager')])]"/>
  46     </record>
  47
  48     </data>
  49
  50     <data noupdate="1">
  51
  52         <record model="ir.rule" id="res_widget_user_rule">
  53             <field name="name">res.widget.user rule</field>
  54             <field name="model_id" ref="model_res_widget_user"/>
  55             <field name="domain_force">['|', ('user_id','=',user.id),('user_id','=',False)]</field>
  56         </record>
  57
  58         <record model="ir.rule" id="res_partner_rule">
  59             <field name="name">res.partner company</field>
  60             <field name="model_id" ref="model_res_partner"/>
  61             <!-- Show partners from ancestors and descendants companies (or company-less), this is usually a better
  62                  default for multicompany setups. -->
  63             <field name="domain_force">['|','|',('company_id.child_ids','child_of',[user.company_id.id]),('company_id','child_of',[user.company_id.id]),('company_id','=',False)]</field>
  64         </record>
  65
  66         <record model="ir.rule" id="multi_company_default_rule">
  67             <field name="name">Multi_company_default company</field>
  68             <field name="model_id" ref="model_multi_company_default"/>
  69             <field name="domain_force">[('company_id','child_of',[user.company_id.id])]</field>
  70         </record>
  71
  72         <record model="ir.rule" id="ir_values_default_rule">
  73             <field name="name">Defaults: alter personal values only</field>
  74             <field name="model_id" ref="model_ir_values"/>
  75             <field name="domain_force">[('key','=','default'),('user_id','=',user.id)]</field>
  76             <field name="perm_read" eval="False"/>
  77         </record>
  78
  79         <!-- Used for dashboard customizations, users should only be able to edit their own dashboards -->
  80         <record model="ir.rule" id="ir_ui_view_custom_personal">
  81             <field name="name">ir.ui.view_custom rule</field>
  82             <field name="model_id" ref="model_ir_ui_view_custom"/>
  83             <field name="domain_force">[('user_id','=',user.id)]</field>
  84         </record>
  85
  86     </data>
  87 </openerp>
  88