openerp/addons/base/security/base_security.xml

   1 <?xml version="1.0"?>
   2 <openerp>
   3     <data noupdate="1">
   4
   5         <!--
   6             Users Groups
   7             Note that the field 'category_id' is set later in
   8             base/module/module_data.xml
   9         -->
  10         <record model="res.groups" id="group_erp_manager">
  11             <field name="name">Access Rights</field>
  12         </record>
  13         <record model="res.groups" id="group_system">
  14             <field name="name">Settings</field>
  15             <field name="implied_ids" eval="[(4, ref('group_erp_manager'))]"/>
  16             <field name="users" eval="[(4, ref('base.user_root'))]"/>
  17         </record>
  18
  19         <record model="res.groups" id="group_user">
  20             <field name="name">Employee</field>
  21             <field name="users" eval="[(4, ref('base.user_root'))]"/>
  22         </record>
  23
  24         <record model="res.groups" id="group_multi_company">
  25             <field name="name">Multi Companies</field>
  26         </record>
  27
  28         <record model="res.groups" id="group_multi_currency">
  29             <field name="name">Multi Currencies</field>
  30         </record>
  31
  32         <record model="res.groups" id="group_no_one">
  33             <field name="name">Technical Features</field>
  34         </record>
  35
  36         <record id="group_sale_salesman" model="res.groups">
  37             <field name="name">User</field>
  38         </record>
  39         <record id="group_sale_manager" model="res.groups">
  40             <field name="name">Manager</field>
  41             <field name="implied_ids" eval="[(4, ref('group_sale_salesman'))]"/>
  42         </record>
  43
  44         <!-- Set accesses to menu -->
  45         <record model="ir.ui.menu" id="base.menu_administration">
  46             <field name="name">Settings</field>
  47             <field name="groups_id" eval="[(6,0, [ref('group_system'), ref('group_erp_manager')])]"/>
  48         </record>
  49
  50         <record model="ir.rule" id="res_partner_rule">
  51             <field name="name">res.partner company</field>
  52             <field name="model_id" ref="model_res_partner"/>
  53             <!--
  54                 Show partners from ancestors and descendants companies
  55                 (or company-less), this is usually a better default for
  56                 multicompany setups.
  57             -->
  58             <field name="domain_force">['|','|',('company_id.child_ids','child_of',[user.company_id.id]),('company_id','child_of',[user.company_id.id]),('company_id','=',False)]</field>
  59         </record>
  60
  61         <record model="ir.rule" id="res_partner_portal_public_rule">
  62             <field name="name">res_partner: portal/public: read access on my commercial partner</field>
  63             <field name="model_id" ref="base.model_res_partner"/>
  64             <field name="domain_force">[('id', 'child_of', user.commercial_partner_id.id)]</field>
  65             <field name="groups" eval="[(4, ref('base.group_portal')), (4, ref('base.group_public'))]"/>
  66             <field name="perm_create" eval="False"/>
  67             <field name="perm_unlink" eval="False"/>
  68             <field name="perm_write" eval="False"/>
  69         </record>
  70
  71         <record model="ir.rule" id="multi_company_default_rule">
  72             <field name="name">Multi_company_default company</field>
  73             <field name="model_id" ref="model_multi_company_default"/>
  74             <field name="domain_force">[('company_id','child_of',[user.company_id.id])]</field>
  75         </record>
  76
  77         <record model="ir.rule" id="ir_values_default_rule">
  78             <field name="name">Defaults: alter personal values only</field>
  79             <field name="model_id" ref="model_ir_values"/>
  80             <field name="domain_force">[('key','=','default'),('user_id','=',user.id)]</field>
  81             <field name="perm_read" eval="False"/>
  82         </record>
  83
  84         <!-- Used for dashboard customizations, users should only be able to edit their own dashboards -->
  85         <record model="ir.rule" id="ir_ui_view_custom_personal">
  86             <field name="name">ir.ui.view_custom rule</field>
  87             <field name="model_id" ref="model_ir_ui_view_custom"/>
  88             <field name="domain_force">[('user_id','=',user.id)]</field>
  89         </record>
  90
  91         <record id="res_partner_bank_rule" model="ir.rule">
  92             <field name="name">Partner bank company rule</field>
  93             <field name="model_id" ref="model_res_partner_bank"/>
  94             <field name="global" eval="True"/>
  95             <!--
  96                 Same as res_partner above.
  97             -->
  98             <field name="domain_force">['|','|',('company_id.child_ids','child_of',[user.company_id.id]),('company_id','child_of',[user.company_id.id]),('company_id','=',False)]</field>
  99         </record>
 100
 101         <record id="res_currency_rule" model="ir.rule">
 102             <field name="name">multi-company currency rule</field>
 103             <field name="model_id" ref="model_res_currency"/>
 104             <field name="domain_force">['|',('company_id','=',False),('company_id','child_of',[user.company_id.id])]</field>
 105         </record>
 106
 107     </data>
 108 </openerp>
 109