openerp/addons/base/security/base_security.xml

   1 <?xml version="1.0"?>
   2 <openerp>
   3     <data noupdate="0">
   4
   5 <!--
   6  Users Groups
   7     [Note] Field 'category_id' is set later in base/module/module_data.xml
   8 -->
   9     <record model="res.groups" id="group_erp_manager">
  10         <field name="name">Access Rights</field>
  11     </record>
  12     <record model="res.groups" id="group_system">
  13         <field name="name">Configuration</field>
  14         <field name="implied_ids" eval="[(4, ref('group_erp_manager'))]"/>
  15     </record>
  16
  17     <record model="res.groups" id="group_user">
  18         <field name="name">Employee</field>
  19     </record>
  20
  21     <record model="res.groups" context="{'noadmin':True}" id="group_multi_company">
  22         <field name="name">Multi Companies</field>
  23     </record>
  24
  25     <record model="res.groups" context="{'noadmin':True}" id="group_extended">
  26         <field name="name">Extended View</field>
  27     </record>
  28
  29     <record model="res.groups" id="group_no_one" context="{'noadmin':True}">
  30         <field name="name">Technical Features</field>
  31     </record>
  32
  33     <record id="group_sale_salesman" context="{'noadmin':True}" model="res.groups">
  34         <field name="name">User</field>
  35     </record>
  36     <record id="group_sale_manager" context="{'noadmin':True}" model="res.groups">
  37         <field name="name">Manager</field>
  38         <field name="implied_ids" eval="[(4, ref('group_sale_salesman'))]"/>
  39     </record>
  40
  41     <!-- Set accesses to menu -->
  42     <record model="ir.ui.menu" id="base.menu_administration">
  43         <field name="groups_id" eval="[(6,0, [ref('group_system'), ref('group_erp_manager')])]"/>
  44     </record>
  45
  46     </data>
  47
  48     <data noupdate="1">
  49
  50         <record model="ir.rule" id="res_widget_user_rule">
  51             <field name="name">res.widget.user rule</field>
  52             <field name="model_id" ref="model_res_widget_user"/>
  53             <field name="domain_force">['|', ('user_id','=',user.id),('user_id','=',False)]</field>
  54         </record>
  55
  56         <record model="ir.rule" id="res_partner_rule">
  57             <field name="name">res.partner company</field>
  58             <field name="model_id" ref="model_res_partner"/>
  59             <!-- Show partners from ancestors and descendants companies (or company-less), this is usually a better
  60                  default for multicompany setups. -->
  61             <field name="domain_force">['|','|',('company_id.child_ids','child_of',[user.company_id.id]),('company_id','child_of',[user.company_id.id]),('company_id','=',False)]</field>
  62         </record>
  63
  64         <record model="ir.rule" id="multi_company_default_rule">
  65             <field name="name">Multi_company_default company</field>
  66             <field name="model_id" ref="model_multi_company_default"/>
  67             <field name="domain_force">[('company_id','child_of',[user.company_id.id])]</field>
  68         </record>
  69
  70         <record model="ir.rule" id="ir_values_default_rule">
  71             <field name="name">Defaults: alter personal values only</field>
  72             <field name="model_id" ref="model_ir_values"/>
  73             <field name="domain_force">[('key','=','default'),('user_id','=',user.id)]</field>
  74             <field name="perm_read" eval="False"/>
  75         </record>
  76
  77         <!-- Used for dashboard customizations, users should only be able to edit their own dashboards -->
  78         <record model="ir.rule" id="ir_ui_view_custom_personal">
  79             <field name="name">ir.ui.view_custom rule</field>
  80             <field name="model_id" ref="model_ir_ui_view_custom"/>
  81             <field name="domain_force">[('user_id','=',user.id)]</field>
  82         </record>
  83
  84     </data>
  85 </openerp>
  86