Add access security on sale module

bzr revid: mga@tinyerp.com-1a23f560d5dc090f62de46ce6abb513633f4677c

diff --git a/addons/sale/sale_security.xml b/addons/sale/sale_security.xml
new file mode 100644 (file)
index 0000000..274e454
--- /dev/null
+++ b/addons/sale/sale_security.xml
@@ -0,0 +1,92 @@
+<?xml version="1.0"?>
+<terp>
+       <data>
+       
+               <record model="res.groups" id="group_sale_manager">
+                       <field name="name">Sale Manager</field>
+               </record>
+               <record model="res.groups" id="group_sale_salesman">
+                       <field name="name">Salesman</field>
+               </record>
+               
+               <!-- Sales order security -->
+               <record model="ir.model.access" id="access_sale_order">
+                       <field name="name">Sale Order</field>
+                       <field name="model_id" model="ir.model" search="[('model', '=', 'sale.order')]"/>
+                       <field name="perm_read" eval="True"/>
+                       <field name="perm_write" eval="False"/>
+                       <field name="perm_create" eval="False"/>
+                       <field name="perm_unlink" eval="False"/>
+               </record>
+               
+               <record model="ir.model.access" id="access_sale_order_sale_manager">
+                       <field name="name">Sale Order</field>
+                       <field name="model_id" model="ir.model" search="[('model', '=', 'sale.order')]"/>
+                       <field name="group_id" ref="group_sale_manager"/>
+                       <field name="perm_read" eval="True"/>
+                       <field name="perm_write" eval="True"/>
+                       <field name="perm_create" eval="True"/>
+                       <field name="perm_unlink" eval="True"/>
+               </record>
+               
+               <record model="ir.model.access" id="access_sale_order_salesman">
+                       <field name="name">Sale Order</field>
+                       <field name="model_id" model="ir.model" search="[('model', '=', 'sale.order')]"/>
+                       <field name="group_id" ref="group_sale_salesman"/>
+                       <field name="perm_read" eval="True"/>
+                       <field name="perm_write" eval="True"/>
+                       <field name="perm_create" eval="True"/>
+                       <field name="perm_unlink" eval="True"/>
+               </record>
+               
+               <record model="ir.model.access" id="access_sale_order_admin">
+                       <field name="name">Sale Order</field>
+                       <field name="model_id" model="ir.model" search="[('model', '=', 'sale.order')]"/>
+                       <field name="group_id" ref="base.group_admin"/>
+                       <field name="perm_read" eval="True"/>
+                       <field name="perm_write" eval="True"/>
+                       <field name="perm_create" eval="True"/>
+                       <field name="perm_unlink" eval="True"/>
+               </record>
+               
+               <!-- Sales order line security -->
+               <record model="ir.model.access" id="access_sale_order_line">
+                       <field name="name">Sale Order Line</field>
+                       <field name="model_id" model="ir.model" search="[('model', '=', 'sale.order.line')]"/>
+                       <field name="perm_read" eval="True"/>
+                       <field name="perm_write" eval="False"/>
+                       <field name="perm_create" eval="False"/>
+                       <field name="perm_unlink" eval="False"/>
+               </record>
+               
+               <record model="ir.model.access" id="access_sale_order_line_manager">
+                       <field name="name">Sale Order Line</field>
+                       <field name="model_id" model="ir.model" search="[('model', '=', 'sale.order.line')]"/>
+                       <field name="group_id" ref="group_sale_manager"/>
+                       <field name="perm_read" eval="True"/>
+                       <field name="perm_write" eval="True"/>
+                       <field name="perm_create" eval="True"/>
+                       <field name="perm_unlink" eval="True"/>
+               </record>
+               
+               <record model="ir.model.access" id="access_sale_order_line_salesman">
+                       <field name="name">Sale Order Line</field>
+                       <field name="model_id" model="ir.model" search="[('model', '=', 'sale.order.line')]"/>
+                       <field name="group_id" ref="group_sale_salesman"/>
+                       <field name="perm_read" eval="True"/>
+                       <field name="perm_write" eval="True"/>
+                       <field name="perm_create" eval="True"/>
+                       <field name="perm_unlink" eval="True"/>
+               </record>
+               
+               <record model="ir.model.access" id="access_sale_order_line_admin">
+                       <field name="name">Sale Order Line</field>
+                       <field name="model_id" model="ir.model" search="[('model', '=', 'sale.order.line')]"/>
+                       <field name="group_id" ref="base.group_admin"/>
+                       <field name="perm_read" eval="True"/>
+                       <field name="perm_write" eval="True"/>
+                       <field name="perm_create" eval="True"/>
+                       <field name="perm_unlink" eval="True"/>
+               </record>
+       </data>
+</terp>