Improved Security

bzr revid: fp@tinyerp.com-20080903232631-q51hbwr2kznkr4gy

diff --git a/addons/account/security/ir.model.access.csv b/addons/account/security/ir.model.access.csv
index b688c00..2a55031 100644 (file)
--- a/addons/account/security/ir.model.access.csv
+++ b/addons/account/security/ir.model.access.csv
@@ -1,24 +1,24 @@
 id,name,model_id:id,group_id:id,perm_read,perm_write,perm_create,perm_unlink
-access_account_payment_term,account.payment.term,model_account_payment_term,base.group_account_user,1,0,0,0
-access_account_payment_term_line,account.payment.term.line,model_account_payment_term_line,base.group_account_user,1,0,0,0
-access_account_account_type,account.account.type,model_account_account_type,base.group_account_user,1,0,0,0
-access_account_tax,account.tax,model_account_tax,base.group_account_user,1,0,0,0
-access_account_account,account.account,model_account_account,base.group_account_user,1,0,0,0
-access_account_journal_view,account.journal.view,model_account_journal_view,base.group_account_user,1,0,0,0
-access_account_journal_column,account.journal.column,model_account_journal_column,base.group_account_user,1,0,0,0
-access_account_journal,account.journal,model_account_journal,base.group_account_user,1,0,0,0
-access_account_period,account.period,model_account_period,base.group_account_user,1,0,0,0
-access_account_journal_period,account.journal.period,model_account_journal_period,base.group_account_user,1,1,1,1
-access_account_move,account.move,model_account_move,base.group_account_user,1,1,1,1
-access_account_move_reconcile,account.move.reconcile,model_account_move_reconcile,base.group_account_user,1,1,1,1
-access_account_tax_code,account.tax.code,model_account_tax_code,base.group_account_user,1,0,0,0
-access_account_tax,account.tax,model_account_tax,base.group_account_user,1,0,0,0
+access_account_payment_term,account.payment.term,model_account_payment_term,account.group_account_user,1,0,0,0
+access_account_payment_term_line,account.payment.term.line,model_account_payment_term_line,account.group_account_user,1,0,0,0
+access_account_account_type,account.account.type,model_account_account_type,account.group_account_user,1,0,0,0
+access_account_tax,account.tax,model_account_tax,account.group_account_user,1,0,0,0
+access_account_account,account.account,model_account_account,account.group_account_user,1,0,0,0
+access_account_journal_view,account.journal.view,model_account_journal_view,account.group_account_user,1,0,0,0
+access_account_journal_column,account.journal.column,model_account_journal_column,account.group_account_user,1,0,0,0
+access_account_journal,account.journal,model_account_journal,account.group_account_user,1,0,0,0
+access_account_period,account.period,model_account_period,account.group_account_user,1,0,0,0
+access_account_journal_period,account.journal.period,model_account_journal_period,account.group_account_user,1,1,1,1
+access_account_move,account.move,model_account_move,account.group_account_user,1,1,1,1
+access_account_move_reconcile,account.move.reconcile,model_account_move_reconcile,account.group_account_user,1,1,1,1
+access_account_tax_code,account.tax.code,model_account_tax_code,account.group_account_user,1,0,0,0
+access_account_tax,account.tax,model_account_tax,account.group_account_user,1,0,0,0
 access_account_budget_post,account.budget.post,model_account_budget_post,base.group_account_manager,1,1,1,1
 access_account_budget_post_dotation,account.budget.post.dotation,model_account_budget_post_dotation,base.group_account_manager,1,1,1,1
-access_account_model,account.model,model_account_model,base.group_account_user,1,1,1,1
-access_account_model_line,account.model.line,model_account_model_line,base.group_account_user,1,1,1,1
-access_account_subscription,account.subscription,model_account_subscription,base.group_account_user,1,1,1,1
-access_account_subscription_line,account.subscription.line,model_account_subscription_line,base.group_account_user,1,1,1,1
+access_account_model,account.model,model_account_model,account.group_account_user,1,1,1,1
+access_account_model_line,account.model.line,model_account_model_line,account.group_account_user,1,1,1,1
+access_account_subscription,account.subscription,model_account_subscription,account.group_account_user,1,1,1,1
+access_account_subscription_line,account.subscription.line,model_account_subscription_line,account.group_account_user,1,1,1,1
 access_account_config_fiscalyear,account.config.fiscalyear,model_account_config_fiscalyear,base.group_account_manager,1,1,1,1
 access_account_config_journal_bank_account,account.config.journal.bank.account,model_account_config_journal_bank_account,base.group_account_manager,1,1,1,1
 access_account_config_journal_bank_account_line,account.config.journal.bank.account.line,model_account_config_journal_bank_account_line,base.group_account_manager,1,1,1,1
@@ -30,27 +30,25 @@ access_account_tax_template,account.tax.template,model_account_tax_template,base
 access_wizard_multi_charts_accounts,wizard.multi.charts.accounts,model_wizard_multi_charts_accounts,base.group_account_manager,1,1,1,1
 access_account_bank_accounts_wizard,account.bank.accounts.wizard,model_account_bank_accounts_wizard,base.group_account_manager,1,1,1,1
 access_wizard_account_chart_duplicate,wizard.account.chart.duplicate,model_wizard_account_chart_duplicate,base.group_account_manager,1,1,1,1
-access_account_move_line,account.move.line,model_account_move_line,base.group_account_user,1,1,1,1
-access_account_bank_statement,account.bank.statement,model_account_bank_statement,base.group_account_user,1,1,1,1
-access_account_bank_statement_reconcile,account.bank.statement.reconcile,model_account_bank_statement_reconcile,base.group_account_user,1,1,1,1
-access_account_bank_statement_reconcile_line,account.bank.statement.reconcile.line,model_account_bank_statement_reconcile_line,base.group_account_user,1,1,1,1
-access_account_bank_statement_line,account.bank.statement.line,model_account_bank_statement_line,base.group_account_user,1,1,1,1
-access_account_analytic_line,account.analytic.line,model_account_analytic_line,base.group_account_user,1,1,1,1
+access_account_move_line,account.move.line,model_account_move_line,account.group_account_user,1,1,1,1
+access_account_bank_statement,account.bank.statement,model_account_bank_statement,account.group_account_user,1,1,1,1
+access_account_bank_statement_reconcile,account.bank.statement.reconcile,model_account_bank_statement_reconcile,account.group_account_user,1,1,1,1
+access_account_bank_statement_reconcile_line,account.bank.statement.reconcile.line,model_account_bank_statement_reconcile_line,account.group_account_user,1,1,1,1
+access_account_bank_statement_line,account.bank.statement.line,model_account_bank_statement_line,account.group_account_user,1,1,1,1
+access_account_analytic_line,account.analytic.line,model_account_analytic_line,account.group_account_user,1,1,1,1
 access_report_hr_timesheet_invoice_journal,report.hr.timesheet.invoice.journal,model_report_hr_timesheet_invoice_journal,base.group_account_manager,1,0,0,0
-access_account_invoice,account.invoice,model_account_invoice,base.group_account_user,1,0,0,0
-access_account_invoice_line,account.invoice.line,model_account_invoice_line,base.group_account_user,1,0,0,0
-access_account_invoice_tax,account.invoice.tax,model_account_invoice_tax,base.group_account_user,1,0,0,0
-access_account_analytic_account,account.analytic.account,model_account_analytic_account,base.group_account_user,1,0,0,0
-access_account_analytic_journal,account.analytic.journal,model_account_analytic_journal,base.group_account_user,1,0,0,0
-access_account_analytic_budget_post,account.analytic.budget.post,model_account_analytic_budget_post,base.group_account_manager,1,1,1,1
-access_account_analytic_budget_post_dotation,account.analytic.budget.post.dotation,model_account_analytic_budget_post_dotation,base.group_account_manager,1,1,1,1
-access_account_invoice_uinvoice,account.invoice,model_account_invoice,base.group_account_user,1,1,1,1
-access_account_invoice_line_uinvoice,account.invoice.line,model_account_invoice_line,base.group_account_user,1,1,1,1
-access_account_invoice_tax_uinvoice,account.invoice.tax,model_account_invoice_tax,base.group_account_user,1,1,1,1
-access_account_analytic_line_uinvoice,account.analytic.line,model_account_analytic_line,base.group_account_user,1,1,1,1
-access_account_move_uinvoice,account.move,model_account_move,base.group_account_user,1,1,1,1
-access_account_move_reconcile_uinvoice,account.move.reconcile,model_account_move_reconcile,base.group_account_user,1,1,1,1
-access_account_journal_period_uinvoice,account.journal.period,model_account_journal_period,base.group_account_user,1,1,1,1
+access_account_invoice,account.invoice,model_account_invoice,account.group_account_user,1,0,0,0
+access_account_invoice_line,account.invoice.line,model_account_invoice_line,account.group_account_user,1,0,0,0
+access_account_invoice_tax,account.invoice.tax,model_account_invoice_tax,account.group_account_user,1,0,0,0
+access_account_analytic_account,account.analytic.account,model_account_analytic_account,account.group_account_user,1,0,0,0
+access_account_analytic_journal,account.analytic.journal,model_account_analytic_journal,account.group_account_user,1,0,0,0
+access_account_invoice_uinvoice,account.invoice,model_account_invoice,account.group_account_user,1,1,1,1
+access_account_invoice_line_uinvoice,account.invoice.line,model_account_invoice_line,account.group_account_user,1,1,1,1
+access_account_invoice_tax_uinvoice,account.invoice.tax,model_account_invoice_tax,account.group_account_user,1,1,1,1
+access_account_analytic_line_uinvoice,account.analytic.line,model_account_analytic_line,account.group_account_user,1,1,1,1
+access_account_move_uinvoice,account.move,model_account_move,account.group_account_user,1,1,1,1
+access_account_move_reconcile_uinvoice,account.move.reconcile,model_account_move_reconcile,account.group_account_user,1,1,1,1
+access_account_journal_period_uinvoice,account.journal.period,model_account_journal_period,account.group_account_user,1,1,1,1
 access_account_payment_term_manager,account.payment.term,model_account_payment_term,base.group_account_manager,1,1,1,1
 access_account_payment_term_line_manager,account.payment.term.line,model_account_payment_term_line,base.group_account_manager,1,1,1,1
 access_account_account_type_manager,account.account.type,model_account_account_type,base.group_account_manager,1,1,1,1
@@ -67,3 +65,6 @@ access_account_invoice_line_manager,account.invoice.line,model_account_invoice_l
 access_account_invoice_tax_manager,account.invoice.tax,model_account_invoice_tax,base.group_account_manager,1,1,1,1
 access_account_analytic_account_manager,account.analytic.account,model_account_analytic_account,base.group_account_manager,1,1,1,1
 access_account_analytic_journal_manager,account.analytic.journal,model_account_analytic_journal,base.group_account_manager,1,1,1,1
+access_account_fiscalyear,account.fiscalyear,model_account_fiscalyear,base.group_account_manager,1,1,1,1
+access_account_fiscalyear_user,account.fiscalyear.user,model_account_fiscalyear,base.group_account_user,1,0,0,0
+access_account_fiscalyear_invoice,account.fiscalyear.invoice,model_account_fiscalyear,base.group_account_invoice,1,0,0,0

diff --git a/addons/association_vertical/aso_data.xml b/addons/association_vertical/aso_data.xml
index 6d93541..d5e13f5 100644 (file)
--- a/addons/association_vertical/aso_data.xml
+++ b/addons/association_vertical/aso_data.xml
@@ -1,29 +1,26 @@
 <?xml version="1.0" ?>
 <terp>
        <data>
-               <record id="noone" model="res.groups">
-                       <field name="name">No One Association</field>
-               </record>
                <record id="hr.menu_hr_root" model="ir.ui.menu">
-                       <field eval="[(6,0,[ref('noone')])]" name="groups_id"/>
+                       <field eval="[(6,0,[ref('base.noone')])]" name="groups_id"/>
                </record>
                <record id="crm.menu_crm" model="ir.ui.menu">
-                       <field eval="[(6,0,[ref('noone')])]" name="groups_id"/>
+                       <field eval="[(6,0,[ref('base.noone')])]" name="groups_id"/>
                </record>
                <record id="product.menu_product_pricelist_main" model="ir.ui.menu">
-                       <field eval="[(6,0,[ref('noone')])]" name="groups_id"/>
+                       <field eval="[(6,0,[ref('base.noone')])]" name="groups_id"/>
                </record>
                <record id="product.menu_product_price_type_action" model="ir.ui.menu">
-                       <field eval="[(6,0,[ref('noone')])]" name="groups_id"/>
+                       <field eval="[(6,0,[ref('base.noone')])]" name="groups_id"/>
                </record>
                <record id="product.menu_product_pricelist_type_action" model="ir.ui.menu">
-                       <field eval="[(6,0,[ref('noone')])]" name="groups_id"/>
+                       <field eval="[(6,0,[ref('base.noone')])]" name="groups_id"/>
                </record>
                <record id="product.menu_product_variant_action" model="ir.ui.menu">
-                       <field eval="[(6,0,[ref('noone')])]" name="groups_id"/>
+                       <field eval="[(6,0,[ref('base.noone')])]" name="groups_id"/>
                </record>
                <record id="product.menu_product_template_action" model="ir.ui.menu">
-                       <field eval="[(6,0,[ref('noone')])]" name="groups_id"/>
+                       <field eval="[(6,0,[ref('base.noone')])]" name="groups_id"/>
                </record>
 
        </data>

diff --git a/addons/base_setup/base_setup.py b/addons/base_setup/base_setup.py
deleted file mode 100644 (file)
index 5d71640..0000000
--- a/addons/base_setup/base_setup.py
+++ /dev/null
@@ -1,41 +0,0 @@
-# -*- encoding: utf-8 -*-
-##############################################################################
-#
-# Copyright (c) 2004-2008 TINY SPRL. (http://tiny.be) All Rights Reserved.
-#
-# $Id$
-#
-# WARNING: This program as such is intended to be used by professional
-# programmers who take the whole responsability of assessing all potential
-# consequences resulting from its eventual inadequacies and bugs
-# End users who are looking for a ready-to-use solution with commercial
-# garantees and support are strongly adviced to contract a Free Software
-# Service Company
-#
-# This program is Free Software; you can redistribute it and/or
-# modify it under the terms of the GNU General Public License
-# as published by the Free Software Foundation; either version 2
-# of the License, or (at your option) any later version.
-#
-# This program is distributed in the hope that it will be useful,
-# but WITHOUT ANY WARRANTY; without even the implied warranty of
-# MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.  See the
-# GNU General Public License for more details.
-#
-# You should have received a copy of the GNU General Public License
-# along with this program; if not, write to the Free Software
-# Foundation, Inc., 59 Temple Place - Suite 330, Boston, MA  02111-1307, USA.
-#
-##############################################################################
-
-from osv import fields, osv
-
-class base_setup(osv.osv):
-    _name="base_setup.base_setup"
-    _columns={
-        'name': fields.char("Name", size=128),
-    }
-base_setup()
-
-# vim:expandtab:smartindent:tabstop=4:softtabstop=4:shiftwidth=4:
-

diff --git a/addons/base_setup/security/ir.model.access.csv b/addons/base_setup/security/ir.model.access.csv
index 2ad5d32..97dd8b9 100644 (file)
--- a/addons/base_setup/security/ir.model.access.csv
+++ b/addons/base_setup/security/ir.model.access.csv
@@ -1,2 +1 @@
 id,name,model_id:id,group_id:id,perm_read,perm_write,perm_create,perm_unlink
-access_base_setup_base_setup,base_setup.base_setup,model_base_setup_base_setup,base.group_system,1,1,1,1

diff --git a/addons/crm/security/crm_security.xml b/addons/crm/security/crm_security.xml
index c62cb92..1cd685a 100644 (file)
--- a/addons/crm/security/crm_security.xml
+++ b/addons/crm/security/crm_security.xml
@@ -6,8 +6,8 @@
         <field name="name">CRM / Manager</field>
     </record>
 
-    <record id="group_crm_admin" model="res.groups">
-        <field name="name">CRM / Administrator</field>
+    <record id="group_crm_user" model="res.groups">
+        <field name="name">CRM / User</field>
     </record>
 
 </data>

diff --git a/addons/delivery/__terp__.py b/addons/delivery/__terp__.py
index d5b5ee5..b194f84 100644 (file)
--- a/addons/delivery/__terp__.py
+++ b/addons/delivery/__terp__.py
@@ -36,7 +36,7 @@
     "init_xml" : ["delivery_data.xml"],
     "demo_xml" : ["delivery_demo.xml"],
     "update_xml" : [
-        "security/ir.model.access.csv"
+        "security/ir.model.access.csv",
         "delivery_view.xml",
         "delivery_wizard.xml",
         "partner_view.xml",

diff --git a/addons/event/__terp__.py b/addons/event/__terp__.py
index 2a17508..edccafc 100644 (file)
--- a/addons/event/__terp__.py
+++ b/addons/event/__terp__.py
@@ -24,7 +24,7 @@
     "demo_xml" : ["event_demo.xml"],
     "init_xml" : ["event_data.xml"],
     "update_xml" : [
-        "security/ir.model.access.csv"
+        "security/ir.model.access.csv",
         "event_wizard.xml","event_view.xml","event_sequence.xml"
     ],
     "active" : False,

diff --git a/addons/hr/__terp__.py b/addons/hr/__terp__.py
index cb8f183..e30166a 100644 (file)
--- a/addons/hr/__terp__.py
+++ b/addons/hr/__terp__.py
@@ -47,8 +47,8 @@
         "hr_department_demo.xml",
     ],
     "update_xml" : [
-        "security/ir.model.access.csv",
         "security/hr_security.xml",
+        "security/ir.model.access.csv",
         "hr_view.xml", 
         "hr_report.xml", 
         "hr_wizard.xml",

diff --git a/addons/membership/__terp__.py b/addons/membership/__terp__.py
index 16d2f30..2d5ded0 100644 (file)
--- a/addons/membership/__terp__.py
+++ b/addons/membership/__terp__.py
@@ -15,7 +15,6 @@
         "membership_data.xml",
         ],
     "update_xml" : [
-        "security/ir.model.access.csv"
         "security/ir.model.access.csv",
         "membership_view.xml","membership_wizard.xml"
         ],

diff --git a/addons/mrp/security/ir.model.access.csv b/addons/mrp/security/ir.model.access.csv
index 6e17070..7785ce8 100644 (file)
--- a/addons/mrp/security/ir.model.access.csv
+++ b/addons/mrp/security/ir.model.access.csv
@@ -1,21 +1,21 @@
 id,name,model_id:id,group_id:id,perm_read,perm_write,perm_create,perm_unlink
-access_mrp_workcenter,mrp.workcenter,model_mrp_workcenter,mrp.group_production_user,1,0,0,0
-access_mrp_property_group,mrp.property.group,model_mrp_property_group,mrp.group_production_user,1,0,0,0
-access_mrp_property,mrp.property,model_mrp_property,mrp.group_production_user,1,0,0,0
-access_mrp_routing,mrp.routing,model_mrp_routing,mrp.group_production_user,1,0,0,0
-access_mrp_routing_workcenter,mrp.routing.workcenter,model_mrp_routing_workcenter,mrp.group_production_user,1,0,0,0
-access_mrp_bom,mrp.bom,model_mrp_bom,mrp.group_production_user,1,0,0,0
-access_mrp_bom_revision,mrp.bom.revision,model_mrp_bom_revision,mrp.group_production_user,1,0,0,0
-access_mrp_production,mrp.production,model_mrp_production,mrp.group_production_user,1,1,1,1
-access_mrp_production_workcenter_line,mrp.production.workcenter.line,model_mrp_production_workcenter_line,mrp.group_production_user,1,1,1,1
-access_mrp_production_product_line,mrp.production.product.line,model_mrp_production_product_line,mrp.group_production_user,1,1,1,1
-access_mrp_procurement,mrp.procurement,model_mrp_procurement,mrp.group_production_user,1,1,1,1
-access_stock_warehouse_orderpoint,stock.warehouse.orderpoint,model_stock_warehouse_orderpoint,mrp.group_production_user,1,0,0,0
-access_stock_warehouse_orderpoint_manager,stock.warehouse.orderpoint.manager,model_stock_warehouse_orderpoint,mrp.group_production_user,1,1,1,1
-access_mrp_workcenter_manager,mrp.workcenter.manager,model_mrp_workcenter,mrp.group_production_user,1,1,1,1
-access_mrp_property_group_manager,mrp.property.group.manager,model_mrp_property_group,mrp.group_production_user,1,1,1,1
-access_mrp_property_manager,mrp.property.manager,model_mrp_property,mrp.group_production_user,1,1,1,1
-access_mrp_routing_manager,mrp.routing.manager,model_mrp_routing,mrp.group_production_user,1,1,1,1
-access_mrp_routing_workcenter_manager,mrp.routing.workcenter.manager,model_mrp_routing_workcenter,mrp.group_production_user,1,1,1,1
-access_mrp_bom_manager,mrp.bom.manager,model_mrp_bom,mrp.group_production_user,1,1,1,1
-access_mrp_bom_revision_manager,mrp.bom.revision.manager,model_mrp_bom_revision,mrp.group_production_user,1,1,1,1
+access_mrp_workcenter,mrp.workcenter,model_mrp_workcenter,mrp.group_mrp_user,1,0,0,0
+access_mrp_property_group,mrp.property.group,model_mrp_property_group,mrp.group_mrp_user,1,0,0,0
+access_mrp_property,mrp.property,model_mrp_property,mrp.group_mrp_user,1,0,0,0
+access_mrp_routing,mrp.routing,model_mrp_routing,mrp.group_mrp_user,1,0,0,0
+access_mrp_routing_workcenter,mrp.routing.workcenter,model_mrp_routing_workcenter,mrp.group_mrp_user,1,0,0,0
+access_mrp_bom,mrp.bom,model_mrp_bom,mrp.group_mrp_user,1,0,0,0
+access_mrp_bom_revision,mrp.bom.revision,model_mrp_bom_revision,mrp.group_mrp_user,1,0,0,0
+access_mrp_production,mrp.production,model_mrp_production,mrp.group_mrp_user,1,1,1,1
+access_mrp_production_workcenter_line,mrp.production.workcenter.line,model_mrp_production_workcenter_line,mrp.group_mrp_user,1,1,1,1
+access_mrp_production_product_line,mrp.production.product.line,model_mrp_production_product_line,mrp.group_mrp_user,1,1,1,1
+access_mrp_procurement,mrp.procurement,model_mrp_procurement,mrp.group_mrp_user,1,1,1,1
+access_stock_warehouse_orderpoint,stock.warehouse.orderpoint,model_stock_warehouse_orderpoint,mrp.group_mrp_user,1,0,0,0
+access_stock_warehouse_orderpoint_manager,stock.warehouse.orderpoint.manager,model_stock_warehouse_orderpoint,mrp.group_mrp_user,1,1,1,1
+access_mrp_workcenter_manager,mrp.workcenter.manager,model_mrp_workcenter,mrp.group_mrp_user,1,1,1,1
+access_mrp_property_group_manager,mrp.property.group.manager,model_mrp_property_group,mrp.group_mrp_user,1,1,1,1
+access_mrp_property_manager,mrp.property.manager,model_mrp_property,mrp.group_mrp_user,1,1,1,1
+access_mrp_routing_manager,mrp.routing.manager,model_mrp_routing,mrp.group_mrp_user,1,1,1,1
+access_mrp_routing_workcenter_manager,mrp.routing.workcenter.manager,model_mrp_routing_workcenter,mrp.group_mrp_user,1,1,1,1
+access_mrp_bom_manager,mrp.bom.manager,model_mrp_bom,mrp.group_mrp_user,1,1,1,1
+access_mrp_bom_revision_manager,mrp.bom.revision.manager,model_mrp_bom_revision,mrp.group_mrp_user,1,1,1,1

diff --git a/addons/mrp/security/mrp_security.xml b/addons/mrp/security/mrp_security.xml
index 32c1697..5d20f9c 100644 (file)
--- a/addons/mrp/security/mrp_security.xml
+++ b/addons/mrp/security/mrp_security.xml
@@ -2,10 +2,10 @@
 <terp>
 <data noupdate="1">
 
-    <record id="group_production_manager" model="res.groups">
+    <record id="group_mrp_manager" model="res.groups">
         <field name="name">Manufacturing / Manager</field>
     </record>
-    <record id="group_production_user" model="res.groups">
+    <record id="group_mrp_user" model="res.groups">
         <field name="name">Manufacturing / Worker</field>
     </record>
 

diff --git a/addons/product/security/ir.model.access.csv b/addons/product/security/ir.model.access.csv
index b374c13..cf628e5 100644 (file)
--- a/addons/product/security/ir.model.access.csv
+++ b/addons/product/security/ir.model.access.csv
@@ -1,5 +1,5 @@
 id,name,model_id:id,group_id:id,perm_read,perm_write,perm_create,perm_unlink
-access_product_uom_categ,product.uom.categ,model_product_uom_categ,base.group_product_manager,1,1,1,1
+access_product_uom_categ,product.uom.categ,model_product_uom_categ,product.group_product_manager,1,1,1,1
 access_product_uom,product.uom,model_product_uom,base.group_user,1,1,1,1
 access_product_ul,product.ul,model_product_ul,base.group_user,1,1,1,1
 access_product_category,product.category,model_product_category,base.group_user,1,1,1,1
@@ -13,7 +13,7 @@ access_product_pricelist_type,product.pricelist.type,model_product_pricelist_typ
 access_product_pricelist,product.pricelist,model_product_pricelist,base.group_user,1,1,1,1
 access_product_pricelist_version,product.pricelist.version,model_product_pricelist_version,base.group_user,1,1,1,1
 access_product_pricelist_item,product.pricelist.item,model_product_pricelist_item,base.group_user,1,1,1,1
-access_product_uom_categ_user,product.uom.categ.user,model_product_uom_categ,base.group_product_manager,1,0,0,0
+access_product_uom_categ_user,product.uom.categ.user,model_product_uom_categ,product.group_product_manager,1,0,0,0
 access_product_uom_user,product.uom.user,model_product_uom,base.group_user,1,0,0,0
 access_product_ul_user,product.ul.user,model_product_ul,base.group_user,1,0,0,0
 access_product_category_user,product.category.user,model_product_category,base.group_user,1,0,0,0

diff --git a/addons/profile_association/security/ir.model.access.csv b/addons/profile_association/security/ir.model.access.csv
index 07c7312..97dd8b9 100644 (file)
--- a/addons/profile_association/security/ir.model.access.csv
+++ b/addons/profile_association/security/ir.model.access.csv
@@ -1,2 +1 @@
 id,name,model_id:id,group_id:id,perm_read,perm_write,perm_create,perm_unlink
-access_config_install_extra_modules,config.install_extra_modules,model_config_install_extra_modules,base.group_system,1,1,1,1

diff --git a/addons/purchase/security/ir.model.access.csv b/addons/purchase/security/ir.model.access.csv
index b90a077..15b888f 100644 (file)
Binary files a/addons/purchase/security/ir.model.access.csv and b/addons/purchase/security/ir.model.access.csv differ

diff --git a/addons/report_timesheet/security/ir.model.access.csv b/addons/report_timesheet/security/ir.model.access.csv
index 2381611..b025991 100644 (file)
--- a/addons/report_timesheet/security/ir.model.access.csv
+++ b/addons/report_timesheet/security/ir.model.access.csv
@@ -1,5 +1,5 @@
 id,name,model_id:id,group_id:id,perm_read,perm_write,perm_create,perm_unlink
-access_report_timesheet_user,report_timesheet.user,model_report_timesheet_user,base.group_hr_user,1,0,0,0
-access_report_timesheet_account,report_timesheet.account,model_report_timesheet_account,base.group_hr_user,1,0,0,0
-access_report_timesheet_account_date,report_timesheet.account.date,model_report_timesheet_account_date,base.group_hr_user,1,0,0,0
-access_report_timesheet_invoice,report_timesheet.invoice,model_report_timesheet_invoice,base.group_hr_user,1,0,0,0
+access_report_timesheet_user,report_timesheet.user,model_report_timesheet_user,base.group_user,1,0,0,0
+access_report_timesheet_account,report_timesheet.account,model_report_timesheet_account,base.group_user,1,0,0,0
+access_report_timesheet_account_date,report_timesheet.account.date,model_report_timesheet_account_date,base.group_user,1,0,0,0
+access_report_timesheet_invoice,report_timesheet.invoice,model_report_timesheet_invoice,base.group_user,1,0,0,0

diff --git a/addons/sale/__terp__.py b/addons/sale/__terp__.py
index e34192f..d5bc58a 100644 (file)
--- a/addons/sale/__terp__.py
+++ b/addons/sale/__terp__.py
@@ -52,7 +52,7 @@
         - delivery costs
     """,
     "update_xml" : [
-        "security/purchase_security.xml",
+        "security/sale_security.xml",
         "security/ir.model.access.csv",
         "sale_workflow.xml",
         "sale_sequence.xml",

diff --git a/addons/sale/security/ir.model.access.csv b/addons/sale/security/ir.model.access.csv
index 21d0c72..c1448a8 100644 (file)
--- a/addons/sale/security/ir.model.access.csv
+++ b/addons/sale/security/ir.model.access.csv
@@ -1,5 +1,5 @@
 id,name,model_id:id,group_id:id,perm_read,perm_write,perm_create,perm_unlink
-access_sale_shop,sale.shop,model_sale_shop,base.group_sale_user,1,0,0,0
-access_sale_order,sale.order,model_sale_order,base.group_sale_user,1,1,1,1
-access_sale_order_line,sale.order.line,model_sale_order_line,base.group_sale_user,1,1,1,1
+access_sale_shop,sale.shop,model_sale_shop,sale.group_sale_user,1,0,0,0
+access_sale_order,sale.order,model_sale_order,sale.group_sale_user,1,1,1,1
+access_sale_order_line,sale.order.line,model_sale_order_line,sale.group_sale_user,1,1,1,1
 access_sale_shop_admin,sale.shop,model_sale_shop,base.group_system,1,1,1,1

diff --git a/addons/stock/__terp__.py b/addons/stock/__terp__.py
index 88e6d22..adf8f82 100644 (file)
--- a/addons/stock/__terp__.py
+++ b/addons/stock/__terp__.py
@@ -36,8 +36,8 @@
     "init_xml" : [],
     "demo_xml" : ["stock_demo.xml"],
     "update_xml" : [
+        "security/stock_security.xml",
         "security/ir.model.access.csv",
-        "security/report_stock.xml",
         "stock_workflow.xml", 
         "stock_data.xml", 
         "stock_incoterms.xml",

diff --git a/addons/stock/security/ir.model.access.csv b/addons/stock/security/ir.model.access.csv
index 0de884a..5d47e01 100644 (file)
--- a/addons/stock/security/ir.model.access.csv
+++ b/addons/stock/security/ir.model.access.csv
@@ -1,12 +1,11 @@
 id,name,model_id:id,group_id:id,perm_read,perm_write,perm_create,perm_unlink
-access_stock_incoterms_system,stock.incoterms.system,model_stock_incoterms,stock.group_system,1,1,1,1
-access_stock_warehouse_system,stock.warehouse.system,model_stock_warehouse,stock.group_system,1,1,1,1
-access_stock_location_system,stock.location.system,model_stock_location,stock.group_system,1,1,1,1
-access_stock_incoterms,stock.incoterms,model_stock_picking_move_wizard,stock.group_system,1,0,0,0
-access_stock_warehouse,stock.warehouse,model_stock_picking_move_wizard,stock.group_system,1,0,0,0
-access_stock_location,stock.location,model_stock_picking_move_wizard,stock.group_system,1,0,0,0
+access_stock_incoterms_system,stock.incoterms.system,model_stock_incoterms,base.group_system,1,1,1,1
+access_stock_warehouse_system,stock.warehouse.system,model_stock_warehouse,base.group_system,1,1,1,1
+access_stock_location_system,stock.location.system,model_stock_location,base.group_system,1,1,1,1
+access_stock_incoterms,stock.incoterms,model_stock_picking_move_wizard,base.group_system,1,0,0,0
+access_stock_warehouse,stock.warehouse,model_stock_picking_move_wizard,base.group_system,1,0,0,0
+access_stock_location,stock.location,model_stock_picking_move_wizard,base.group_system,1,0,0,0
 access_stock_picking_move_wizard,stock.picking.move.wizard,model_stock_picking_move_wizard,stock.group_stock_user,1,0,0,0
-access_stock_lot,stock.lot,model_stock_lot,stock.group_stock_user,1,1,1,0
 access_stock_tracking,stock.tracking,model_stock_tracking,stock.group_stock_user,1,1,1,0
 access_stock_picking,stock.picking,model_stock_picking,stock.group_stock_user,1,1,1,1
 access_stock_production_lot,stock.production.lot,model_stock_production_lot,stock.group_stock_user,1,1,1,0