Improved Security

bzr revid: fp@tinyerp.com-20080903180400-df7l6wxg1zpirmmi

3 files changed, 8 insertions, 68 deletions

diff --git a/addons/board/__terp__.py b/addons/board/__terp__.py
index fe5af4c38fb..e2264429639 100644
--- a/addons/board/__terp__.py
+++ b/addons/board/__terp__.py
@@ -33,7 +33,9 @@
     "category":"Board/Base",
     "depends":["base"],
     "demo_xml":[],
-    "update_xml":["board_view.xml"],
+    "update_xml":[
+        "security/ir.model.access.csv",
+        "board_view.xml"],
     "description": "Base module for all dashboards.",
     "active":False,
     "installable":True,
diff --git a/addons/board/board_security.xml b/addons/board/board_security.xml
deleted file mode 100644
index e7af75ff548..00000000000
--- a/addons/board/board_security.xml
+++ /dev/null
@@ -1,67 +0,0 @@
-<?xml version="1.0" encoding="utf-8"?><terp><data noupdate="1">
-    <record model="res.groups" id="group_board">
-        <field name="name">Board User</field>
-    </record>
-
-    <record model="res.groups" id="group_board_manager">
-        <field name="name">Board Manager</field>
-    </record>
-
-<!--
- Object Access
--->
-    <record model="ir.model.access" id="access_board_board_group_board">
-        <field name="name">board_board group_board</field>
-        <field name="model_id" model="ir.model" ref="model_board_board"/>
-        <field name="group_id" ref="group_board"/>
-        <field name="perm_read" eval="1"/>
-        <field name="perm_write" eval="0"/>
-        <field name="perm_create" eval="0"/>
-        <field name="perm_unlink" eval="0"/>
-    </record>
-    <record model="ir.model.access" id="access_board_board_group_board_manager">
-        <field name="name">board_board group_board_manager</field>
-        <field name="model_id" model="ir.model" ref="model_board_board"/>
-        <field name="group_id" ref="group_board_manager"/>
-        <field name="perm_read" eval="1"/>
-        <field name="perm_write" eval="1"/>
-        <field name="perm_create" eval="1"/>
-        <field name="perm_unlink" eval="1"/>
-    </record>
-    <record model="ir.model.access" id="access_board_note_group_board">
-        <field name="name">board_note group_board</field>
-        <field name="model_id" model="ir.model" ref="model_board_note"/>
-        <field name="group_id" ref="group_board"/>
-        <field name="perm_read" eval="1"/>
-        <field name="perm_write" eval="0"/>
-        <field name="perm_create" eval="0"/>
-        <field name="perm_unlink" eval="0"/>
-    </record>
-    <record model="ir.model.access" id="access_board_note_group_board_manager">
-        <field name="name">board_note group_board_manager</field>
-        <field name="model_id" model="ir.model" ref="model_board_note"/>
-        <field name="group_id" ref="group_board_manager"/>
-        <field name="perm_read" eval="1"/>
-        <field name="perm_write" eval="1"/>
-        <field name="perm_create" eval="1"/>
-        <field name="perm_unlink" eval="1"/>
-    </record>
-    <record model="ir.model.access" id="access_board_note_type_group_board">
-        <field name="name">board_note_type group_board</field>
-        <field name="model_id" model="ir.model" ref="model_board_note_type"/>
-        <field name="group_id" ref="group_board"/>
-        <field name="perm_read" eval="1"/>
-        <field name="perm_write" eval="0"/>
-        <field name="perm_create" eval="0"/>
-        <field name="perm_unlink" eval="0"/>
-    </record>
-    <record model="ir.model.access" id="access_board_note_type_group_board_manager">
-        <field name="name">board_note_type group_board_manager</field>
-        <field name="model_id" model="ir.model" ref="model_board_note_type"/>
-        <field name="group_id" ref="group_board_manager"/>
-        <field name="perm_read" eval="1"/>
-        <field name="perm_write" eval="1"/>
-        <field name="perm_create" eval="1"/>
-        <field name="perm_unlink" eval="1"/>
-    </record>
-</data></terp>
\ No newline at end of file
diff --git a/addons/board/security/ir.model.access.csv b/addons/board/security/ir.model.access.csv
new file mode 100644
index 00000000000..44762892edf
--- /dev/null
+++ b/addons/board/security/ir.model.access.csv
@@ -0,0 +1,5 @@
+id,name,model_id:id,group_id:id,perm_read,perm_write,perm_create,perm_unlink

+access_board_board,board.board,model_board_board,base.group_user,1,0,0,0

+access_board_board_line,board.board.line,model_board_board_line,base.group_user,1,0,0,0

+access_board_note_type,board.note.type,model_board_note_type,base.group_user,1,0,0,0

+access_board_note,board.note,model_board_note,base.group_user,1,0,0,0