summaryrefslogtreecommitdiff
path: root/addons/document/security/document_security.xml
diff options
context:
space:
mode:
authorMartin Trigaux <mat@openerp.com>2013-07-22 11:31:06 +0200
committerMartin Trigaux <mat@openerp.com>2013-07-22 11:31:06 +0200
commitca4cc04c68c848a2de51bc2a5e7ccbfe1760d62a (patch)
tree65c58e5a0d4d6f4983b663a8f4e2b397d9a92734 /addons/document/security/document_security.xml
parent08bf51a6088a5da60e5110ae3e0989280274ef6d (diff)
parentc877df2ec4e67f82b918435ed134f911ce8ab617 (diff)
[ADD] document: record rules to match the one defined in access_permissions.rst
bzr revid: mat@openerp.com-20130722093106-dglcb64ilp3zldae
Diffstat (limited to 'addons/document/security/document_security.xml')
-rw-r--r--addons/document/security/document_security.xml51
1 files changed, 51 insertions, 0 deletions
diff --git a/addons/document/security/document_security.xml b/addons/document/security/document_security.xml
index a7ec76eafac..b67ffb4548d 100644
--- a/addons/document/security/document_security.xml
+++ b/addons/document/security/document_security.xml
@@ -37,5 +37,56 @@
<field eval="0" name="perm_read"/>
<field eval="1" name="perm_create"/>
</record>
+
+ <record id="ir_rule_readpublicdocuments0" model="ir.rule">
+ <field name="model_id" ref="base.model_ir_attachment"/>
+ <field name="domain_force">[
+ '|',
+ '|',
+ '|',
+ ('parent_id','=',False),
+ ('parent_id.group_ids','in',[g.id for g in user.groups_id]),
+ ('parent_id.user_id', '=', user.id),
+ '&amp;',
+ ('parent_id.user_id', '=', False),
+ ('parent_id.group_ids','=',False),
+ '|',
+ '|',
+ ('company_id','=',False),
+ ('company_id','child_of',[user.company_id.id]),
+ ('company_id.child_ids','child_of',[user.company_id.id])]
+ </field>
+ <field name="name">Read public documents</field>
+ <field eval="0" name="global"/>
+ <field eval="[(6,0,[ref('base.group_user')])]" name="groups"/>
+ <field eval="0" name="perm_unlink"/>
+ <field eval="0" name="perm_write"/>
+ <field eval="1" name="perm_read"/>
+ <field eval="0" name="perm_create"/>
+ </record>
+
+ <record id="ir_rule_documentmodifyowndocuments0" model="ir.rule">
+ <field name="model_id" ref="base.model_ir_attachment"/>
+ <field name="domain_force">[
+ '|',
+ ('parent_id.user_id', '=', user.id),
+ '&amp;',
+ ('parent_id.group_ids','in',[g.id for g in user.groups_id]),
+ ('parent_id.user_id','=',False),
+ '|',
+ '|',
+ ('company_id','=',False),
+ ('company_id','child_of',[user.company_id.id]),
+ ('company_id.child_ids','child_of',[user.company_id.id])]
+ </field>
+ <field name="name">Document modify own document</field>
+ <field eval="0" name="global"/>
+ <field eval="[(6,0,[ref('base.group_document_user')])]" name="groups"/>
+ <field eval="1" name="perm_unlink"/>
+ <field eval="1" name="perm_write"/>
+ <field eval="0" name="perm_read"/>
+ <field eval="1" name="perm_create"/>
+ </record>
+
</data>
</openerp>