diff options
| author | Nicolas Martinelli <nim@odoo.com> | 2017-08-25 16:07:39 +0200 |
|---|---|---|
| committer | Nicolas Martinelli <nim@odoo.com> | 2017-08-28 13:30:10 +0200 |
| commit | c478e94450374176f0dcb97f1fa3d71b8d3dbd93 (patch) | |
| tree | e75b9f00105f0d6991746fc58c9653e620e9c537 /addons/hr_expense/security | |
| parent | 22eb3ee971bb6e0ee5a13ba2c347cf2e3c2984fb (diff) | |
[FIX] hr_expense: delete expense
A regular employee is allowed to delete an expense reported already
approved. This should not be possible, only an officer could do it.
Fixes #19044
opw-767549
Diffstat (limited to 'addons/hr_expense/security')
| -rw-r--r-- | addons/hr_expense/security/ir_rule.xml | 20 |
1 files changed, 20 insertions, 0 deletions
diff --git a/addons/hr_expense/security/ir_rule.xml b/addons/hr_expense/security/ir_rule.xml index 61aba78d7ed..e86d91211d8 100644 --- a/addons/hr_expense/security/ir_rule.xml +++ b/addons/hr_expense/security/ir_rule.xml @@ -26,6 +26,26 @@ <field eval="True" name="global"/> <field name="domain_force">['|',('company_id', '=', False), ('company_id', 'child_of', [user.company_id.id])]</field> </record> + <record id="hr_expense_report_prevent_unlink" model="ir.rule"> + <field name="name">Expense Report Prevent Delete Employee</field> + <field name="model_id" ref="model_hr_expense_sheet"/> + <field name="domain_force">[('state', '=', 'submit')]</field> + <field name="groups" eval="[(4, ref('base.group_user'))]"/> + <field name="perm_read" eval="False"/> + <field name="perm_write" eval="False"/> + <field name="perm_create" eval="False"/> + <field name="perm_unlink" eval="True"/> + </record> + <record id="hr_expense_report_auth_unlink" model="ir.rule"> + <field name="name">Expense Report Authorize Delete Officer</field> + <field name="model_id" ref="model_hr_expense_sheet"/> + <field name="domain_force">[(1, '=', 1)]</field> + <field name="groups" eval="[(4, ref('hr_expense.group_hr_expense_user'))]"/> + <field name="perm_read" eval="False"/> + <field name="perm_write" eval="False"/> + <field name="perm_create" eval="False"/> + <field name="perm_unlink" eval="True"/> + </record> </data> </odoo> |