summaryrefslogtreecommitdiff
path: root/addons/project_issue/security
diff options
context:
space:
mode:
authorThibault Delavallée <tde@openerp.com>2013-04-12 16:37:19 +0200
committerThibault Delavallée <tde@openerp.com>2013-04-12 16:37:19 +0200
commitb6223ecb7fd4ff86a1eebde4994d68a92b07bda4 (patch)
tree3d9dbeef8c908ce81f5118f25108862895911ea2 /addons/project_issue/security
parentc13ceba6b945fd4b5a5b4984bdb4ce290badb556 (diff)
[FIX] [ADD] project, project_issue, portal_project, portal_project_issue: improved privacy_visibility selection of project.project; improved access rules; added tests to enforce them.
bzr revid: tde@openerp.com-20130412143719-ztjo06r900l024dm
Diffstat (limited to 'addons/project_issue/security')
-rw-r--r--addons/project_issue/security/project_issue_security.xml22
1 files changed, 22 insertions, 0 deletions
diff --git a/addons/project_issue/security/project_issue_security.xml b/addons/project_issue/security/project_issue_security.xml
index c3119073a75..5215a94a8b7 100644
--- a/addons/project_issue/security/project_issue_security.xml
+++ b/addons/project_issue/security/project_issue_security.xml
@@ -1,5 +1,27 @@
<?xml version="1.0" encoding="utf-8"?>
<openerp>
<data noupdate="1">
+
+ <record model="ir.rule" id="issue_project_manager_rule">
+ <field name="name">Project/Issue: project manager: see all</field>
+ <field name="model_id" ref="model_project_issue"/>
+ <field name="domain_force">[(1, '=', 1)]</field>
+ <field name="groups" eval="[(4,ref('project.group_project_manager'))]"/>
+ </record>
+
+ <record model="ir.rule" id="issue_user_rule">
+ <field name="name">Project/Issue: employees: public or employee or following or assigned</field>
+ <field name="model_id" ref="model_project_issue"/>
+ <field name="domain_force">['|',
+ '|',
+ ('project_id.privacy_visibility', 'in', ['public', 'employees']),
+ '&amp;',
+ ('project_id.privacy_visibility', '=', 'followers'),
+ ('message_follower_ids', 'in', [user.id]),
+ ('user_id', '=', user.id),
+ ]</field>
+ <field name="groups" eval="[(4,ref('base.group_user'))]"/>
+ </record>
+
</data>
</openerp>