fix and complete access rules

bzr revid: christophe@tinyerp.com-20081017084109-i1r4zigf7wp3o6i5

49 files changed, 296 insertions, 178 deletions

diff --git a/addons/account/__terp__.py b/addons/account/__terp__.py
index 01d9f9e499f..5084b6e2318 100644
--- a/addons/account/__terp__.py
+++ b/addons/account/__terp__.py
@@ -50,9 +50,9 @@
         "account_unit_test.xml",
     ],
     "update_xml" : [
+        "account_menuitem.xml",
         "security/account_security.xml",
         "security/ir.model.access.csv",
-        "account_menuitem.xml",
         "account_wizard.xml",
         "account_view.xml",
         "account_end_fy.xml",
diff --git a/addons/account/security/account_security.xml b/addons/account/security/account_security.xml
index 3860447ff9d..f32c26b114f 100644
--- a/addons/account/security/account_security.xml
+++ b/addons/account/security/account_security.xml
@@ -1,4 +1,4 @@
-<?xml version="1.0" encoding="utf-8"?><openerp><data noupdate="1">
+<?xml version="1.0" encoding="utf-8"?><openerp><data noupdate="0">
 
     <record id="group_account_invoice" model="res.groups">
         <field name="name">Finance / Invoice</field>
@@ -11,4 +11,25 @@
     <record id="group_account_manager" model="res.groups">
         <field name="name">Finance / Manager</field>
     </record>
+
+	<record id="menu_finance_configuration" model="ir.ui.menu">
+		<field eval="[(6,0,[ref('group_account_manager')])]" name="groups_id"/>
+	</record>
+
+	<record id="menu_finance_reporting" model="ir.ui.menu">
+		<field eval="[(6,0,[ref('group_account_manager')])]" name="groups_id"/>
+	</record>
+
+	<record id="menu_finance_legal_statement" model="ir.ui.menu">
+		<field eval="[(6,0,[ref('group_account_manager')])]" name="groups_id"/>
+	</record>
+
+	<record id="menu_finance_invoice" model="ir.ui.menu">
+		<field eval="[(6,0,[ref('group_account_invoice')])]" name="groups_id"/>
+	</record>
+
+	<record id="menu_automatic_reconcile" model="ir.ui.menu">
+		<field eval="[(6,0,[ref('group_account_user')])]" name="groups_id"/>
+	</record>
+	
 </data></openerp>
diff --git a/addons/account/security/ir.model.access.csv b/addons/account/security/ir.model.access.csv
index 67bbe0f197e..cd3f79f435e 100644
--- a/addons/account/security/ir.model.access.csv
+++ b/addons/account/security/ir.model.access.csv
@@ -4,6 +4,7 @@
 "access_account_account_type","account.account.type","model_account_account_type","account.group_account_user",1,0,0,0
 "access_account_tax","account.tax","model_account_tax","account.group_account_user",1,0,0,0
 "access_account_account","account.account","model_account_account","account.group_account_user",1,0,0,0
+"access_account_account_partner_manager","account.account partner manager","model_account_account","base.group_partner_manager",1,0,0,0
 "access_account_journal_view","account.journal.view","model_account_journal_view","account.group_account_user",1,0,0,0
 "access_account_journal_column","account.journal.column","model_account_journal_column","account.group_account_user",1,0,0,0
 "access_account_journal","account.journal","model_account_journal","account.group_account_user",1,0,0,0
@@ -11,8 +12,8 @@
 "access_account_journal_period","account.journal.period","model_account_journal_period","account.group_account_user",1,1,1,1
 "access_account_move","account.move","model_account_move","account.group_account_user",1,1,1,1
 "access_account_move_reconcile","account.move.reconcile","model_account_move_reconcile","account.group_account_user",1,1,1,1
-"access_account_tax_code","account.tax.code","model_account_tax_code","account.group_account_user",1,0,0,0
-"access_account_tax","account.tax","model_account_tax","account.group_account_user",1,0,0,0
+"access_account_tax_code","account.tax.code","model_account_tax_code",,1,0,0,0
+"access_account_tax","account.tax","model_account_tax",,1,0,0,0
 "access_account_model","account.model","model_account_model","account.group_account_user",1,1,1,1
 "access_account_model_line","account.model.line","model_account_model_line","account.group_account_user",1,1,1,1
 "access_account_subscription","account.subscription","model_account_subscription","account.group_account_user",1,1,1,1
@@ -62,3 +63,12 @@
 "access_account_fiscalyear","account.fiscalyear","model_account_fiscalyear","account.group_account_manager",1,1,1,1
 "access_account_fiscalyear_user","account.fiscalyear.user","model_account_fiscalyear","account.group_account_user",1,0,0,0
 "access_account_fiscalyear_invoice","account.fiscalyear.invoice","model_account_fiscalyear","account.group_account_invoice",1,0,0,0
+"access_res_currency_account_manager","res.currency account manager","base.model_res_currency","group_account_manager",1,1,1,1
+"access_res_currency_rate_account_manager","res.currency.rate account manager","base.model_res_currency_rate","group_account_manager",1,1,1,1
+"access_account_config_wizard_account_manager","account.config.wizard account manager","model_account_config_wizard","group_account_manager",1,1,1,1
+"access_account_config_wizard_system_manager","account.config.wizard system manager","model_account_config_wizard","base.group_system",1,1,1,1
+"access_account_invoice_partner_manager","account.invoice partner manager","model_account_invoice","base.group_partner_manager",1,0,0,0
+"access_account_invoice_line_partner_manager","account.invoice.line partner manager","model_account_invoice_line","base.group_partner_manager",1,0,0,0
+"access_account_invoice_tax_partner_manager","account.invoice.tax partner manager","model_account_invoice_tax","base.group_partner_manager",1,0,0,0
+"access_account_payment_term_partner_manager","account.payment.term partner manager","model_account_payment_term","base.group_partner_manager",1,0,0,0
+"access_account_payment_term_line_partner_manager","account.payment.term.line partner manager","model_account_payment_term_line","base.group_partner_manager",1,0,0,0
diff --git a/addons/account_analytic_plans/security/ir.model.access.csv b/addons/account_analytic_plans/security/ir.model.access.csv
index fe56cde8939..95272270436 100644
--- a/addons/account_analytic_plans/security/ir.model.access.csv
+++ b/addons/account_analytic_plans/security/ir.model.access.csv
@@ -1,7 +1,8 @@
-id,name,model_id:id,group_id:id,perm_read,perm_write,perm_create,perm_unlink
-access_account_analytic_plan_line,account.analytic.plan.line,model_account_analytic_plan_line,account.group_account_user,1,1,1,1
-access_account_analytic_plan_instance,account.analytic.plan.instance,model_account_analytic_plan_instance,account.group_account_user,1,1,1,1
-access_account_analytic_plan_instance_line,account.analytic.plan.instance.line,model_account_analytic_plan_instance_line,account.group_account_user,1,1,1,1
-access_account_analytic_plan_line_invoice,account.analytic.plan.line.invoice,model_account_analytic_plan_line,account.group_account_user,1,1,1,1
-access_account_analytic_plan_instance_invoice,account.analytic.plan.instance.invoice,model_account_analytic_plan_instance,account.group_account_user,1,1,1,1
-access_account_analytic_plan_instance_line_invoice,account.analytic.plan.instance.line.invoice,model_account_analytic_plan_instance_line,account.group_account_user,1,1,1,1
+"id","name","model_id:id","group_id:id","perm_read","perm_write","perm_create","perm_unlink"
+"access_account_analytic_plan","account.analytic.plan","model_account_analytic_plan","account.group_account_user",1,1,1,1
+"access_account_analytic_plan_line","account.analytic.plan.line","model_account_analytic_plan_line","account.group_account_user",1,1,1,1
+"access_account_analytic_plan_instance","account.analytic.plan.instance","model_account_analytic_plan_instance","account.group_account_user",1,1,1,1
+"access_account_analytic_plan_instance_line","account.analytic.plan.instance.line","model_account_analytic_plan_instance_line","account.group_account_user",1,1,1,1
+"access_account_analytic_plan_line_invoice","account.analytic.plan.line.invoice","model_account_analytic_plan_line","account.group_account_user",1,1,1,1
+"access_account_analytic_plan_instance_invoice","account.analytic.plan.instance.invoice","model_account_analytic_plan_instance","account.group_account_user",1,1,1,1
+"access_account_analytic_plan_instance_line_invoice","account.analytic.plan.instance.line.invoice","model_account_analytic_plan_instance_line","account.group_account_user",1,1,1,1
diff --git a/addons/account_followup/__terp__.py b/addons/account_followup/__terp__.py
index a1b6713ca83..392df34f11a 100644
--- a/addons/account_followup/__terp__.py
+++ b/addons/account_followup/__terp__.py
@@ -50,8 +50,9 @@
     "demo_xml" : ["followup_demo.xml"],
     "update_xml" : [
         "security/ir.model.access.csv",
+        "wizard/wizard_view.xml",
         "followup_view.xml",
-        "followup_report_view.xml"
+        "followup_report_view.xml",
     ],
     "active": False,
     "installable": True
diff --git a/addons/account_followup/followup_view.xml b/addons/account_followup/followup_view.xml
index 8739a94372a..81298dbf24d 100644
--- a/addons/account_followup/followup_view.xml
+++ b/addons/account_followup/followup_view.xml
@@ -42,12 +42,6 @@
         
         <report auto="False" id="account_followup_followup_report" menu="False" model="account_followup.followup" name="account_followup.followup.print" rml="account_followup/report/rappel.rml" string="Followup Report"/>
         
-        <record id="action_account_followup_all_wizard" model="ir.actions.wizard">
-            <field name="name">Send followups</field>
-            <field name="wiz_name">account_followup.followup.print.all</field>
-        </record>
-        <menuitem action="action_account_followup_all_wizard" id="account_followup_wizard_menu" parent="account.menu_finance_periodical_processing" type="wizard"/>
-        
         
         <record id="account_move_line_partner_tree" model="ir.ui.view">
             <field name="name">account.move.line.partner.tree</field>
diff --git a/addons/account_followup/wizard/wizard_view.xml b/addons/account_followup/wizard/wizard_view.xml
new file mode 100644
index 00000000000..643265ddca2
--- /dev/null
+++ b/addons/account_followup/wizard/wizard_view.xml
@@ -0,0 +1,12 @@
+<?xml version="1.0" encoding="utf-8"?><openerp><data noupdate="0">
+        <wizard string="Send followups" 
+                name="account_followup.followup.print.all" 
+                id="action_account_followup_all_wizard" 
+                model="account_followup.followup" />
+        
+        <menuitem action="action_account_followup_all_wizard" 
+                  id="account_followup_wizard_menu" 
+                  parent="account.menu_finance_periodical_processing" 
+                  type="wizard" />
+</data></openerp>
+
diff --git a/addons/account_report/security/ir.model.access.csv b/addons/account_report/security/ir.model.access.csv
index e74efd16f3b..ace4bc06db0 100644
--- a/addons/account_report/security/ir.model.access.csv
+++ b/addons/account_report/security/ir.model.access.csv
@@ -1,2 +1,3 @@
-id,name,model_id:id,group_id:id,perm_read,perm_write,perm_create,perm_unlink
-access_account_report_report,account.report.report,model_account_report_report,base.group_user,1,0,0,0
+"id","name","model_id:id","group_id:id","perm_read","perm_write","perm_create","perm_unlink"
+"access_account_report_report","account.report.report","model_account_report_report","account.group_account_manager",1,0,0,0
+"access_account_report_history","account.report.history","model_account_report_history","account.group_account_manager",1,0,0,0
diff --git a/addons/analytic_journal_billing_rate/__terp__.py b/addons/analytic_journal_billing_rate/__terp__.py
index 5ee1e35b8a8..b7293fd4c77 100644
--- a/addons/analytic_journal_billing_rate/__terp__.py
+++ b/addons/analytic_journal_billing_rate/__terp__.py
@@ -17,6 +17,7 @@
     "demo_xml" : [],
     "update_xml" : [
             "analytic_journal_billing_rate_view.xml",
+            "security/ir.model.access.csv",
             ],
     "active": False,
     "installable": True
diff --git a/addons/analytic_journal_billing_rate/security/ir.model.access.csv b/addons/analytic_journal_billing_rate/security/ir.model.access.csv
new file mode 100644
index 00000000000..aa118dd32db
--- /dev/null
+++ b/addons/analytic_journal_billing_rate/security/ir.model.access.csv
@@ -0,0 +1,3 @@
+"id","name","model_id:id","group_id:id","perm_read","perm_write","perm_create","perm_unlink"
+"access_analytic_journal_rate_user","analytic journal rate user","model_analytic_journal_rate_grid","project.group_project_user",1,0,0,0
+"access_analytic_journal_rate_manager","analytic journal rate manager","model_analytic_journal_rate_grid","project.group_project_manager",1,1,1,1
diff --git a/addons/analytic_user_function/__terp__.py b/addons/analytic_user_function/__terp__.py
index 6208cd43226..1a71adee8d6 100644
--- a/addons/analytic_user_function/__terp__.py
+++ b/addons/analytic_user_function/__terp__.py
@@ -17,6 +17,7 @@
     "demo_xml" : [],
     "update_xml" : [
             "analytic_user_function_view.xml",
+            "security/ir.model.access.csv",
             ],
     "active": False,
     "installable": True
diff --git a/addons/analytic_user_function/security/ir.model.access.csv b/addons/analytic_user_function/security/ir.model.access.csv
new file mode 100644
index 00000000000..4aa278b6572
--- /dev/null
+++ b/addons/analytic_user_function/security/ir.model.access.csv
@@ -0,0 +1,3 @@
+"id","name","model_id:id","group_id:id","perm_read","perm_write","perm_create","perm_unlink"
+"access_analytic_user_funct_user","analytic user funct user","model_analytic_user_funct_grid","project.group_project_user",1,0,0,0
+"access_analytic_user_funct_manager","analytic user funct manager","model_analytic_user_funct_grid","project.group_project_manager",1,1,1,1
diff --git a/addons/auction/__terp__.py b/addons/auction/__terp__.py
index 867e965a700..8aa4b40ebb6 100644
--- a/addons/auction/__terp__.py
+++ b/addons/auction/__terp__.py
@@ -4,8 +4,11 @@
     "version" : "1.0",
     "depends" : ["base","account","l10n_be","hr_attendance"],
     "update_xml" : [
+        # FIXME: review security rules...
         "security/ir.model.access.csv",
-        "auction_view.xml", "auction_report.xml", "auction_wizard.xml"
+        "auction_view.xml", 
+        "auction_report.xml", 
+        "auction_wizard.xml",
     ],
     "demo_xml" : [
         "auction_demo.xml"
diff --git a/addons/auction/security/ir.model.access.csv b/addons/auction/security/ir.model.access.csv
index 12683d6624e..ea95df06bf2 100644
--- a/addons/auction/security/ir.model.access.csv
+++ b/addons/auction/security/ir.model.access.csv
@@ -1,20 +1,24 @@
-id,name,model_id:id,group_id:id,perm_read,perm_write,perm_create,perm_unlink
-access_auction_artists,auction.artists,model_auction_artists,base.group_user,1,1,1,1
-access_auction_dates,auction.dates,model_auction_dates,base.group_user,1,1,1,1
-access_auction_deposit,auction.deposit,model_auction_deposit,base.group_user,1,1,1,1
-access_auction_deposit_cost,auction.deposit.cost,model_auction_deposit_cost,base.group_user,1,1,1,1
-access_auction_lot_category,auction.lot.category,model_auction_lot_category,base.group_user,1,1,1,1
-access_auction_lots,auction.lots,model_auction_lots,base.group_user,1,1,1,1
-access_auction_bid,auction.bid,model_auction_bid,base.group_user,1,1,1,1
-access_auction_lot_history,auction.lot.history,model_auction_lot_history,base.group_user,1,1,1,1
-access_report_buyer_auction,report.buyer.auction,model_report_buyer_auction,base.group_user,1,1,1,1
-access_report_seller_auction,report.seller.auction,model_report_seller_auction,base.group_user,1,1,1,1
-access_report_auction_view,report.auction.view,model_report_auction_view,base.group_user,1,1,1,1
-access_report_auction_object_date,report.auction.object.date,model_report_auction_object_date,base.group_user,1,1,1,1
-access_report_auction_estimation_adj_category,report.auction.estimation.adj.category,model_report_auction_estimation_adj_category,base.group_user,1,1,1,1
-access_report_auction_adjudication,report.auction.adjudication,model_report_auction_adjudication,base.group_user,1,1,1,1
-access_report_attendance,report.attendance,model_report_attendance,base.group_user,1,1,1,1
-access_report_deposit_border,report.deposit.border,model_report_deposit_border,base.group_user,1,1,1,1
-access_report_object_encoded,report.object.encoded,model_report_object_encoded,base.group_user,1,1,1,1
-access_report_object_encoded_manager,report.object.encoded.manager,model_report_object_encoded_manager,base.group_user,1,1,1,1
-access_report_unclassified_objects,report.unclassified.objects,model_report_unclassified_objects,base.group_user,1,1,1,1
+"id","name","model_id:id","group_id:id","perm_read","perm_write","perm_create","perm_unlink"
+"access_auction_artists","auction.artists","model_auction_artists","base.group_user",1,1,1,1
+"access_auction_dates","auction.dates","model_auction_dates","base.group_user",1,1,1,1
+"access_auction_deposit","auction.deposit","model_auction_deposit","base.group_user",1,1,1,1
+"access_auction_deposit_cost","auction.deposit.cost","model_auction_deposit_cost","base.group_user",1,1,1,1
+"access_auction_lot_category","auction.lot.category","model_auction_lot_category","base.group_user",1,1,1,1
+"access_auction_lots","auction.lots","model_auction_lots","base.group_user",1,1,1,1
+"access_auction_bid","auction.bid","model_auction_bid","base.group_user",1,1,1,1
+"access_auction_bid_line","auction.bid.line","model_auction_bid_line","base.group_user",1,1,1,1
+"access_auction_lot_history","auction.lot.history","model_auction_lot_history","base.group_user",1,1,1,1
+"access_report_buyer_auction","report.buyer.auction","model_report_buyer_auction","base.group_user",1,1,1,1
+"access_report_buyer_auction2","report.buyer.auction2","model_report_buyer_auction2","base.group_user",1,1,1,1
+"access_report_seller_auction","report.seller.auction","model_report_seller_auction","base.group_user",1,1,1,1
+"access_report_seller_auction2","report.seller.auction2","model_report_seller_auction2","base.group_user",1,1,1,1
+"access_report_auction_view","report.auction.view","model_report_auction_view","base.group_user",1,1,1,1
+"access_report_auction_view2","report.auction.view2","model_report_auction_view2","base.group_user",1,1,1,1
+"access_report_auction_object_date","report.auction.object.date","model_report_auction_object_date","base.group_user",1,1,1,1
+"access_report_auction_estimation_adj_category","report.auction.estimation.adj.category","model_report_auction_estimation_adj_category","base.group_user",1,1,1,1
+"access_report_auction_adjudication","report.auction.adjudication","model_report_auction_adjudication","base.group_user",1,1,1,1
+"access_report_attendance","report.attendance","model_report_attendance","base.group_user",1,1,1,1
+"access_report_deposit_border","report.deposit.border","model_report_deposit_border","base.group_user",1,1,1,1
+"access_report_object_encoded","report.object.encoded","model_report_object_encoded","base.group_user",1,1,1,1
+"access_report_object_encoded_manager","report.object.encoded.manager","model_report_object_encoded_manager","base.group_user",1,1,1,1
+"access_report_unclassified_objects","report.unclassified.objects","model_report_unclassified_objects","base.group_user",1,1,1,1
diff --git a/addons/base_contact/security/ir.model.access.csv b/addons/base_contact/security/ir.model.access.csv
index f6605186bed..fdf7e700c3c 100644
--- a/addons/base_contact/security/ir.model.access.csv
+++ b/addons/base_contact/security/ir.model.access.csv
@@ -1,3 +1,5 @@
-id,name,model_id:id,group_id:id,perm_read,perm_write,perm_create,perm_unlink
-access_res_partner_contact,res.partner.contact,model_res_partner_contact,base.group_user,1,1,1,1
-access_res_partner_job,res.partner.job,model_res_partner_job,base.group_user,1,1,1,1
+"id","name","model_id:id","group_id:id","perm_read","perm_write","perm_create","perm_unlink"
+"access_res_partner_contact","res.partner.contact","model_res_partner_contact","base.group_partner_manager",1,1,1,1
+"access_res_partner_job","res.partner.job","model_res_partner_job","base.group_partner_manager",1,1,1,1
+"access_res_partner_contact_all","res.partner.contact all","model_res_partner_contact",,1,0,0,0
+"access_res_partner_job_all","res.partner.job all","model_res_partner_job",,1,0,0,0
diff --git a/addons/board/i18n/fr_FR.po b/addons/board/i18n/fr_FR.po
index c324587edbd..e88317f66d2 100644
--- a/addons/board/i18n/fr_FR.po
+++ b/addons/board/i18n/fr_FR.po
@@ -18,6 +18,7 @@ msgstr ""
 
 #. module: board
 #: constraint:ir.model:0
+
 msgid "The Object name must start with x_ and not contain any special character !"
 msgstr "Le nom de l'objet doit commencer avec x_ et ne pas contenir de charactères spéciaux !"
 
diff --git a/addons/crm/__terp__.py b/addons/crm/__terp__.py
index 8932a7c2131..42a1f9113a9 100644
--- a/addons/crm/__terp__.py
+++ b/addons/crm/__terp__.py
@@ -53,11 +53,11 @@ between mails and Tiny ERP.""",
     "init_xml" : ["crm_data.xml"],
     "demo_xml" : ["crm_demo.xml"],
     "update_xml" : [
-        "security/crm_security.xml",
-        "security/ir.model.access.csv",
         "crm_view.xml",
         "crm_report.xml",
         "crm_wizard.xml",
+        "security/crm_security.xml",
+        "security/ir.model.access.csv",
     ],
     "active": False,
     "installable": True
diff --git a/addons/crm/security/crm_security.xml b/addons/crm/security/crm_security.xml
index 9e73b1a0e84..aa91246e872 100644
--- a/addons/crm/security/crm_security.xml
+++ b/addons/crm/security/crm_security.xml
@@ -1,6 +1,6 @@
 <?xml version="1.0" encoding="utf-8"?>
 <openerp>
-<data noupdate="1">
+<data noupdate="0">
 
     <record id="group_crm_manager" model="res.groups">
         <field name="name">CRM / Manager</field>
@@ -10,5 +10,13 @@
         <field name="name">CRM / User</field>
     </record>
 
+	<record model='ir.ui.menu' id='menu_crm'>
+		<field name="groups_id" eval="[(6,0,[ref('group_crm_manager'),ref('group_crm_user')])]"/>
+	</record>
+
+	<record model='ir.ui.menu' id='menu_crm_configuration'>
+		<field name="groups_id" eval="[(6,0,[ref('group_crm_manager')])]"/>
+	</record>
+
 </data>
 </openerp>
diff --git a/addons/crm_configuration/__terp__.py b/addons/crm_configuration/__terp__.py
index 5b6f8e9de21..1e5653dba61 100644
--- a/addons/crm_configuration/__terp__.py
+++ b/addons/crm_configuration/__terp__.py
@@ -39,6 +39,7 @@
                     "crm_jobs_menu.xml", "crm_opportunity_menu.xml",
                     "crm_helpdesk_menu.xml", "crm_lead_menu.xml",
                     "crm_meeting_menu.xml",
+                    "security/ir.model.access.csv",
 #                    "process/crm_configuration_process.xml",
                     ],
     "active": False,
diff --git a/addons/crm_configuration/security/ir.model.access.csv b/addons/crm_configuration/security/ir.model.access.csv
index 2697ccbdfe1..fd579c8cef4 100644
--- a/addons/crm_configuration/security/ir.model.access.csv
+++ b/addons/crm_configuration/security/ir.model.access.csv
@@ -1,5 +1,11 @@
-id,name,model_id:id,group_id:id,perm_read,perm_write,perm_create,perm_unlink
-access_crm_case_stage,crm.case.stage,model_crm_case_stage,crm.group_crm_user,1,0,0,0
-access_report_crm_case_section_stage,report.crm.case.section.stage,model_report_crm_case_section_stage,crm.group_crm_manager,1,0,0,0
-access_report_crm_case_section_categ_stage,report.crm.case.section.categ.stage,model_report_crm_case_section_categ_stage,crm.group_crm_manager,1,0,0,0
-access_crm_case_stage_manager,crm.case.stage,model_crm_case_stage,crm.group_crm_manager,1,1,1,1
+"id","name","model_id:id","group_id:id","perm_read","perm_write","perm_create","perm_unlink"
+"access_crm_case_stage","crm.case.stage","model_crm_case_stage","crm.group_crm_user",1,0,0,0
+"access_report_crm_case_section_stage","report.crm.case.section.stage","model_report_crm_case_section_stage","crm.group_crm_manager",1,0,0,0
+"access_report_crm_case_section_categ_stage","report.crm.case.section.categ.stage","model_report_crm_case_section_categ_stage","crm.group_crm_manager",1,0,0,0
+"access_report_crm_case_section_categ_categ2","report.crm.case.section.categ.categ2","model_report_crm_case_section_categ_categ2","crm.group_crm_manager",1,0,0,
+"access_report_crm_case_section_categ2","report.crm.case.section.categ2","model_report_crm_case_section_categ2","crm.group_crm_manager",1,0,0,
+"access_crm_case_stage_manager","crm.case.stage","model_crm_case_stage","crm.group_crm_manager",1,1,1,1
+"access_crm_menu_config_wizard","crm config wizard manager","model_crm_menu_config_wizard","crm.group_crm_manager",1,1,1,1
+"access_crm_menu_config_wizard system","crm config wizard manager system","model_crm_menu_config_wizard","base.group_system",1,1,1,1
+"access_crm_case_category2_user","crm_case_category2 user","model_crm_case_category2","crm.group_crm_user",1,0,0,0
+"access_crm_case_category2_manager","crm_case_category2 manager","model_crm_case_category2","crm.group_crm_manager",1,1,1,1
diff --git a/addons/crm_profiling/security/ir.model.access.csv b/addons/crm_profiling/security/ir.model.access.csv
index 5b8fcad458e..a52b8fd4e7b 100644
--- a/addons/crm_profiling/security/ir.model.access.csv
+++ b/addons/crm_profiling/security/ir.model.access.csv
@@ -1,6 +1,8 @@
-id,name,model_id:id,group_id:id,perm_read,perm_write,perm_create,perm_unlink
-access_crm_profiling_question,crm_profiling.question,model_crm_profiling_question,crm.group_crm_user,1,0,0,0
-access_crm_profiling_questionnaire,crm_profiling.questionnaire,model_crm_profiling_questionnaire,crm.group_crm_user,1,0,0,0
-access_crm_profiling_answer,crm_profiling.answer,model_crm_profiling_answer,crm.group_crm_user,1,1,1,1
-access_crm_profiling_question_manager,crm_profiling.question,model_crm_profiling_question,crm.group_crm_manager,1,1,1,1
-access_crm_profiling_questionnaire_manager,crm_profiling.questionnaire,model_crm_profiling_questionnaire,crm.group_crm_manager,1,1,1,1
+"id","name","model_id:id","group_id:id","perm_read","perm_write","perm_create","perm_unlink"
+"access_crm_profiling_question","crm_profiling.question","model_crm_profiling_question",,1,0,0,0
+"access_crm_profiling_questionnaire","crm_profiling.questionnaire","model_crm_profiling_questionnaire",,1,0,0,0
+"access_crm_profiling_answer_all","crm_profiling.answer all","model_crm_profiling_answer",,1,0,0,0
+"access_crm_profiling_answer","crm_profiling.answer","model_crm_profiling_answer","crm.group_crm_user",1,1,1,1
+"access_crm_profiling_question_manager","crm_profiling.question manager","model_crm_profiling_question","crm.group_crm_manager",1,1,1,1
+"access_crm_profiling_questionnaire_manager","crm_profiling.questionnaire manager","model_crm_profiling_questionnaire","crm.group_crm_manager",1,1,1,1
+"access_crm_profiling_answer_manager","crm_profiling.answer manager","model_crm_profiling_answer","crm.group_crm_manager",1,1,1,1
diff --git a/addons/document/security/document_security.xml b/addons/document/security/document_security.xml
new file mode 100644
index 00000000000..481b39d9485
--- /dev/null
+++ b/addons/document/security/document_security.xml
@@ -0,0 +1,10 @@
+<?xml version="1.0" encoding="utf-8"?>
+<openerp>
+<data noupdate="0">
+
+    <record id="group_document_manager" model="res.groups">
+		<field name="name">Document / Manager</field>
+    </record>
+
+</data>
+</openerp>
diff --git a/addons/document/security/ir.model.access.csv b/addons/document/security/ir.model.access.csv
new file mode 100644
index 00000000000..0343f29f43a
--- /dev/null
+++ b/addons/document/security/ir.model.access.csv
@@ -0,0 +1 @@
+"id","name","model_id:id","group_id:id","perm_read","perm_write","perm_create","perm_unlink"
diff --git a/addons/hr_attendance/__terp__.py b/addons/hr_attendance/__terp__.py
index 0dd9eff1013..c6a6162bcf9 100644
--- a/addons/hr_attendance/__terp__.py
+++ b/addons/hr_attendance/__terp__.py
@@ -9,7 +9,8 @@
     "update_xml" : [
        "hr_attendance_view.xml",
        "hr_attendance_wizard.xml",
-       "hr_attendance_report.xml"
+       "hr_attendance_report.xml",
+	   "security/ir.model.access.csv",
     ],
     "active": False,
     "installable": True,
diff --git a/addons/hr_attendance/security/ir.model.access.csv b/addons/hr_attendance/security/ir.model.access.csv
new file mode 100644
index 00000000000..8dec31d87e8
--- /dev/null
+++ b/addons/hr_attendance/security/ir.model.access.csv
@@ -0,0 +1,3 @@
+"id","name","model_id:id","group_id:id","perm_read","perm_write","perm_create","perm_unlink"
+"access_hr_action_reason_employee","hr action reason employee","model_hr_action_reason","base.group_user",1,1,1,1
+"access_hr_attendance_employee","hr attendance employee","model_hr_attendance","base.group_user",1,1,1,1
diff --git a/addons/hr_contract/__terp__.py b/addons/hr_contract/__terp__.py
index a03f8140f72..c07e6c55a5a 100644
--- a/addons/hr_contract/__terp__.py
+++ b/addons/hr_contract/__terp__.py
@@ -46,7 +46,7 @@
     "demo_xml" : [],
     "update_xml" : [
         "security/hr_contract_security.xml",
-#        "security/ir.model.access.csv",
+        "security/ir.model.access.csv",
         "hr_contract_view.xml",
     ],
     "active": False,
diff --git a/addons/hr_contract/security/ir.model.access.csv b/addons/hr_contract/security/ir.model.access.csv
index a9a7e3d5219..f959cc1b81c 100644
--- a/addons/hr_contract/security/ir.model.access.csv
+++ b/addons/hr_contract/security/ir.model.access.csv
@@ -1,5 +1,8 @@
-id,name,model_id:id,group_id:id,perm_read,perm_write,perm_create,perm_unlink
-access_hr_employee_marital_status,hr.employee.marital.status,model_hr_employee_marital_status,hr.group_hr_user,1,1,1,1
-access_hr_contract_wage_type_period,hr.contract.wage.type.period,model_hr_contract_wage_type_period,hr.group_hr_manager,1,1,1,1
-access_hr_contract_wage_type,hr.contract.wage.type,model_hr_contract_wage_type,hr.group_hr_manager,1,1,1,1
-access_hr_contract,hr.contract,model_hr_contract,group_hr_contract,1,1,1,1
+"id","name","model_id:id","group_id:id","perm_read","perm_write","perm_create","perm_unlink"
+"access_hr_employee_marital_status","hr.employee.marital.status","model_hr_employee_marital_status","hr.group_hr_user",1,1,1,1
+"access_hr_contract_wage_type_period_user","hr.contract.wage.type.period user","model_hr_contract_wage_type_period","hr.group_hr_user",1,0,0,0
+"access_hr_contract_wage_type_period","hr.contract.wage.type.period","model_hr_contract_wage_type_period","hr.group_hr_manager",1,1,1,1
+"access_hr_contract_wage_type user","hr.contract.wage.type user","model_hr_contract_wage_type","hr.group_hr_user",1,0,0,0
+"access_hr_contract_wage_type","hr.contract.wage.type","model_hr_contract_wage_type","hr.group_hr_manager",1,1,1,1
+"access_hr_contract_user","hr.contract user","model_hr_contract","hr.group_hr_user",1,0,0,0
+"access_hr_contract","hr.contract","model_hr_contract","group_hr_contract",1,1,1,1
diff --git a/addons/hr_holidays/hr_holidays_report.xml b/addons/hr_holidays/hr_holidays_report.xml
index 85c4f69649e..2d89b467c26 100644
--- a/addons/hr_holidays/hr_holidays_report.xml
+++ b/addons/hr_holidays/hr_holidays_report.xml
@@ -9,17 +9,6 @@
 				auto="False"
 				menu="False"/>
 
-		<!--<wizard id="wizard_hr_holidays_summary"
-			string="Summary Of Holidays"
-			model="hr.holidays"
-			name="hr.holidays.holidays_summary"
-			menu="False"/>
-
-		<menuitem
-			name="Human Resources/Holidays Request/Print Summary Of Holidays"
-			action="wizard_hr_holidays_summary"
-			type="wizard"
-			id="menu_wizard_hr_holidays_summary"/>-->
-
 	</data>
 </openerp>
+
diff --git a/addons/hr_holidays/hr_holidays_wizard.xml b/addons/hr_holidays/hr_holidays_wizard.xml
index 325768afbef..475da254cdf 100644
--- a/addons/hr_holidays/hr_holidays_wizard.xml
+++ b/addons/hr_holidays/hr_holidays_wizard.xml
@@ -10,6 +10,11 @@
 		 type="wizard"
 		 id="menu_holidays_summary"/>
 
+	 <!-- restrict menu access to HR Manager -->
+	 <record model='ir.ui.menu' id="menu_holidays_summary">
+		 <field eval="[(6,0,[ref('hr.group_hr_manager')])]" name="groups_id"/>
+  	 </record>
+
 	<wizard string="Print Summary of Employee's Holidays"
 		model="hr.employee" name="hr.holidays.summary.employee"
 		keyword="client_print_multi" id="wizard_holidays_summary" />
diff --git a/addons/hr_holidays/security/ir.model.access.csv b/addons/hr_holidays/security/ir.model.access.csv
index 69619dde43d..881e5e48b73 100644
--- a/addons/hr_holidays/security/ir.model.access.csv
+++ b/addons/hr_holidays/security/ir.model.access.csv
@@ -1,2 +1,4 @@
-id,name,model_id:id,group_id:id,perm_read,perm_write,perm_create,perm_unlink
-access_hr_holidays_per_user,hr.holidays.per.user,model_hr_holidays_per_user,base.group_user,1,1,1,1
+"id","name","model_id:id","group_id:id","perm_read","perm_write","perm_create","perm_unlink"
+"access_hr_holidays_per_user","hr.holidays.per.user","model_hr_holidays_per_user","base.group_user",1,1,1,1
+"access_hr_holydays_status_user","hr.holidays.status user","model_hr_holidays_status","base.group_user",1,1,1,1
+"access_hr_holidays_user","hr holidays user","model_hr_holidays","base.group_user",1,1,1,1
diff --git a/addons/hr_timesheet_project/__terp__.py b/addons/hr_timesheet_project/__terp__.py
index 06922784d56..0e41dbc8420 100644
--- a/addons/hr_timesheet_project/__terp__.py
+++ b/addons/hr_timesheet_project/__terp__.py
@@ -34,7 +34,9 @@
     "description": """Auto-complete timesheet based on tasks made on the project management module.""",
     "website" : "http://tinyerp.com/module_hr.html",
     "depends" : ["project", "hr_timesheet_sheet"],
-    "update_xml" : ["hr_timesheet_project_view.xml", "process/hr_timesheet_project_process.xml"],
+    "update_xml" : ["hr_timesheet_project_view.xml", 
+#                    "process/hr_timesheet_project_process.xml",
+                    ],
     "active": False,
     "installable": True
 }
diff --git a/addons/membership/security/ir.model.access.csv b/addons/membership/security/ir.model.access.csv
index a641bd47522..5b34e98dec5 100644
--- a/addons/membership/security/ir.model.access.csv
+++ b/addons/membership/security/ir.model.access.csv
@@ -1,4 +1,5 @@
-id,name,model_id:id,group_id:id,perm_read,perm_write,perm_create,perm_unlink
-access_membership_membership_line,membership.membership_line,model_membership_membership_line,base.group_user,1,1,1,1
-access_report_partner_member_year,report.partner_member.year,model_report_partner_member_year,base.group_user,1,0,0,0
-access_report_partner_member_year_new,report.partner_member.year_new,model_report_partner_member_year_new,base.group_user,1,0,0,0
+"id","name","model_id:id","group_id:id","perm_read","perm_write","perm_create","perm_unlink"
+"access_membership_membership_line_partner_manager","membership.membership_line partner_manager","model_membership_membership_line","base.group_partner_manager",1,1,1,1
+"access_membership_membership_line","membership.membership_line","model_membership_membership_line","base.group_user",1,0,0,0
+"access_report_partner_member_year","report.partner_member.year","model_report_partner_member_year","base.group_partner_manager",1,0,0,0
+"access_report_partner_member_year_new","report.partner_member.year_new","model_report_partner_member_year_new","base.group_partner_manager",1,0,0,0
diff --git a/addons/mrp/mrp_wizard.xml b/addons/mrp/mrp_wizard.xml
index cc35b509d5a..514da6d7d6f 100644
--- a/addons/mrp/mrp_wizard.xml
+++ b/addons/mrp/mrp_wizard.xml
@@ -1,22 +1,13 @@
 <?xml version="1.0" encoding="utf-8"?>
 <openerp>
     <data>
-        <record id="wiz_mrp_proc0" model="ir.actions.wizard">
-            <field name="name">Compute All Schedulers</field>
-            <field name="wiz_name">mrp.procurement.compute.all</field>
-        </record>
+		<wizard id="wiz_mrp_proc0" model="mrp.procurement" string="Compute All Schedulers" name="mrp.procurement.compute.all"/>
         <menuitem action="wiz_mrp_proc0" id="mrp_Sched_all" parent="mrp.menu_mrp_root" type="wizard"/>
         
-        <record id="wiz_mrp_proc1" model="ir.actions.wizard">
-            <field name="name">Compute Procurements Only</field>
-            <field name="wiz_name">mrp.procurement.compute</field>
-        </record>
+		<wizard id="wiz_mrp_proc1" model="mrp.procurement" string="Compute Procurements Only" name="mrp.procurement.compute"/>
         <menuitem action="wiz_mrp_proc1" id="menu_wiz_mrp_proc1" parent="mrp.mrp_Sched_all" type="wizard"/>
         
-        <record id="wiz_mrp_proc2" model="ir.actions.wizard">
-            <field name="name">Compute Stock Minimum Rules Only</field>
-            <field name="wiz_name">mrp.procurement.orderpoint.compute</field>
-        </record>
+		<wizard id="wiz_mrp_proc2" model="mrp.procurement" string="Compute Stock Minimum Rules Only" name="mrp.procurement.orderpoint.compute"/>
         <menuitem action="wiz_mrp_proc2" id="menu_wiz_mrp_proc2" parent="mrp.mrp_Sched_all" type="wizard"/>
         
         <wizard id="wizard_workcenter_load" model="mrp.workcenter" name="mrp.workcenter.load" string="Workcenter load"/>
diff --git a/addons/mrp/security/mrp_security.xml b/addons/mrp/security/mrp_security.xml
index 9118fe051ae..8cd84d7df6b 100644
--- a/addons/mrp/security/mrp_security.xml
+++ b/addons/mrp/security/mrp_security.xml
@@ -1,6 +1,6 @@
 <?xml version="1.0" encoding="utf-8"?>
 <openerp>
-<data noupdate="1">
+<data noupdate="0">
 
     <record id="group_mrp_manager" model="res.groups">
         <field name="name">Manufacturing / Manager</field>
@@ -9,5 +9,12 @@
         <field name="name">Manufacturing / Worker</field>
     </record>
 
+
+	<!-- restrict access to menu -->
+	<record model='ir.ui.menu' id="mrp_Sched_all">
+		<field eval="[(6,0,[ref('group_mrp_manager')])]" name="groups_id"/>
+  	</record>
+
+
 </data>
 </openerp>
diff --git a/addons/process/security/ir.model.access.csv b/addons/process/security/ir.model.access.csv
index 9d56bb541f0..064f0454d02 100644
--- a/addons/process/security/ir.model.access.csv
+++ b/addons/process/security/ir.model.access.csv
@@ -1,9 +1,11 @@
-id,name,model_id:id,group_id:id,perm_read,perm_write,perm_create,perm_unlink
-access_process_process,process.process,model_process_process,base.group_user,1,0,0,0
-access_process_node,process.node,model_process_node,base.group_user,1,0,0,0
-access_process_transition,process.transition,model_process_transition,base.group_user,1,0,0,0
-access_process_transition_action,process.transition.action,model_process_transition_action,base.group_user,1,0,0,0
-access_process_process_manager,process.process,model_process_process,base.group_system,1,1,1,1
-access_process_node_manager,process.node,model_process_node,base.group_system,1,1,1,1
-access_process_transition_manager,process.transition,model_process_transition,base.group_system,1,1,1,1
-access_process_transition_action_manager,process.transition.action,model_process_transition_action,base.group_system,1,1,1,1
+"id","name","model_id:id","group_id:id","perm_read","perm_write","perm_create","perm_unlink"
+"access_process_process","process.process","model_process_process","base.group_user",1,0,0,0
+"access_process_node","process.node","model_process_node","base.group_user",1,0,0,0
+"access_process_transition","process.transition","model_process_transition","base.group_user",1,0,0,0
+"access_process_transition_action","process.transition.action","model_process_transition_action","base.group_user",1,0,0,0
+"access_process_condition","process.condition","model_process_condition","base.group_user",1,0,0,0
+"access_process_process_manager","process.process manager","model_process_process","base.group_system",1,1,1,1
+"access_process_node_manager","process.node manager","model_process_node","base.group_system",1,1,1,1
+"access_process_transition_manager","process.transition manager","model_process_transition","base.group_system",1,1,1,1
+"access_process_transition_action_manager","process.transition.action manager","model_process_transition_action","base.group_system",1,1,1,1
+"access_process_condition_manager","process.condition manager","model_process_condition","base.group_system",1,1,1,1
diff --git a/addons/product/security/ir.model.access.csv b/addons/product/security/ir.model.access.csv
index cf628e592f8..62d5079afce 100644
--- a/addons/product/security/ir.model.access.csv
+++ b/addons/product/security/ir.model.access.csv
@@ -1,29 +1,31 @@
-id,name,model_id:id,group_id:id,perm_read,perm_write,perm_create,perm_unlink
-access_product_uom_categ,product.uom.categ,model_product_uom_categ,product.group_product_manager,1,1,1,1
-access_product_uom,product.uom,model_product_uom,base.group_user,1,1,1,1
-access_product_ul,product.ul,model_product_ul,base.group_user,1,1,1,1
-access_product_category,product.category,model_product_category,base.group_user,1,1,1,1
-access_product_template,product.template,model_product_template,base.group_user,1,1,1,1
-access_product_product,product.product,model_product_product,base.group_user,1,1,1,1
-access_product_packaging,product.packaging,model_product_packaging,base.group_user,1,1,1,1
-access_product_supplierinfo,product.supplierinfo,model_product_supplierinfo,base.group_user,1,1,1,1
-access_pricelist_partnerinfo,pricelist.partnerinfo,model_pricelist_partnerinfo,base.group_user,1,1,1,1
-access_product_price_type,product.price.type,model_product_price_type,base.group_user,1,1,1,1
-access_product_pricelist_type,product.pricelist.type,model_product_pricelist_type,base.group_user,1,1,1,1
-access_product_pricelist,product.pricelist,model_product_pricelist,base.group_user,1,1,1,1
-access_product_pricelist_version,product.pricelist.version,model_product_pricelist_version,base.group_user,1,1,1,1
-access_product_pricelist_item,product.pricelist.item,model_product_pricelist_item,base.group_user,1,1,1,1
-access_product_uom_categ_user,product.uom.categ.user,model_product_uom_categ,product.group_product_manager,1,0,0,0
-access_product_uom_user,product.uom.user,model_product_uom,base.group_user,1,0,0,0
-access_product_ul_user,product.ul.user,model_product_ul,base.group_user,1,0,0,0
-access_product_category_user,product.category.user,model_product_category,base.group_user,1,0,0,0
-access_product_template_user,product.template.user,model_product_template,base.group_user,1,0,0,0
-access_product_product_user,product.product.user,model_product_product,base.group_user,1,0,0,0
-access_product_packaging_user,product.packaging.user,model_product_packaging,base.group_user,1,0,0,0
-access_product_supplierinfo_user,product.supplierinfo.user,model_product_supplierinfo,base.group_user,1,0,0,0
-access_pricelist_partnerinfo_user,pricelist.partnerinfo.user,model_pricelist_partnerinfo,base.group_user,1,0,0,0
-access_product_price_type_user,product.price.type.user,model_product_price_type,base.group_user,1,0,0,0
-access_product_pricelist_type_user,product.pricelist.type.user,model_product_pricelist_type,base.group_user,1,0,0,0
-access_product_pricelist_user,product.pricelist.user,model_product_pricelist,base.group_user,1,0,0,0
-access_product_pricelist_version_user,product.pricelist.version.user,model_product_pricelist_version,base.group_user,1,0,0,0
-access_product_pricelist_item_user,product.pricelist.item.user,model_product_pricelist_item,base.group_user,1,0,0,0
+"id","name","model_id:id","group_id:id","perm_read","perm_write","perm_create","perm_unlink"
+"access_product_uom_categ_manager","product.uom.categ manager","model_product_uom_categ","product.group_product_manager",1,1,1,1
+"access_product_uom_manager","product.uom manager","model_product_uom","product.group_product_manager",1,1,1,1
+"access_product_ul_manager","product.ul manager","model_product_ul","product.group_product_manager",1,1,1,1
+"access_product_category_manager","product.category manager","model_product_category","product.group_product_manager",1,1,1,1
+"access_product_template_manager","product.template manager","model_product_template","product.group_product_manager",1,1,1,1
+"access_product_product_manager","product.product manager","model_product_product","product.group_product_manager",1,1,1,1
+"access_product_packaging_manager","product.packaging manager","model_product_packaging","product.group_product_manager",1,1,1,1
+"access_product_supplierinfo_manager","product.supplierinfo manager","model_product_supplierinfo","product.group_product_manager",1,1,1,1
+"access_pricelist_partnerinfo_manager","pricelist.partnerinfo manager","model_pricelist_partnerinfo","product.group_product_manager",1,1,1,1
+"access_product_price_type_manager","product.price.type manager","model_product_price_type","product.group_product_manager",1,1,1,1
+"access_product_pricelist_type_manager","product.pricelist.type manager","model_product_pricelist_type","product.group_product_manager",1,1,1,1
+"access_product_pricelist_manager","product.pricelist manager","model_product_pricelist","product.group_product_manager",1,1,1,1
+"access_product_pricelist_version_manager","product.pricelist.version manager","model_product_pricelist_version","product.group_product_manager",1,1,1,1
+"access_product_pricelist_item_manager","product.pricelist.item manager","model_product_pricelist_item","product.group_product_manager",1,1,1,1
+"access_product_uom_categ_user","product.uom.categ.user","model_product_uom_categ","base.group_user",1,0,0,0
+"access_product_uom_user","product.uom.user","model_product_uom","base.group_user",1,0,0,0
+"access_product_ul_user","product.ul.user","model_product_ul","base.group_user",1,0,0,0
+"access_product_category_user","product.category.user","model_product_category","base.group_user",1,0,0,0
+"access_product_template_user","product.template.user","model_product_template","base.group_user",1,0,0,0
+"access_product_product_user","product.product.user","model_product_product","base.group_user",1,0,0,0
+"access_product_packaging_user","product.packaging.user","model_product_packaging","base.group_user",1,0,0,0
+"access_product_supplierinfo_user","product.supplierinfo.user","model_product_supplierinfo","base.group_user",1,0,0,0
+"access_pricelist_partnerinfo_user","pricelist.partnerinfo.user","model_pricelist_partnerinfo","base.group_user",1,0,0,0
+"access_product_price_type_user","product.price.type.user","model_product_price_type","base.group_user",1,0,0,0
+"access_product_pricelist_type_user","product.pricelist.type.user","model_product_pricelist_type","base.group_user",1,0,0,0
+"access_product_pricelist_user","product.pricelist.user","model_product_pricelist","base.group_user",1,0,0,0
+"access_product_pricelist_version_user","product.pricelist.version.user","model_product_pricelist_version","base.group_user",1,0,0,0
+"access_product_pricelist_item_user","product.pricelist.item.user","model_product_pricelist_item","base.group_user",1,0,0,0
+"access_product_pricelist_type_partner_manager","product.pricelist.type partner manager","model_product_pricelist_type","base.group_partner_manager",1,0,0,0
+"access_product_pricelist_partner_manager","product.pricelist partner manager","model_product_pricelist","base.group_partner_manager",1,0,0,0
diff --git a/addons/profile_accounting/security/ir.model.access.csv b/addons/profile_accounting/security/ir.model.access.csv
index 08145a00f54..d60aaef3dc2 100644
--- a/addons/profile_accounting/security/ir.model.access.csv
+++ b/addons/profile_accounting/security/ir.model.access.csv
@@ -1,2 +1,2 @@
-id,name,model_id:id,group_id:id,perm_read,perm_write,perm_create,perm_unlink
-
+"id","name","model_id:id","group_id:id","perm_read","perm_write","perm_create","perm_unlink"
+"access_profile_accounting_wizard_install","profile accounting wizard install","model_profile_accounting_config_install_modules_wizard","base.group_system",1,1,1,1
diff --git a/addons/profile_association/security/ir.model.access.csv b/addons/profile_association/security/ir.model.access.csv
index 97dd8b917b8..2fb5590818e 100644
--- a/addons/profile_association/security/ir.model.access.csv
+++ b/addons/profile_association/security/ir.model.access.csv
@@ -1 +1,2 @@
-id,name,model_id:id,group_id:id,perm_read,perm_write,perm_create,perm_unlink
+"id","name","model_id:id","group_id:id","perm_read","perm_write","perm_create","perm_unlink"
+"access_profile_association_wizard_install","profile association wizard install","model_profile_association_config_install_modules_wizard","base.group_system",1,1,1,1
diff --git a/addons/profile_manufacturing/security/ir.model.access.csv b/addons/profile_manufacturing/security/ir.model.access.csv
index 08145a00f54..dc32d522e81 100644
--- a/addons/profile_manufacturing/security/ir.model.access.csv
+++ b/addons/profile_manufacturing/security/ir.model.access.csv
@@ -1,2 +1,2 @@
-id,name,model_id:id,group_id:id,perm_read,perm_write,perm_create,perm_unlink
-
+"id","name","model_id:id","group_id:id","perm_read","perm_write","perm_create","perm_unlink"
+"access_profile_manufacturing_wizard_install","profile manufacturing wizard install","model_profile_manufacturing_config_install_modules_wizard","base.group_system",1,1,1,1
diff --git a/addons/profile_service/security/ir.model.access.csv b/addons/profile_service/security/ir.model.access.csv
index 97dd8b917b8..ee3fd0efd37 100644
--- a/addons/profile_service/security/ir.model.access.csv
+++ b/addons/profile_service/security/ir.model.access.csv
@@ -1 +1,2 @@
-id,name,model_id:id,group_id:id,perm_read,perm_write,perm_create,perm_unlink
+"id","name","model_id:id","group_id:id","perm_read","perm_write","perm_create","perm_unlink"
+"access_profile_service_wizard_install","profile service wizard install","model_profile_service_config_install_modules_wizard","base.group_system",1,1,1,1
diff --git a/addons/project_gtd/project_gtd_wizard.xml b/addons/project_gtd/project_gtd_wizard.xml
index 03503303311..003245aaf40 100644
--- a/addons/project_gtd/project_gtd_wizard.xml
+++ b/addons/project_gtd/project_gtd_wizard.xml
@@ -3,7 +3,7 @@
 	<data>
 
 		<wizard string="My Daily Timebox"
-			model="ir.ui.menu"
+			model="project.gtd.timebox"
 			name="project.gtd.timebox.daily"
 			multi="True"
 			id="open_gtd_timebox_daily"/>
diff --git a/addons/sale/security/ir.model.access.csv b/addons/sale/security/ir.model.access.csv
index 31c68c7c885..ea8d09e22bd 100644
--- a/addons/sale/security/ir.model.access.csv
+++ b/addons/sale/security/ir.model.access.csv
@@ -1,5 +1,7 @@
-id,name,model_id:id,group_id:id,perm_read,perm_write,perm_create,perm_unlink
-access_sale_shop,sale.shop,model_sale_shop,group_sale_user,1,0,0,0
-access_sale_order,sale.order,model_sale_order,group_sale_user,1,1,1,0
-access_sale_order_line,sale.order.line,model_sale_order_line,group_sale_user,1,1,1,0
-access_sale_shop_admin,sale.shop,model_sale_shop,base.group_system,1,1,1,1
+"id","name","model_id:id","group_id:id","perm_read","perm_write","perm_create","perm_unlink"
+"access_sale_shop","sale.shop","model_sale_shop","group_sale_user",1,0,0,0
+"access_sale_order","sale.order","model_sale_order","group_sale_user",1,1,1,0
+"access_sale_order_line","sale.order.line","model_sale_order_line","group_sale_user",1,1,1,0
+"access_sale_shop_admin","sale.shop","model_sale_shop","base.group_system",1,1,1,1
+"access_sale_config_picking_policy","sale.config.picking_policy","model_sale_config_picking_policy","group_sale_user",1,0,0,0
+"access_sale_config_picking_policy_manager","sale.config.picking_policy_manager","model_sale_config_picking_policy","group_sale_manager",1,1,1,1
diff --git a/addons/sale/security/sale_security.xml b/addons/sale/security/sale_security.xml
index 765c151a47e..9778e607ecf 100644
--- a/addons/sale/security/sale_security.xml
+++ b/addons/sale/security/sale_security.xml
@@ -1,6 +1,6 @@
 <?xml version="1.0" encoding="utf-8"?>
 <openerp>
-<data noupdate="1">
+<data noupdate="0">
 
     <record id="group_sale_manager" model="res.groups">
         <field name="name">Sale / Manager</field>
@@ -9,5 +9,11 @@
         <field name="name">Sale / Salesman</field>
     </record>
 
+
+	<record model='ir.ui.menu' id='menu_shop_configuration'>
+		<field name="groups_id" eval="[(6,0,[ref('group_sale_manager')])]"/>
+	</record>
+
+
 </data>
 </openerp>
diff --git a/addons/sale_journal/security/ir.model.access.csv b/addons/sale_journal/security/ir.model.access.csv
index 513e65e741e..d792b22c8b7 100644
--- a/addons/sale_journal/security/ir.model.access.csv
+++ b/addons/sale_journal/security/ir.model.access.csv
@@ -1,10 +1,11 @@
-id,name,model_id:id,group_id:id,perm_read,perm_write,perm_create,perm_unlink
-access_sale_journal_invoice_type_stats,sale_journal.invoice.type.stats,model_sale_journal_invoice_type_stats,sale.group_sale_user,1,0,0,0
-access_sale_journal_picking_stats,sale_journal.picking.stats,model_sale_journal_picking_stats,sale.group_sale_user,1,0,0,0
-access_sale_journal_invoice_type,sale_journal.invoice.type,model_sale_journal_invoice_type,sale.group_sale_user,1,0,0,0
-access_sale_journal_sale_journal,sale_journal.sale.journal,model_sale_journal_sale_journal,sale.group_sale_user,1,0,0,0
-access_sale_journal_picking_journal,sale_journal.picking.journal,model_sale_journal_picking_journal,sale.group_sale_user,1,0,0,0
-access_sale_journal_sale_stats,sale_journal.sale.stats,model_sale_journal_sale_stats,sale.group_sale_user,1,0,0,0
-access_sale_journal_invoice_type_manager,sale_journal.invoice.type.manager,model_sale_journal_invoice_type,sale.group_sale_manager,1,1,1,1
-access_sale_journal_sale_journal_manager,sale_journal.sale.journal.manager,model_sale_journal_sale_journal,sale.group_sale_manager,1,1,1,1
-access_sale_journal_picking_journal_manager,sale_journal.picking.journal.manager,model_sale_journal_picking_journal,sale.group_sale_manager,1,1,1,1
+"id","name","model_id:id","group_id:id","perm_read","perm_write","perm_create","perm_unlink"
+"access_sale_journal_invoice_type_stats","sale_journal.invoice.type.stats","model_sale_journal_invoice_type_stats","sale.group_sale_user",1,0,0,0
+"access_sale_journal_picking_stats","sale_journal.picking.stats","model_sale_journal_picking_stats","sale.group_sale_user",1,0,0,0
+"access_sale_journal_invoice_type","sale_journal.invoice.type","model_sale_journal_invoice_type","sale.group_sale_user",1,0,0,0
+"access_sale_journal_invoice_type_partner_manager","sale_journal.invoice.type partner manager","model_sale_journal_invoice_type","base.group_partner_manager",1,0,0,0
+"access_sale_journal_sale_journal","sale_journal.sale.journal","model_sale_journal_sale_journal","sale.group_sale_user",1,0,0,0
+"access_sale_journal_picking_journal","sale_journal.picking.journal","model_sale_journal_picking_journal","sale.group_sale_user",1,0,0,0
+"access_sale_journal_sale_stats","sale_journal.sale.stats","model_sale_journal_sale_stats","sale.group_sale_user",1,0,0,0
+"access_sale_journal_invoice_type_manager","sale_journal.invoice.type.manager","model_sale_journal_invoice_type","sale.group_sale_manager",1,1,1,1
+"access_sale_journal_sale_journal_manager","sale_journal.sale.journal.manager","model_sale_journal_sale_journal","sale.group_sale_manager",1,1,1,1
+"access_sale_journal_picking_journal_manager","sale_journal.picking.journal.manager","model_sale_journal_picking_journal","sale.group_sale_manager",1,1,1,1
diff --git a/addons/stock/__terp__.py b/addons/stock/__terp__.py
index e80312a2097..fbcb5e32b6b 100644
--- a/addons/stock/__terp__.py
+++ b/addons/stock/__terp__.py
@@ -36,8 +36,6 @@
     "init_xml" : [],
     "demo_xml" : ["stock_demo.xml"],
     "update_xml" : [
-        "security/stock_security.xml",
-        "security/ir.model.access.csv",
         "stock_workflow.xml", 
         "stock_data.xml", 
         "stock_incoterms.xml",
@@ -49,6 +47,8 @@
         "product_view.xml",
         "partner_view.xml",
         "report_stock_view.xml",
+        "security/stock_security.xml",
+        "security/ir.model.access.csv",
     ],
     "active": False,
     "installable": True
diff --git a/addons/stock/security/ir.model.access.csv b/addons/stock/security/ir.model.access.csv
index da20aa0d1fe..fa55a60b4ee 100644
--- a/addons/stock/security/ir.model.access.csv
+++ b/addons/stock/security/ir.model.access.csv
@@ -1,16 +1,16 @@
-id,name,model_id:id,group_id:id,perm_read,perm_write,perm_create,perm_unlink
-access_stock_incoterms_system,stock.incoterms.system,model_stock_incoterms,base.group_system,1,1,1,1
-access_stock_warehouse_system,stock.warehouse.system,model_stock_warehouse,base.group_system,1,1,1,1
-access_stock_location_system,stock.location.system,model_stock_location,base.group_system,1,1,1,1
-access_stock_incoterms,stock.incoterms,model_stock_picking_move_wizard,base.group_system,1,0,0,0
-access_stock_warehouse,stock.warehouse,model_stock_picking_move_wizard,base.group_system,1,0,0,0
-access_stock_location,stock.location,model_stock_picking_move_wizard,base.group_system,1,0,0,0
-access_stock_picking_move_wizard,stock.picking.move.wizard,model_stock_picking_move_wizard,stock.group_stock_user,1,0,0,0
-access_stock_tracking,stock.tracking,model_stock_tracking,stock.group_stock_user,1,1,1,0
-access_stock_picking,stock.picking,model_stock_picking,stock.group_stock_user,1,1,1,1
-access_stock_production_lot,stock.production.lot,model_stock_production_lot,stock.group_stock_user,1,1,1,0
-access_stock_production_lot_revision,stock.production.lot.revision,model_stock_production_lot_revision,stock.group_stock_user,1,1,1,1
-access_stock_move,stock.move,model_stock_move,stock.group_stock_user,1,1,1,0
-access_stock_inventory,stock.inventory,model_stock_inventory,stock.group_stock_user,1,1,1,1
-access_stock_inventory_line,stock.inventory.line,model_stock_inventory_line,stock.group_stock_user,1,1,1,1
-access_stock_report_prodlots,stock.report.prodlots,model_stock_report_prodlots,stock.group_stock_user,1,0,0,0
+"id","name","model_id:id","group_id:id","perm_read","perm_write","perm_create","perm_unlink"
+"access_stock_incoterms_all","stock.incoterms all","model_stock_incoterms",,1,0,0,0
+"access_stock_warehouse_manager","stock.warehouse.manager","model_stock_warehouse","stock.group_stock_manager",1,1,1,1
+"access_stock_warehouse_user","stock.warehouse.user","model_stock_warehouse","stock.group_stock_user",1,0,0,0
+"access_stock_location_manager","stock.location.manager","model_stock_location","stock.group_stock_manager",1,1,1,1
+"access_stock_location_user","stock.location.user","model_stock_location","stock.group_stock_user",1,0,0,0
+"access_stock_location_partner_manager","stock.location partner manager","model_stock_location","base.group_partner_manager",1,0,0,0
+"access_stock_picking_move_wizard","stock.picking.move.wizard","model_stock_picking_move_wizard","stock.group_stock_user",1,1,1,1
+"access_stock_tracking","stock.tracking","model_stock_tracking","stock.group_stock_user",1,1,1,0
+"access_stock_picking","stock.picking","model_stock_picking","stock.group_stock_user",1,1,1,1
+"access_stock_production_lot","stock.production.lot","model_stock_production_lot","stock.group_stock_user",1,1,1,0
+"access_stock_production_lot_revision","stock.production.lot.revision","model_stock_production_lot_revision","stock.group_stock_user",1,1,1,1
+"access_stock_move","stock.move","model_stock_move","stock.group_stock_user",1,1,1,0
+"access_stock_inventory","stock.inventory","model_stock_inventory","stock.group_stock_user",1,1,1,1
+"access_stock_inventory_line","stock.inventory.line","model_stock_inventory_line","stock.group_stock_user",1,1,1,1
+"access_stock_report_prodlots","stock.report.prodlots","model_stock_report_prodlots","stock.group_stock_manager",1,0,0,0
diff --git a/addons/stock/security/stock_security.xml b/addons/stock/security/stock_security.xml
index 6bd063ed388..f3f28df553f 100644
--- a/addons/stock/security/stock_security.xml
+++ b/addons/stock/security/stock_security.xml
@@ -1,6 +1,6 @@
 <?xml version="1.0" encoding="utf-8"?>
 <openerp>
-<data noupdate="1">
+<data noupdate="0">
 
     <record id="group_stock_manager" model="res.groups">
         <field name="name">Stock / Manager</field>
@@ -9,5 +9,13 @@
         <field name="name">Stock / Worker</field>
     </record>
 
+	<record model='ir.ui.menu' id='menu_stock_root'>
+		<field name="groups_id" eval="[(6,0,[ref('group_stock_manager'),ref('group_stock_user')])]"/>
+	</record>
+
+	<record model='ir.ui.menu' id='menu_stock_configuration'>
+		<field name="groups_id" eval="[(6,0,[ref('group_stock_manager')])]"/>
+	</record>
+
 </data>
 </openerp>
diff --git a/addons/stock_location/__terp__.py b/addons/stock_location/__terp__.py
index 197eecedd76..cc9aaf3b24b 100644
--- a/addons/stock_location/__terp__.py
+++ b/addons/stock_location/__terp__.py
@@ -18,7 +18,9 @@ This module may be usefull for different purposes:
     """,
     "init_xml" : [],
     "demo_xml" : [],
-    "update_xml" : ["stock_view.xml"],
+    "update_xml" : ["stock_view.xml",
+					"security/ir.model.access.csv",
+				   ],
     "active": False,
     "installable": True
 }
diff --git a/addons/stock_location/security/ir.model.access.csv b/addons/stock_location/security/ir.model.access.csv
new file mode 100644
index 00000000000..30cf35afae7
--- /dev/null
+++ b/addons/stock_location/security/ir.model.access.csv
@@ -0,0 +1,3 @@
+"id","name","model_id:id","group_id:id","perm_read","perm_write","perm_create","perm_unlink"
+"access_stock_location_path_user","stock location path user","model_stock_location_path","stock.group_stock_user",1,0,0,0
+"access_stock_location_path_manager","stock location path manager","model_stock_location_path","stock.group_stock_manager",1,1,1,1