summaryrefslogtreecommitdiff
path: root/odoo/addons/base/security/base_security.xml
diff options
context:
space:
mode:
authorChristophe Simonis <chs@odoo.com>2018-05-24 16:31:23 +0200
committerChristophe Simonis <chs@odoo.com>2018-05-24 16:31:23 +0200
commit299b613da355a94a33f0db1bbe7820fe6e8fd8f1 (patch)
tree7c7eabe02ad9e231d1c17469cde278624d64149a /odoo/addons/base/security/base_security.xml
parent682ae1cc64e663ef46464083e86916106434d716 (diff)
parent919a1af93601f3873b78c755575cf0486da24e4e (diff)
[MERGE] forward port branch 9.0 up to 919a1af9360
Diffstat (limited to 'odoo/addons/base/security/base_security.xml')
-rw-r--r--odoo/addons/base/security/base_security.xml35
1 files changed, 35 insertions, 0 deletions
diff --git a/odoo/addons/base/security/base_security.xml b/odoo/addons/base/security/base_security.xml
index 6bbc547c918..ff22b286ac9 100644
--- a/odoo/addons/base/security/base_security.xml
+++ b/odoo/addons/base/security/base_security.xml
@@ -49,6 +49,10 @@
<field name="groups_id" eval="[(4,ref('base.group_partner_manager'))]"/>
</record>
+ <record id="group_private_addresses" model="res.groups">
+ <field name="name">Access to Private Addresses</field>
+ </record>
+
<!--
A group dedicated to the portal users, making groups
restrictions more convenient.
@@ -143,6 +147,37 @@
<field name="domain_force">['|',('company_id','=',False),('company_id','child_of',[user.company_id.id])]</field>
</record>
+ <!-- Security restriction for private addresses -->
+ <record id="res_partner_rule_private_employee" model="ir.rule">
+ <field name="name">res.partner.rule.private.employee</field>
+ <field name="model_id" ref="base.model_res_partner"/>
+ <field name="domain_force">
+ [('type', '!=', 'private')]
+ </field>
+ <field name="groups" eval="[
+ (4, ref('base.group_user')),
+ ]"/>
+ <field name="perm_read" eval="True"/>
+ <field name="perm_write" eval="False"/>
+ <field name="perm_create" eval="False"/>
+ <field name="perm_unlink" eval="False"/>
+ </record>
+ <!-- Relex previous rule for group_private_addresses -->
+ <record id="res_partner_rule_private_group" model="ir.rule">
+ <field name="name">res.partner.rule.private.group</field>
+ <field name="model_id" ref="base.model_res_partner"/>
+ <field name="domain_force">
+ [('type', '=', 'private')]
+ </field>
+ <field name="groups" eval="[
+ (4, ref('base.group_private_addresses'))
+ ]"/>
+ <field name="perm_read" eval="True"/>
+ <field name="perm_write" eval="False"/>
+ <field name="perm_create" eval="False"/>
+ <field name="perm_unlink" eval="False"/>
+ </record>
+
</data>
</odoo>