diff options
| author | Christophe Simonis <chs@odoo.com> | 2018-05-25 11:50:02 +0200 |
|---|---|---|
| committer | Christophe Simonis <chs@odoo.com> | 2018-05-25 11:50:02 +0200 |
| commit | 58e35522468d1d4c0674518f785a32be56d2c1a2 (patch) | |
| tree | 8e7ed12dcdf6d59f1b76c400e1db1a3ac882ec0e /odoo/addons/base/security/base_security.xml | |
| parent | b2aab354c4a6bcd37cded7c2d0129d9e1cc5d87d (diff) | |
| parent | 2ca72960001b83c774b00e271266d9326dd5fe04 (diff) | |
[MERGE] forward port branch 11.0 up to 2ca72960001
Diffstat (limited to 'odoo/addons/base/security/base_security.xml')
| -rw-r--r-- | odoo/addons/base/security/base_security.xml | 35 |
1 files changed, 35 insertions, 0 deletions
diff --git a/odoo/addons/base/security/base_security.xml b/odoo/addons/base/security/base_security.xml index 8d03802aadf..f3bf2f908dd 100644 --- a/odoo/addons/base/security/base_security.xml +++ b/odoo/addons/base/security/base_security.xml @@ -1,5 +1,9 @@ <?xml version="1.0"?> <odoo> + <record id="group_private_addresses" model="res.groups"> + <field name="name">Access to Private Addresses</field> + </record> + <data noupdate="1"> <record model="ir.rule" id="res_users_log_rule"> <field name="name">res.users.log per user</field> @@ -69,6 +73,37 @@ <field name="domain_force">['|',('company_id','=',False),('company_id','child_of',[user.company_id.id])]</field> </record> + <!-- Security restriction for private addresses --> + <record id="res_partner_rule_private_employee" model="ir.rule"> + <field name="name">res.partner.rule.private.employee</field> + <field name="model_id" ref="base.model_res_partner"/> + <field name="domain_force"> + [('type', '!=', 'private')] + </field> + <field name="groups" eval="[ + (4, ref('base.group_user')), + ]"/> + <field name="perm_read" eval="True"/> + <field name="perm_write" eval="False"/> + <field name="perm_create" eval="False"/> + <field name="perm_unlink" eval="False"/> + </record> + <!-- Relex previous rule for group_private_addresses --> + <record id="res_partner_rule_private_group" model="ir.rule"> + <field name="name">res.partner.rule.private.group</field> + <field name="model_id" ref="base.model_res_partner"/> + <field name="domain_force"> + [('type', '=', 'private')] + </field> + <field name="groups" eval="[ + (4, ref('base.group_private_addresses')) + ]"/> + <field name="perm_read" eval="True"/> + <field name="perm_write" eval="False"/> + <field name="perm_create" eval="False"/> + <field name="perm_unlink" eval="False"/> + </record> + <!-- Restrict modifications on ir.filters to owner only --> <record id="ir_filters_admin_all_rights_rule" model="ir.rule"> <field name="name">ir.filters.admin.all.rights</field> |