[REF] openerp: move `openerp` to `odoo`

1 files changed, 148 insertions, 0 deletions

diff --git a/odoo/addons/base/security/base_security.xml b/odoo/addons/base/security/base_security.xml
new file mode 100644
index 00000000000..6bbc547c918
--- /dev/null
+++ b/odoo/addons/base/security/base_security.xml
@@ -0,0 +1,148 @@
+<?xml version="1.0"?>
+<odoo>
+    <data>
+
+        <!--
+            Users Groups
+            Note that the field 'category_id' is set later in
+            base/module/module_data.xml
+        -->
+        <record model="res.groups" id="group_erp_manager">
+            <field name="name">Access Rights</field>
+        </record>
+
+        <record model="res.groups" id="group_system">
+            <field name="name">Settings</field>
+            <field name="implied_ids" eval="[(4, ref('group_erp_manager'))]"/>
+            <field name="users" eval="[(4, ref('base.user_root'))]"/>
+        </record>
+
+        <record model="res.groups" id="group_user">
+            <field name="name">Employee</field>
+        </record>
+
+        <record id="default_user" model="res.users">
+            <field name="groups_id" eval="[(4,ref('base.group_user'))]"/>
+        </record>
+
+        <record model="res.groups" id="group_multi_company">
+            <field name="name">Multi Companies</field>
+        </record>
+
+        <record model="res.groups" id="group_multi_currency">
+            <field name="name">Multi Currencies</field>
+        </record>
+
+        <record model="res.groups" id="group_no_one">
+            <field name="name">Technical Features</field>
+        </record>
+        <record model="res.groups" id="group_user">
+            <field name="implied_ids" eval="[(4, ref('group_no_one'))]"/>
+            <field name="users" eval="[(4, ref('base.user_root'))]"/>
+        </record>
+
+        <record model="res.groups" id="group_partner_manager">
+            <field name="name">Contact Creation</field>
+        </record>
+
+        <record id="default_user" model="res.users">
+            <field name="groups_id" eval="[(4,ref('base.group_partner_manager'))]"/>
+        </record>
+
+        <!--
+            A group dedicated to the portal users, making groups
+            restrictions more convenient.
+        -->
+        <record id="group_portal" model="res.groups">
+            <field name="name">Portal</field>
+            <field name="comment">Portal members have specific access rights (such as record rules and restricted menus).
+                They usually do not belong to the usual Odoo groups.</field>
+        </record>
+        <!--
+            A group dedicated to the public user only, making groups
+            restrictions more convenient.
+        -->
+        <record id="group_public" model="res.groups">
+            <field name="name">Public</field>
+            <field name="comment">Public users have specific access rights (such as record rules and restricted menus).
+                They usually do not belong to the usual Odoo groups.</field>
+        </record>
+
+        <record id="public_user" model="res.users">
+            <field name="groups_id" eval="[(4, ref('base.group_public'))]"/>
+        </record>
+
+    </data>
+    <data noupdate="1">
+        <record model="ir.rule" id="res_users_log_rule">
+            <field name="name">res.users.log per user</field>
+            <field name="model_id" ref="model_res_users_log"/>
+            <field name="domain_force">[('create_uid','=', user.id)]</field>
+            <field name="perm_read" eval="False"/>
+        </record>
+
+        <record model="ir.rule" id="res_partner_rule">
+            <field name="name">res.partner company</field>
+            <field name="model_id" ref="model_res_partner"/>
+            <!--
+                Show partners from ancestors and descendants companies
+                (or company-less), this is usually a better default for
+                multicompany setups.
+            -->
+            <field name="domain_force">['|','|',('company_id.child_ids','child_of',[user.company_id.id]),('company_id','child_of',[user.company_id.id]),('company_id','=',False)]</field>
+            <field name="active" eval="False"/>
+        </record>
+
+        <record model="ir.rule" id="res_partner_portal_public_rule">
+            <field name="name">res_partner: portal/public: read access on my commercial partner</field>
+            <field name="model_id" ref="base.model_res_partner"/>
+            <field name="domain_force">[('id', 'child_of', user.commercial_partner_id.id)]</field>
+            <field name="groups" eval="[(4, ref('base.group_portal')), (4, ref('base.group_public'))]"/>
+            <field name="perm_create" eval="False"/>
+            <field name="perm_unlink" eval="False"/>
+            <field name="perm_write" eval="False"/>
+        </record>
+
+        <record model="ir.rule" id="ir_values_default_rule">
+            <field name="name">Defaults: alter personal values only</field>
+            <field name="model_id" ref="model_ir_values"/>
+            <field name="domain_force">[('key','=','default'),('user_id','=',user.id)]</field>
+            <field name="perm_read" eval="False"/>
+        </record>
+
+        <!-- Used for dashboard customizations, users should only be able to edit their own dashboards -->
+        <record model="ir.rule" id="ir_ui_view_custom_personal">
+            <field name="name">ir.ui.view_custom rule</field>
+            <field name="model_id" ref="model_ir_ui_view_custom"/>
+            <field name="domain_force">[('user_id','=',user.id)]</field>
+        </record>
+
+	<record id="res_partner_bank_rule" model="ir.rule">
+	    <field name="name">Partner bank company rule</field>
+	    <field name="model_id" ref="model_res_partner_bank"/>
+	    <field name="global" eval="True"/>
+            <!--
+                Same as res_partner above.
+            -->
+            <field name="domain_force">['|','|',('company_id.child_ids','child_of',[user.company_id.id]),('company_id','child_of',[user.company_id.id]),('company_id','=',False)]</field>
+	</record>
+
+    <record id="ir_config_parameter_rule" model="ir.rule">
+        <field name="name">ICP read rule</field>
+        <field name="model_id" ref="model_ir_config_parameter"/>
+        <field name="domain_force">['|',('group_ids','in', [g.id for g in user.groups_id]), ('group_ids','=',False)]</field>
+        <field name="perm_read" eval="True"/>
+        <field name="perm_create" eval="False"/>
+        <field name="perm_write" eval="False"/>
+        <field name="perm_unlink" eval="False"/>
+    </record>
+
+        <record id="res_currency_rate_rule" model="ir.rule">
+            <field name="name">multi-company currency rate rule</field>
+            <field name="model_id" ref="model_res_currency_rate"/>
+            <field name="domain_force">['|',('company_id','=',False),('company_id','child_of',[user.company_id.id])]</field>
+        </record>
+
+    </data>
+</odoo>
+