summaryrefslogtreecommitdiff
path: root/addons/payment/security/payment_security.xml
diff options
context:
space:
mode:
Diffstat (limited to 'addons/payment/security/payment_security.xml')
-rw-r--r--addons/payment/security/payment_security.xml24
1 files changed, 24 insertions, 0 deletions
diff --git a/addons/payment/security/payment_security.xml b/addons/payment/security/payment_security.xml
new file mode 100644
index 00000000000..7bae346c648
--- /dev/null
+++ b/addons/payment/security/payment_security.xml
@@ -0,0 +1,24 @@
+<?xml version="1.0" encoding="utf-8"?>
+<openerp>
+ <data noupdate="1">
+
+ <record id="payment_transaction_user_rule" model="ir.rule">
+ <field name="name">Access own payment transaction only</field>
+ <field name="model_id" ref="payment.model_payment_transaction"/>
+ <field name="domain_force">[
+ '|',
+ ('partner_id','=',False),
+ ('partner_id','=',user.partner_id.id)
+ ]</field>
+ <field name="groups" eval="[(4, ref('base.group_user')), (4, ref('base.group_portal')), (4, ref('base.group_public'))]"/>
+ </record>
+
+ <record id="payment_transaction_salesman_rule" model="ir.rule">
+ <field name="name">Access every payment transaction</field>
+ <field name="model_id" ref="payment.model_payment_transaction"/>
+ <field name="domain_force">[(1, '=', 1)]</field>
+ <field name="groups" eval="[(4, ref('base.group_sale_salesman'))]"/>
+ </record>
+
+ </data>
+</openerp>