summaryrefslogtreecommitdiff
path: root/addons/hr_holidays/security/ir.model.access.csv
AgeCommit message (Collapse)Author
2020-04-20[FIX] hr_holidays: "Everyone" view on calendar_eventKevin Baptiste
Purpose ======= Avoid to show to much information to leave responsibles. Specification ============= - Dynamically add/remove the leave_manager_ids on the group group_hr_holidays_responsible, on employee creation/modification - Retrict the available employees when creating a leave. For manager/users : Everyone. For responsibles: The employee for who the user is responsible. Otherwise: Only me. - Don't obfuscate the leave name on employees for who I'm the responsible. - Add a new SQL view for "Everyone" report. To select only the information we want to share instead of showing the hr.leave model directly. closes odoo/odoo#47659 closes odoo/odoo#49765 Taskid: 2206862 Related: odoo/enterprise#9239 Related: odoo/enterprise#10021 X-original-commit: 781147dcaf1552b8f2ab687ed73034b8fd1f7352 Signed-off-by: Yannick Tivisse (yti) <yti@odoo.com>
2020-02-04[ADD] *: add ir.model.access on all transient modelsMartin Trigaux
Following changes needing ir.model.access on transient models too. Remove groups declaration on the action to move it to ir.model.access when possible. Rules are strict by default with no unlink access by default and high priviledge asked. Adaptations may be needed later. Write access is given as a wizard may need to be modified in case the action triggers an error and the user has to correct a value account*: use account.group_account_user for all transient by default remove account.print.journal relic stock*: use stock.group_stock_user by default survey: survey user can send invitations mail: allow any employee to execute wizards additional verifications are made to ensure they are executed only on the documents the user has access to you give portal access to mail.compose.message as portal still does some actions like posting messages on the forum add ir.rule to avoid reading somebody else messages increase the query count because of undeterminist count crm: saleman for lead2opp, manager for massmailing partner manager for actions linked to partners avoid a write in test_lead_lost sms: any employee can send sms mrp: mrp user can execute wizards give unlink access as making write during do_produce operation base_import: employees can import files delivery: stock user can deliver event_sale: sale user can configure the wizards event user inherit from sale rights gamification: employee can give badge google_service: resolve FIXME hr: add specific rights manager can set a plan according to group on button anyone who can write on an employee can register a departure hr_expense: set rights based on buttons hr_holidays: an approver can make a summary report hr_recruitment: recruiter can refuse a candidate hr_timesheet: can use the wizard if can create a timesheet l10n_eu_service: managers can create fiscal positions mass_mailing: same group as on mass.mailing.list membership: accountant can create invoice from membership payment: accountant can create a link as the source is an account.move keep the payment.acquirer.onboarding.wizard to system user only as it is called during company configuration point_of_sale: PoS manager only can use wizards never create closing_balance_confirm_wizard records product_expiry: stock user has rights on stock.picking product_margin: access from accounting menus repair: same rules as for above models sale: set ir.rule for self wizard only add rule from model introduced in payment to add salesman group sale_crm: saleman can create a quotation from a lead sale_coupon: any saleman can generate coupon add self ir.rule sale_product_configurator: salesman can select product variants snailmail: employee can send letters website: designers can write on website website_crm_partner_assign: same rule as group on action website_sale: sale ACL as for payment.acquirer.onboarding.wizard website_slides: anyone can send invitation base: base.language.*: allow employee (cf lang_install) change.password.user: can not read change password wizard of other users test.*: no access is needed Courtesy of Damien Bouvy, William Andre and Antoine Prieëls for review of acl
2018-04-09[IMP] hr_holidays: improves access rights of manager/officerRomainLibert
We need to have a clear distinction between holidays managers and holidays officers. For this a number of improvements have been done in hr_holidays. For more informations about the changes see the docstrings of hr.leave and hr.leave.allocation. Task #34222 Closes #19270
2018-03-27[IMP] hr_holidays: improve activity management on leave modelThibault Delavallée
This commit improves leave request and allocation management through a better integration of activities and addition of automated activities. Several things are done in this commit : * leave and allocation models do not inherit from mail.activity.mixin. This commit adds the inherit so that HR users and managers can now schedule and manage activities on leave and allocation requests. This will help them in their daily job; * automatic activities generation is added for leave and allocation. Activities are generated for approval and second approval. They are also automatically set as done when validating or unlinked when refusing or resetting to avoid bloating users with unnecessary activities; * a menu to configure activity types is added. Indeed HR managers should be able to see and configure activity types related to their job; * filters are added to be able to use the systray and to filter the kanban view based on activities Having automated activities allow to replace some messages and tracking that were implemented to warn people of leave and allocation to approve or validate. This commit therefore * simplifies the tracking as only approved or refused state now trigger a subtype; * removes to approve and to validate subtypes on leave and allocation model as well as their parent subtypes on the department. This allows to simplify chatter a lot in hr_holidays app;
2018-01-15[IMP] hr_holidays : split hr.holidays into hr.leave and hr.leave.allocationRomainLibert
Purpose ======= Have a clear distinction between leave and allocation requests instead of using the same model to mix 2 different concepts. Splitting the model will allow different business code to be run on each model as allocations and leaves are not exactly the same thing; this will add some code but simplify future improvements Specification ============= 1/ Completely separate the models Model hr.holidays has been split into leave.request and leave.allocation. 2/ Make reporting working again by using an SQL view aggregating data from leaves and allocations A new report has been added in order to aggregate datas from both allocations and requests. The views have been modified accordingly.
2016-09-06[IMP] hr_*: Split the HR access rights by applicationYannick Tivisse
PURPOSE ======= For each and every Hr application there should be one user category (One app = one category). SPECIFICATION ============= HR remains as it is : Employee, Officer, Manager Each Application should have 2 access rights: User and Manager. Example for Recruitment: - The user has access to the recruitment process - The manager has access to the job position configuration Each Application should grant the employee user access right (Namely the 'HR Officer')
2016-09-02[FIX] all: remove external ids fakely from baseMartin Trigaux
Several modules defines records with the external ID `base.foo_bar` while it is created inside this module (typically menus and groups). While there is no technical reasons to do so but this may introduce issues: - these records will not be deleted during uninstall - if a language is loaded before the installation of the module, it won't be translated The uninstallation will only remove the records with an external id linked to this module (these would only be removed when removing base). Installing a language before the module will drop the translations not linked to an existing external id (as it can not be resolved). This commit correct all the external ids tagged as from base or other incorrect modules.
2014-01-15[REF] Rename model crm.meeting into calendar.eventjke-openerp
Remove 2 unsused field from calendar.event model (dir,sequence) bzr revid: jke@openerp.com-20140115093805-1g1j1oymyxsb6kgh
2013-12-19[TYPO] Replace base_calendar to calendar in csv securityjke-openerp
bzr revid: jke@openerp.com-20131219160620-kcjrqv0uald99qqe
2013-11-26[FIX] Add right in security of hr_holidays to allow hr user to delete attendeejke-openerp
bzr revid: jke@openerp.com-20131126190610-ow8qwiajddi7gvdy
2013-08-09[IMP] hr_holidays:Thibault Delavallée
- added a workflow transition from refuse to draft, to allow resetting a refused request - resetting is now based on a can_reset field, taht is based on whether it is my own request or I am an hr manager - added an access right on crm_meeting that was preventing hr officers to validate some requests - improved form view to show reset to draft button accordingly - added tests that helped trigerred the various bugs and improvements bzr revid: tde@openerp.com-20130809144752-o21pjbc56o0t8fym
2012-08-31[MERGE] merged branch with leave request improvementsQuentin (OpenERP)
bzr revid: qdp-launchpad@openerp.com-20120831144244-40apxljf6juyv3nv
2012-07-31[IMP]:changed the id,name from 'manager' to 'user'Meera Trambadia
bzr revid: mtr@tinyerp.com-20120731103215-vc0wx0kiy7d8x6ka
2012-07-31[MERGE]: branch merged with lp:openobject-addonsMeera Trambadia
bzr revid: mtr@tinyerp.com-20120731070125-n8mza516sbpta515
2012-07-26[IMP]:improved access rights and added ir.rule for HR/OfficerMeera Trambadia
bzr revid: mtr@tinyerp.com-20120726123517-l9gc3tn9efl8wwep
2012-07-26[FIX] hr_holidays: security fix in the rightsStephane Wirtel
bzr revid: stw@openerp.com-20120726114321-xx4j4acudjmgeoe6
2011-12-12[IMP] Security Rule: removed duplicates due to inheritancies of groupsFabien Pinckaers
bzr revid: fp@tinyerp.com-20111212181113-mhnnbps3ip8ls6pp
2010-12-29[FIX] Cleaning hr holidays reporting and dashbaordsFabien Pinckaers
bzr revid: fp@tinyerp.com-20101229165130-jfr2h23jo7mrjqzu
2010-12-29[IMP] HR employee dashboard in webclientFrançois Degrave
bzr revid: fde@openerp.com-20101229143849-03lpmdpu5fkc6e86
2010-12-28[IMP] access rights, menus for HRFrançois Degrave
bzr revid: fde@openerp.com-20101228153417-ps9ql3h4lij87jx8
2010-10-13[MOD/IMP] hr_holidays : Remove Leave Analysis report and changes in view fileAMP (OpenERP)
bzr revid: amp@tinyerp.com-20101013132317-do4ylbfso07qdc66
2010-10-07[MOD/IMP] hr_* : Usability Improvement in AccessrightsDBR (OpenERP)
bzr revid: dbr@tinyerp.com-20101007071157-z52414z1sz9h85qh
2010-10-06[MOD/IMP] hr_holidays : Usability Improvement in AccessrightsDBR (OpenERP)
bzr revid: dbr@tinyerp.com-20101006135154-oovxhs611nk4tzso
2010-09-23[MOD/IMP]hr_* : Usability Improvement in DashboardsAMP (OpenERP)
bzr revid: amp@tinyerp.com-20100923071913-32cv0gf0l2r61s0x
2010-09-22[IMP]hr_holidays : Usability improvement in gropsAMP (OpenERP)
bzr revid: amp@tinyerp.com-20100922062331-gchm37fo6oq60wgz
2010-09-22[IMP] hr_* : Usability improvementsVir (Open ERP)
bzr revid: vir@tinyerp.com-20100922053937-5gah2r12uvewy210
2010-09-13[MOD]hr_*: usability improvement in access rightsAMP (OpenERP)
bzr revid: amp@tinyerp.com-20100913131824-1au2kx7na9czsh4z
2010-09-06[MOD]hr_* : usability improvement in employee access rightsAMP (OpenERP)
bzr revid: amp@tinyerp.com-20100906063006-gcuxdswiunwokvn4
2010-09-01[MOD] project_timesheet,hr_* : usability improvement in access rightsAMP (OpenERP)
bzr revid: amp@tinyerp.com-20100901132905-hslnywxf4zxogxdo
2010-08-13[MOD/IMP] hr_* : Improvement in access rightsAMP(Open ERP)
bzr revid: vir@tinyerp.com-20100813133645-w8nex9k1he2zjq9h
2010-08-04[MOD/IMP]hr_* modules access right changes in configurationDBR (OpenERP)
bzr revid: dbr@tinyerp.com-20100804133252-vh4vbkhmvsev0pnw
2010-08-04[MOD/IMP]hr_* modules access right changesDBR (OpenERP)
bzr revid: dbr@tinyerp.com-20100804085628-58nplf4yw8zp80dj
2010-08-03[MOD] hr_* :Improvement in hr_* modules groups and accessrightDBR (OpenERP)
bzr revid: dbr@tinyerp.com-20100803131117-jkvf2a7pe955en2u
2010-07-27[MOD] improvement in access rightsAMP (OpenERP)
bzr revid: amp@tinyerp.com-20100727113352-r343qcc2fux21an7
2010-06-28[REM]: Removed access rules for OSV memory objectsUCO (OpenERP)
bzr revid: rpa@tinyerp.com-20100628134938-23kiccr4355jfhmg
2010-06-11[IMP] access rights improvementsFabien Pinckaers
bzr revid: fp@tinyerp.com-20100611125528-mlhkzlditz2awk1k
2010-04-08[IMP] search viewsnel@tinyerp.com
bzr revid: nel@tinyerp.com-20100408142924-j4vvkcbcw20gdtzy
2010-04-07[ADD] access rules for holiday reportsVir (Open ERP)
bzr revid: vir@tinyerp.com-20100407133731-6599szskqnsso9de
2010-03-17[IMP] hr_holidays: improvementsqdp-launchpad@tinyerp.com
bzr revid: qdp-launchpad@tinyerp.com-20100317170926-zyw5frdscx3kpi1p
2010-03-15[ADD] hr_holidays : security rules are addedVir (Open ERP)
bzr revid: vir@tinyerp.com-20100315122750-bofdomun28eqw2ky
2009-12-12[IMP]: Improved some security files for access rules.YSA (OpenERP)
bzr revid: uco@tinyerp.co.in-20091212065410-1pgd5ywl3fyxtqkn
2009-09-24[Merged] stable and trunk addonsHDA (OpenERP)
bzr revid: hda@tinyerp.com-20090924104621-7p53erkfs9xa0bev
2009-03-13hr_holidaysmra (Open ERP)
bzr revid: mra@tinyerp.com-20090313062553-azyc55dpa7d20mit
2009-01-24bugfixFabien Pinckaers
bzr revid: fp@tinyerp.com-20090124131329-635ywxv5i4hdsh16
2009-01-24bugfixFabien Pinckaers
bzr revid: fp@tinyerp.com-20090124020317-pvob47mthxi3omf7
2008-10-21fix access rulesChristophe Simonis
bzr revid: christophe@tinyerp.com-20081021153441-af1qtobtazu7rs28
2008-10-17fix and complete access rulesChristophe Simonis
bzr revid: christophe@tinyerp.com-20081017084109-i1r4zigf7wp3o6i5
2008-09-04Better Security RulesFabien Pinckaers
bzr revid: fp@tinyerp.com-20080903224650-u1oadqv9x75atmyl
2008-09-03Improved SecurityFabien Pinckaers
bzr revid: fp@tinyerp.com-20080903180400-df7l6wxg1zpirmmi