From 8bd6074f03232926d679662a4d8de07a8cef8ddc Mon Sep 17 00:00:00 2001
From: Damien Bouvy <dbo@odoo.com>
Date: Fri, 7 Aug 2015 09:14:59 +0200
Subject: [IMP] project,project_issue,project_timesheet,project_issue_sheet:
 project visibility and access rights modifications [REM] portal_project: move
 ALL the things - move portal access rights from portal_project  and
 website_project_issue to project and project_issue - move portal menuitems
 back to their respective module - remove public visibility of projects -
 adapt demo data to have a 'Demo Portal' project - add correct access rights
 for account.analytic.line for portal users - small view tweak (do not display
 'timesheet' tab if one can't see antyhing in it anyway)

---
 .../security/project_issue_security.xml            | 28 ++++++++++++++++++++--
 1 file changed, 26 insertions(+), 2 deletions(-)

(limited to 'addons/project_issue/security/project_issue_security.xml')

diff --git a/addons/project_issue/security/project_issue_security.xml b/addons/project_issue/security/project_issue_security.xml
index ea7674ea794..af8924c5697 100644
--- a/addons/project_issue/security/project_issue_security.xml
+++ b/addons/project_issue/security/project_issue_security.xml
@@ -10,10 +10,10 @@
         </record>
 
         <record model="ir.rule" id="issue_user_rule">
-            <field name="name">Project/Issue: employees: public or employee or (followers and following)</field>
+            <field name="name">Project/Issue: employees: employee or (followers and following)</field>
             <field name="model_id" ref="model_project_issue"/>
             <field name="domain_force">['|',
-                                            ('project_id.privacy_visibility', 'in', ['public', 'employees']),
+                                            ('project_id.privacy_visibility', '=', 'employees'),
                                             '&amp;',
                                                 ('project_id.privacy_visibility', '=', 'followers'),
                                                 ('message_follower_ids', 'in', [user.partner_id.id]),
@@ -21,5 +21,29 @@
             <field name="groups" eval="[(4,ref('base.group_user'))]"/>
         </record>
 
+        <record id="portal_issue_rule" model="ir.rule">
+            <field name="name">Project/Issue: portal users: (portal and colleagues following) or (followers and following)</field>
+            <field name="model_id" ref="project_issue.model_project_issue"/>
+            <field name="domain_force">['|',
+                                            '&amp;',
+                                                ('project_id.privacy_visibility', '=', 'portal'),
+                                                ('message_follower_ids', 'child_of', [user.partner_id.commercial_partner_id.id]),
+                                            '&amp;',
+                                                ('project_id.privacy_visibility', '=', 'followers'),
+                                                ('message_follower_ids', 'in', [user.partner_id.id]),
+                                        ]</field>
+            <field name="groups" eval="[(4, ref('base.group_portal'))]"/>
+        </record>
+
+        <record model="ir.rule" id="project_issue.issue_user_rule">
+            <field name="name">Project/Issue: employees: portal, employee or (followers and following)</field>
+            <field name="domain_force">['|',
+                                            ('project_id.privacy_visibility', 'in', ['portal', 'employees']),
+                                            '&amp;',
+                                                ('project_id.privacy_visibility', '=', 'followers'),
+                                                ('message_follower_ids', 'in', [user.partner_id.id]),
+                                        ]</field>
+        </record>
+
     </data>
 </openerp>
-- 
cgit v1.2.3