summaryrefslogtreecommitdiff
path: root/addons/resource/security/resource_security.xml
diff options
context:
space:
mode:
authorstephanchrst <stephanchrst@gmail.com>2022-05-10 21:51:50 +0700
committerstephanchrst <stephanchrst@gmail.com>2022-05-10 21:51:50 +0700
commit3751379f1e9a4c215fb6eb898b4ccc67659b9ace (patch)
treea44932296ef4a9b71d5f010906253d8c53727726 /addons/resource/security/resource_security.xml
parent0a15094050bfde69a06d6eff798e9a8ddf2b8c21 (diff)
initial commit 2
Diffstat (limited to 'addons/resource/security/resource_security.xml')
-rw-r--r--addons/resource/security/resource_security.xml30
1 files changed, 30 insertions, 0 deletions
diff --git a/addons/resource/security/resource_security.xml b/addons/resource/security/resource_security.xml
new file mode 100644
index 00000000..c0ccaac3
--- /dev/null
+++ b/addons/resource/security/resource_security.xml
@@ -0,0 +1,30 @@
+<?xml version="1.0" encoding="utf-8"?>
+<odoo noupdate="1">
+
+ <record model="ir.rule" id="resource_calendar_leaves_rule_group_user_create">
+ <field name="name">resource.calendar.leaves: employee reads own or global</field>
+ <field name="model_id" ref="model_resource_calendar_leaves"/>
+ <field name="groups" eval="[(4, ref('base.group_user'))]"/>
+ <field name="domain_force">['|', ('resource_id', '=', False), ('resource_id.user_id', 'in', [False, user.id])]</field>
+ <field name="perm_write" eval="False"/>
+ <field name="perm_create" eval="False"/>
+ <field name="perm_unlink" eval="False"/>
+ </record>
+
+ <record model="ir.rule" id="resource_calendar_leaves_rule_group_user_modify">
+ <field name="name">resource.calendar.leaves: employee modifies own</field>
+ <field name="model_id" ref="model_resource_calendar_leaves"/>
+ <field name="groups" eval="[(4, ref('base.group_user'))]"/>
+ <field name="domain_force">[('resource_id', '!=', False), ('resource_id.user_id', 'in', [False, user.id])]</field>
+ <field name="perm_read" eval="False"/>
+ </record>
+
+ <record model="ir.rule" id="resource_calendar_leaves_rule_group_admin_modify">
+ <field name="name">resource.calendar.leaves: admin modifies global</field>
+ <field name="model_id" ref="model_resource_calendar_leaves"/>
+ <field name="groups" eval="[(4, ref('base.group_erp_manager'))]"/>
+ <field name="domain_force">[('resource_id', '=', False)]</field>
+ <field name="perm_read" eval="False"/>
+ </record>
+
+</odoo>