summaryrefslogtreecommitdiff
path: root/addons/sale_expense/security
diff options
context:
space:
mode:
authorstephanchrst <stephanchrst@gmail.com>2022-05-10 21:51:50 +0700
committerstephanchrst <stephanchrst@gmail.com>2022-05-10 21:51:50 +0700
commit3751379f1e9a4c215fb6eb898b4ccc67659b9ace (patch)
treea44932296ef4a9b71d5f010906253d8c53727726 /addons/sale_expense/security
parent0a15094050bfde69a06d6eff798e9a8ddf2b8c21 (diff)
initial commit 2
Diffstat (limited to 'addons/sale_expense/security')
-rw-r--r--addons/sale_expense/security/ir.model.access.csv2
-rw-r--r--addons/sale_expense/security/sale_expense_security.xml17
2 files changed, 19 insertions, 0 deletions
diff --git a/addons/sale_expense/security/ir.model.access.csv b/addons/sale_expense/security/ir.model.access.csv
new file mode 100644
index 00000000..228b1262
--- /dev/null
+++ b/addons/sale_expense/security/ir.model.access.csv
@@ -0,0 +1,2 @@
+id,name,model_id:id,group_id:id,perm_read,perm_write,perm_create,perm_unlink
+access_sale_order_employee,sale.order.employee.expense,sale.model_sale_order,base.group_user,0,0,0,0 \ No newline at end of file
diff --git a/addons/sale_expense/security/sale_expense_security.xml b/addons/sale_expense/security/sale_expense_security.xml
new file mode 100644
index 00000000..48edc9cf
--- /dev/null
+++ b/addons/sale_expense/security/sale_expense_security.xml
@@ -0,0 +1,17 @@
+<?xml version="1.0" encoding="utf-8"?>
+<odoo noupdate="1">
+
+ <!-- Required simply to set SO on expense before submitting. Used to avoid crash on name_get/name_search -->
+ <record id="sale_order_rule_expense_user" model="ir.rule">
+ <field name="name">Expense Employee can read confirmed SO</field>
+ <field ref="sale.model_sale_order" name="model_id"/>
+ <field name="domain_force">[('state', '=', 'sale')]</field>
+ <field name="groups" eval="[(4, ref('base.group_user'))]"/>
+ <field name="perm_read" eval="True"/>
+ <field name="perm_write" eval="False"/>
+ <field name="perm_create" eval="False"/>
+ <field name="perm_unlink" eval="False"/>
+ <field name="active" eval="False"/> <!-- opw-2027005: this rules breaks sale "see own document" -->
+ </record>
+
+</odoo>