summaryrefslogtreecommitdiff
path: root/addons/survey/security
diff options
context:
space:
mode:
authorstephanchrst <stephanchrst@gmail.com>2022-05-10 21:51:50 +0700
committerstephanchrst <stephanchrst@gmail.com>2022-05-10 21:51:50 +0700
commit3751379f1e9a4c215fb6eb898b4ccc67659b9ace (patch)
treea44932296ef4a9b71d5f010906253d8c53727726 /addons/survey/security
parent0a15094050bfde69a06d6eff798e9a8ddf2b8c21 (diff)
initial commit 2
Diffstat (limited to 'addons/survey/security')
-rw-r--r--addons/survey/security/ir.model.access.csv23
-rw-r--r--addons/survey/security/survey_security.xml184
2 files changed, 207 insertions, 0 deletions
diff --git a/addons/survey/security/ir.model.access.csv b/addons/survey/security/ir.model.access.csv
new file mode 100644
index 00000000..39fec645
--- /dev/null
+++ b/addons/survey/security/ir.model.access.csv
@@ -0,0 +1,23 @@
+id,name,model_id:id,group_id:id,perm_read,perm_write,perm_create,perm_unlink
+access_survey_all,survey.survey.all,model_survey_survey,,0,0,0,0
+access_survey_user,survey.survey.user,model_survey_survey,base.group_user,0,0,0,0
+access_survey_survey_user,survey.survey.survey.user,model_survey_survey,group_survey_user,1,1,1,1
+access_survey_survey_manager,survey.survey.survey.manager,model_survey_survey,group_survey_manager,1,1,1,1
+access_survey_question_all,survey.question.all,model_survey_question,,0,0,0,0
+access_survey_question_user,survey.question.user,model_survey_question,base.group_user,0,0,0,0
+access_survey_question_survey_user,survey.question.survey.user,model_survey_question,group_survey_user,1,1,1,1
+access_survey_question_survey_manager,survey.question.survey.manager,model_survey_question,group_survey_manager,1,1,1,1
+access_survey_question_answer_all,survey.question.answer.all,model_survey_question_answer,,0,0,0,0
+access_survey_question_answer_user,survey.question.answer.user,model_survey_question_answer,base.group_user,0,0,0,0
+access_survey_question_answer_survey_user,survey.question.answer.survey.user,model_survey_question_answer,group_survey_user,1,1,1,1
+access_survey_question_answer_survey_manager,survey.question.answer.survey.manager,model_survey_question_answer,group_survey_manager,1,1,1,1
+access_survey_user_input_all,survey.user_input.all,model_survey_user_input,,0,0,0,0
+access_survey_user_input_user,survey.user_input.user,model_survey_user_input,base.group_user,0,0,0,0
+access_survey_user_input_survey_user,survey.user_input.survey.user,model_survey_user_input,group_survey_user,1,1,1,1
+access_survey_user_input_survey_manager,survey.user_input.survey.manager,model_survey_user_input,group_survey_manager,1,1,1,1
+access_survey_user_input_line_all,survey.user_input.line.all,model_survey_user_input_line,,0,0,0,0
+access_survey_user_input_line_user,survey.user_input.line.user,model_survey_user_input_line,base.group_user,0,0,0,0
+access_survey_user_input_line_survey_user,survey.user_input.line.survey.user,model_survey_user_input_line,group_survey_user,1,1,1,1
+access_survey_user_input_line_survey_manager,survey.user_input.line.survey.manager,model_survey_user_input_line,group_survey_manager,1,1,1,1
+access_gamification_badge_survey_user,gamification.badge.survey.user,model_gamification_badge,group_survey_user,1,1,1,1
+access_survey_invite,access.survey.invite,model_survey_invite,survey.group_survey_user,1,1,1,0
diff --git a/addons/survey/security/survey_security.xml b/addons/survey/security/survey_security.xml
new file mode 100644
index 00000000..a9537b73
--- /dev/null
+++ b/addons/survey/security/survey_security.xml
@@ -0,0 +1,184 @@
+<?xml version="1.0" encoding="utf-8"?>
+<odoo>
+ <data noupdate="1">
+ <record model="ir.module.category" id="base.module_category_marketing_surveys">
+ <field name="description">Helps you manage your survey for review of different-different users.</field>
+ <field name="sequence">20</field>
+ </record>
+
+ <!-- Survey users -->
+ <record model="res.groups" id="group_survey_user">
+ <field name="name">User</field>
+ <field name="category_id" ref="base.module_category_marketing_surveys"/>
+ </record>
+
+ <!-- Survey managers -->
+ <record model="res.groups" id="group_survey_manager">
+ <field name="name">Administrator</field>
+ <field name="category_id" ref="base.module_category_marketing_surveys"/>
+ <field name="implied_ids" eval="[(4, ref('group_survey_user'))]"/>
+ <field name="users" eval="[(4, ref('base.user_root')), (4, ref('base.user_admin'))]"/>
+ </record>
+
+ <record id="base.default_user" model="res.users">
+ <field name="groups_id" eval="[(4,ref('group_survey_manager'))]"/>
+ </record>
+
+ <!-- SURVEY: SURVEY, PAGE, STAGE, QUESTION, LABEL -->
+ <record id="survey_survey_rule_survey_manager" model="ir.rule">
+ <field name="name">Survey: manager: all</field>
+ <field name="model_id" ref="survey.model_survey_survey"/>
+ <field name="domain_force">[(1, '=', 1)]</field>
+ <field name="groups" eval="[(4, ref('group_survey_manager'))]"/>
+ <field name="perm_unlink" eval="1"/>
+ <field name="perm_write" eval="1"/>
+ <field name="perm_read" eval="1"/>
+ <field name="perm_create" eval="1"/>
+ </record>
+ <record id="survey_survey_rule_survey_user_read" model="ir.rule">
+ <field name="name">Survey: officer: read all</field>
+ <field name="model_id" ref="survey.model_survey_survey"/>
+ <field name="domain_force">[(1, '=', 1)]</field>
+ <field name="groups" eval="[(4, ref('group_survey_user'))]"/>
+ <field name="perm_unlink" eval="0"/>
+ <field name="perm_write" eval="0"/>
+ <field name="perm_read" eval="1"/>
+ <field name="perm_create" eval="0"/>
+ </record>
+ <record id="survey_survey_rule_survey_user_cwu" model="ir.rule">
+ <field name="name">Survey: officer: create/write/unlink own only</field>
+ <field name="model_id" ref="survey.model_survey_survey"/>
+ <field name="domain_force">[('create_uid', '=', user.id)]</field>
+ <field name="groups" eval="[(4, ref('group_survey_user'))]"/>
+ <field name="perm_unlink" eval="1"/>
+ <field name="perm_write" eval="1"/>
+ <field name="perm_read" eval="0"/>
+ <field name="perm_create" eval="1"/>
+ </record>
+
+ <record id="survey_question_rule_survey_manager" model="ir.rule">
+ <field name="name">Survey question: manager: all</field>
+ <field name="model_id" ref="survey.model_survey_question"/>
+ <field name="domain_force">[(1, '=', 1)]</field>
+ <field name="groups" eval="[(4, ref('group_survey_manager'))]"/>
+ <field name="perm_unlink" eval="1"/>
+ <field name="perm_write" eval="1"/>
+ <field name="perm_read" eval="1"/>
+ <field name="perm_create" eval="1"/>
+ </record>
+ <record id="survey_question_rule_survey_user_read" model="ir.rule">
+ <field name="name">Survey question: officer: read all</field>
+ <field name="model_id" ref="survey.model_survey_question"/>
+ <field name="domain_force">[(1, '=', 1)]</field>
+ <field name="groups" eval="[(4, ref('group_survey_user'))]"/>
+ <field name="perm_unlink" eval="0"/>
+ <field name="perm_write" eval="0"/>
+ <field name="perm_read" eval="1"/>
+ <field name="perm_create" eval="0"/>
+ </record>
+ <record id="survey_question_rule_survey_user_cw" model="ir.rule">
+ <field name="name">Survey question: officer: create/write/unlink linked to own survey only</field>
+ <field name="model_id" ref="survey.model_survey_question"/>
+ <field name="domain_force">[('survey_id.create_uid', '=', user.id)]</field>
+ <field name="groups" eval="[(4, ref('group_survey_user'))]"/>
+ <field name="perm_unlink" eval="1"/>
+ <field name="perm_write" eval="1"/>
+ <field name="perm_read" eval="0"/>
+ <field name="perm_create" eval="1"/>
+ </record>
+
+ <record id="survey_question_answer_rule_survey_manager" model="ir.rule">
+ <field name="name">Survey question answer: manager: all</field>
+ <field name="model_id" ref="survey.model_survey_question_answer"/>
+ <field name="domain_force">[(1, '=', 1)]</field>
+ <field name="groups" eval="[(4, ref('group_survey_manager'))]"/>
+ <field name="perm_unlink" eval="1"/>
+ <field name="perm_write" eval="1"/>
+ <field name="perm_read" eval="1"/>
+ <field name="perm_create" eval="1"/>
+ </record>
+ <record id="survey_question_answer_rule_survey_user_read" model="ir.rule">
+ <field name="name">Survey question answer: officer: read all</field>
+ <field name="model_id" ref="survey.model_survey_question_answer"/>
+ <field name="domain_force">[(1, '=', 1)]</field>
+ <field name="groups" eval="[(4, ref('group_survey_user'))]"/>
+ <field name="perm_unlink" eval="0"/>
+ <field name="perm_write" eval="0"/>
+ <field name="perm_read" eval="1"/>
+ <field name="perm_create" eval="0"/>
+ </record>
+ <record id="survey_question_answer_rule_survey_user_cw" model="ir.rule">
+ <field name="name">Survey question answer: officer: create/write/unlink linked to own survey only</field>
+ <field name="model_id" ref="survey.model_survey_question_answer"/>
+ <field name="domain_force">['|', ('question_id.survey_id.create_uid', '=', user.id), ('matrix_question_id.survey_id.create_uid', '=', user.id)]</field>
+ <field name="groups" eval="[(4, ref('group_survey_user'))]"/>
+ <field name="perm_unlink" eval="1"/>
+ <field name="perm_write" eval="1"/>
+ <field name="perm_read" eval="0"/>
+ <field name="perm_create" eval="1"/>
+ </record>
+
+ <!-- SURVEY: USER_INPUT, USER_INPUT_LINE -->
+ <record id="survey_user_input_rule_survey_manager" model="ir.rule">
+ <field name="name">Survey user input: manager: all</field>
+ <field name="model_id" ref="survey.model_survey_user_input"/>
+ <field name="domain_force">[(1, '=', 1)]</field>
+ <field name="groups" eval="[(4, ref('group_survey_manager'))]"/>
+ <field name="perm_unlink" eval="1"/>
+ <field name="perm_write" eval="1"/>
+ <field name="perm_read" eval="1"/>
+ <field name="perm_create" eval="1"/>
+ </record>
+ <record id="survey_user_input_rule_survey_user_read" model="ir.rule">
+ <field name="name">Survey user input: officer: read all</field>
+ <field name="model_id" ref="survey.model_survey_user_input"/>
+ <field name="domain_force">[(1, '=', 1)]</field>
+ <field name="groups" eval="[(4, ref('group_survey_user'))]"/>
+ <field name="perm_unlink" eval="0"/>
+ <field name="perm_write" eval="0"/>
+ <field name="perm_read" eval="1"/>
+ <field name="perm_create" eval="0"/>
+ </record>
+ <record id="survey_user_input_rule_survey_user_cw" model="ir.rule">
+ <field name="name">Survey user input: officer: create/write/unlink linked to own survey only</field>
+ <field name="model_id" ref="survey.model_survey_user_input"/>
+ <field name="domain_force">[('survey_id.create_uid', '=', user.id)]</field>
+ <field name="groups" eval="[(4, ref('group_survey_user'))]"/>
+ <field name="perm_unlink" eval="1"/>
+ <field name="perm_write" eval="1"/>
+ <field name="perm_read" eval="0"/>
+ <field name="perm_create" eval="1"/>
+ </record>
+
+ <record id="survey_user_input_line_rule_survey_manager" model="ir.rule">
+ <field name="name">Survey user input line: manager: all</field>
+ <field name="model_id" ref="survey.model_survey_user_input_line"/>
+ <field name="domain_force">[(1, '=', 1)]</field>
+ <field name="groups" eval="[(4, ref('group_survey_manager'))]"/>
+ <field name="perm_unlink" eval="1"/>
+ <field name="perm_write" eval="1"/>
+ <field name="perm_read" eval="1"/>
+ <field name="perm_create" eval="1"/>
+ </record>
+ <record id="survey_user_input_line_rule_survey_user_read" model="ir.rule">
+ <field name="name">Survey user input line: officer: read all</field>
+ <field name="model_id" ref="survey.model_survey_user_input_line"/>
+ <field name="domain_force">[(1, '=', 1)]</field>
+ <field name="groups" eval="[(4, ref('group_survey_user'))]"/>
+ <field name="perm_unlink" eval="0"/>
+ <field name="perm_write" eval="0"/>
+ <field name="perm_read" eval="1"/>
+ <field name="perm_create" eval="0"/>
+ </record>
+ <record id="survey_user_input_line_rule_survey_user_cw" model="ir.rule">
+ <field name="name">Survey user input line: officer: create/write/unlink linked to own survey only</field>
+ <field name="model_id" ref="survey.model_survey_user_input_line"/>
+ <field name="domain_force">[('user_input_id.survey_id.create_uid', '=', user.id)]</field>
+ <field name="groups" eval="[(4, ref('group_survey_user'))]"/>
+ <field name="perm_unlink" eval="1"/>
+ <field name="perm_write" eval="1"/>
+ <field name="perm_read" eval="0"/>
+ <field name="perm_create" eval="1"/>
+ </record>
+ </data>
+</odoo>