From 3751379f1e9a4c215fb6eb898b4ccc67659b9ace Mon Sep 17 00:00:00 2001 From: stephanchrst Date: Tue, 10 May 2022 21:51:50 +0700 Subject: initial commit 2 --- addons/sale/security/ir.model.access.csv | 58 ++++++++ addons/sale/security/sale_security.xml | 229 +++++++++++++++++++++++++++++++ 2 files changed, 287 insertions(+) create mode 100644 addons/sale/security/ir.model.access.csv create mode 100644 addons/sale/security/sale_security.xml (limited to 'addons/sale/security') diff --git a/addons/sale/security/ir.model.access.csv b/addons/sale/security/ir.model.access.csv new file mode 100644 index 00000000..45b5571c --- /dev/null +++ b/addons/sale/security/ir.model.access.csv @@ -0,0 +1,58 @@ +id,name,model_id:id,group_id:id,perm_read,perm_write,perm_create,perm_unlink +access_sale_order,sale.order,model_sale_order,sales_team.group_sale_salesman,1,1,1,0 +access_sale_order_line,sale.order.line,model_sale_order_line,sales_team.group_sale_salesman,1,1,1,1 +access_sale_order_line_readonly,sale.order.line accountant,model_sale_order_line,account.group_account_readonly,1,0,0,0 +access_sale_order_line_accountant,sale.order.line accountant,model_sale_order_line,account.group_account_user,1,1,0,0 +access_sale_order_portal,sale.order.portal,sale.model_sale_order,base.group_portal,1,0,0,0 +access_sale_order_line_portal,sale.order.line.portal,sale.model_sale_order_line,base.group_portal,1,0,0,0 +access_account_move_manager,account_move manager,account.model_account_move,sales_team.group_sale_manager,1,0,0,0 +access_account_move_salesman,account_move salesman,account.model_account_move,sales_team.group_sale_salesman,1,0,0,0 +access_account_move_line_salesman,account_move_line salesman,account.model_account_move_line,sales_team.group_sale_salesman,1,0,0,0 +access_account_partial_reconcile_salesman,account_partial_reconcile salesman,account.model_account_partial_reconcile,sales_team.group_sale_salesman,1,0,0,0 +access_account_payment_term_salesman,account_payment_term salesman,account.model_account_payment_term,sales_team.group_sale_salesman,1,0,0,0 +access_account_account_tag_sale_salesman,account.account.tag.sale.salesman,account.model_account_account_tag,sales_team.group_sale_salesman,1,0,0,0 +access_account_account_type_sale_salesman,account.account.type.sale.salesman,account.model_account_account_type,sales_team.group_sale_salesman,1,0,0,0 +access_account_analytic_tag_sale_salesman,account.analytic.tag.sale.salesman,analytic.model_account_analytic_tag,sales_team.group_sale_salesman,1,0,0,0 +access_account_analytic_account_salesman,account_analytic_account salesman,analytic.model_account_analytic_account,sales_team.group_sale_salesman,1,1,1,0 +access_account_invoice_send_salesman,access.account.invoice.send.salesman,account.model_account_invoice_send,sales_team.group_sale_salesman,1,1,1,0 +access_sale_order_manager,sale.order.manager,model_sale_order,sales_team.group_sale_manager,1,1,1,1 +access_sale_order_readonly,sale.order.accountant,model_sale_order,account.group_account_readonly,1,0,0,0 +access_sale_order_accountant,sale.order.accountant,model_sale_order,account.group_account_user,1,1,0,0 +access_sale_report_salesman,sale.report,model_sale_report,sales_team.group_sale_salesman,1,1,1,0 +access_sale_report_manager,sale.report,model_sale_report,sales_team.group_sale_manager,1,1,1,1 +access_sale_account_journal,account.journal sale order.user,account.model_account_journal,sales_team.group_sale_salesman,1,0,0,0 +access_res_partner_sale_user,res.partner.sale.user,base.model_res_partner,sales_team.group_sale_salesman,1,0,0,0 +access_res_partner_sale_manager,res.partner.sale.manager,base.model_res_partner,sales_team.group_sale_manager,1,1,1,0 +access_product_template_sale_user,product.template sale use,product.model_product_template,sales_team.group_sale_salesman,1,0,0,0 +access_product_product_sale_user,product.product sale use,product.model_product_product,sales_team.group_sale_salesman,1,0,0,0 +access_account_tax_user,account.tax.user,account.model_account_tax,sales_team.group_sale_salesman,1,0,0,0 +access_uom_uom_user,uom.uom.user,uom.model_uom_uom,sales_team.group_sale_salesman,1,0,0,0 +access_product_pricelist_sale_user,product.pricelist.sale.user,product.model_product_pricelist,sales_team.group_sale_salesman,1,0,0,0 +access_account_account_salesman,account_account salesman,account.model_account_account,sales_team.group_sale_salesman,1,0,0,0 +access_uom_category_sale_manager,uom.category salemanager,uom.model_uom_category,sales_team.group_sale_manager,1,1,1,1 +access_uom_uom_sale_manager,uom.uom salemanager,uom.model_uom_uom,sales_team.group_sale_manager,1,1,1,1 +access_product_category_sale_manager,product.category salemanager,product.model_product_category,sales_team.group_sale_manager,1,1,1,1 +access_product_supplierinfo_user,product.supplierinfo.user,product.model_product_supplierinfo,sales_team.group_sale_salesman,1,0,0,0 +access_product_supplierinfo_sale_manager,product.supplierinfo salemanager,product.model_product_supplierinfo,sales_team.group_sale_manager,1,1,1,1 +access_product_pricelist_sale_manager,product.pricelist salemanager,product.model_product_pricelist,sales_team.group_sale_manager,1,1,1,1 +access_product_group_res_partner_sale_manager,res_partner group_sale_manager,base.model_res_partner,sales_team.group_sale_manager,1,1,1,0 +access_sale_order_invoicing_payments,sale.order,model_sale_order,account.group_account_invoice,1,1,0,0 +access_sale_order_line_invoicing_payments,sale.order.line,model_sale_order_line,account.group_account_invoice,1,1,0,0 +access_product_pricelist_item_sale_manager,product.pricelist.item salemanager,product.model_product_pricelist_item,sales_team.group_sale_manager,1,1,1,1 +access_product_template_sale_manager,product.template salemanager,model_product_template,sales_team.group_sale_manager,1,1,1,1 +access_product_product_sale_manager,product.product salemanager,model_product_product,sales_team.group_sale_manager,1,1,1,1 +access_product_attribute_sale_manager,product.attribute manager,product.model_product_attribute,sales_team.group_sale_manager,1,1,1,1 +access_product_attribute_value_sale_manager,product.attribute manager value,product.model_product_attribute_value,sales_team.group_sale_manager,1,1,1,1 +access_product_product_attribute_sale_manager,product.template.attribute manager value,product.model_product_template_attribute_value,sales_team.group_sale_manager,1,1,1,1 +access_product_product_attribute_custom_value_sale_manager,product.attribute.custom value manager,product.model_product_attribute_custom_value,sales_team.group_sale_salesman,1,1,1,1 +access_product_template_attribute_exclusion_sale_manager,product.attribute manager filter line,product.model_product_template_attribute_exclusion,sales_team.group_sale_manager,1,1,1,1 +access_product_template_attribute_line_sale_manager,product.attribute manager line,product.model_product_template_attribute_line,sales_team.group_sale_manager,1,1,1,1 +access_account_tax_sale_manager,account.tax sale manager,account.model_account_tax,sales_team.group_sale_salesman,1,0,0,0 +access_account_tax_group_sale_manager,account.tax.group sale manager,account.model_account_tax_group,sales_team.group_sale_salesman,1,0,0,0 +access_account_account_sale_manager,account.account sale manager,account.model_account_account,sales_team.group_sale_manager,1,0,0,0 +access_mail_activity_type_sale_manager,mail.activity.type.sale.manager,mail.model_mail_activity_type,sales_team.group_sale_manager,1,1,1,1 +access_report_all_channels_sales,access_report_all_channels_sales,model_report_all_channels_sales,sales_team.group_sale_manager,1,0,0,0 +access_sale_payment_acquirer_onboarding_wizard,access.sale.payment.acquirer.onboarding.wizard,model_sale_payment_acquirer_onboarding_wizard,base.group_system,1,1,1,0 +access_sale_advance_payment_inv,access.sale.advance.payment.inv,model_sale_advance_payment_inv,sales_team.group_sale_salesman,1,1,1,0 +access_sale_order_cancel,access.sale.order.cancel,model_sale_order_cancel,sales_team.group_sale_salesman,1,1,1,0 +access_payment_link_wizard_sale,access.payment.link.wizard.sale,model_payment_link_wizard,sales_team.group_sale_salesman,1,1,1,0 diff --git a/addons/sale/security/sale_security.xml b/addons/sale/security/sale_security.xml new file mode 100644 index 00000000..b1afcab9 --- /dev/null +++ b/addons/sale/security/sale_security.xml @@ -0,0 +1,229 @@ + + + + + + + + + + Lock Confirmed Sales + + + + + Addresses in Sales Orders + + + + + A warning can be set on a product or a customer (Sale) + + + + + Pro-forma Invoices + + + + + + + + + + + + + + + + Sales Order multi-company + + [('company_id', 'in', company_ids)] + + + + Sales Order Line multi-company + + ['|', ('company_id', '=', False), ('company_id', 'in', company_ids)] + + + + Sales Order Analysis multi-company + + ['|',('company_id','=',False),('company_id', 'in', company_ids)] + + + + + Access every payment transaction + + [(1, '=', 1)] + + + + + Access every payment token + + [(1, '=', 1)] + + + + + + Portal Personal Quotations/Sales Orders + + [('message_partner_ids','child_of',[user.commercial_partner_id.id])] + + + + + + + + + Portal Sales Orders Line + + [('order_id.message_partner_ids','child_of',[user.commercial_partner_id.id])] + + + + + + + Personal Orders + + ['|',('user_id','=',user.id),('user_id','=',False)] + + + + All Orders + + [(1,'=',1)] + + + + + Personal Orders Analysis + + ['|',('user_id','=',user.id),('user_id','=',False)] + + + + + All Orders Analysis + + [(1,'=',1)] + + + + + Personal Order Lines + + ['|',('salesman_id','=',user.id),('salesman_id','=',False)] + + + + + All Orders Lines + + [(1,'=',1)] + + + + + Personal Invoices Analysis + + ['|', ('invoice_user_id', '=', user.id), ('invoice_user_id', '=', False)] + + + + + All Invoices Analysis + + [(1, '=', 1)] + + + + + + + Access every payment transaction + + [(1, '=', 1)] + + + + + Access every payment token + + + + + + + Personal Invoices + + [('move_type', 'in', ('out_invoice', 'out_refund')), '|', ('invoice_user_id', '=', user.id), ('invoice_user_id', '=', False)] + + + + + All Invoices + + [('move_type', 'in', ('out_invoice', 'out_refund'))] + + + + + Personal Invoice Lines + + [('move_id.move_type', 'in', ('out_invoice', 'out_refund')), '|', ('move_id.invoice_user_id', '=', user.id), ('move_id.invoice_user_id', '=', False)] + + + + + All Invoice Lines + + [('move_id.move_type', 'in', ('out_invoice', 'out_refund'))] + + + + + Personal Invoice Send and Print + + [('invoice_ids.move_type', 'in', ('out_invoice', 'out_refund')), '|', ('invoice_ids.invoice_user_id', '=', user.id), ('invoice_ids.invoice_user_id', '=', False)] + + + + + All Invoice Send and Print + + [('invoice_ids.move_type', 'in', ('out_invoice', 'out_refund'))] + + + + + + Payment Acquier Onboarding Wizard Rule + + [('create_uid', '=', user.id)] + + + + Sales Advance Payment Invoice Rule + + [('create_uid', '=', user.id)] + + + + Sales Order Cancel Rule + + [('create_uid', '=', user.id)] + + + -- cgit v1.2.3