auction, report sec continued

davidbethke · Jun 13, 2024 · 7a081aa · 7a081aa
1 parent 9fd5811
commit 7a081aa
Show file tree

Hide file tree

Showing 2 changed files with 46 additions and 2 deletions.
diff --git a/addons/mission2/security/ir.model.access.csv b/addons/mission2/security/ir.model.access.csv
@@ -6,6 +6,6 @@ access_mission2_request,mission2.request,model_mission2_request,group_hr_request
 access_mission2_request_admin,mission2.request.admin,model_mission2_request,group_hr_request_admin,1,1,1,1
 access_mission2_status,mission2.status,model_mission2_status,group_hr_mission,1,1,1,1
 access_mission2_report,mission2.report,model_mission2_report,group_hr_report,1,1,1,1
-access_mission2_report,mission2.report.admin,model_mission2_report,group_hr_report,1,1,1,1
+access_mission2_report,mission2.report.admin,model_mission2_report,group_hr_report_admin,1,1,1,1
 access_mission2_auction,mission2.auction,model_mission2_auction,group_hr_auction,1,1,1,1
-access_mission2_auction,mission2.auction.admin,model_mission2_auction,group_hr_auction,1,1,1,1
+access_mission2_auction,mission2.auction.admin,model_mission2_auction,group_hr_auction_admin,1,1,1,1
diff --git a/addons/mission2/security/security.xml b/addons/mission2/security/security.xml
@@ -23,6 +23,26 @@
         <field name="category_id" ref="base.module_category_human_resources_mission"/>
         <field name="comment">The admin will have access to all customer requests</field>
     </record>
+    <record id="group_hr_report" model="res.groups">
+        <field name="name">Customer: Read his own reports</field>
+        <field name="category_id" ref="base.module_category_human_resources_mission"/>
+        <field name="comment">The Customer will have access to his own reports</field>
+    </record>
+    <record id="group_hr_report_admin" model="res.groups">
+        <field name="name">Customer: Read all reports</field>
+        <field name="category_id" ref="base.module_category_human_resources_mission"/>
+        <field name="comment">The admin will have access to all customer reports</field>
+    </record>
+    <record id="group_hr_auction" model="res.groups">
+        <field name="name">Pilot: Read his own auction</field>
+        <field name="category_id" ref="base.module_category_human_resources_mission"/>
+        <field name="comment">The Pilot will have access to his own auctions</field>
+    </record>
+    <record id="group_hr_auction_admin" model="res.groups">
+        <field name="name">Pilot: Read all auctions</field>
+        <field name="category_id" ref="base.module_category_human_resources_mission"/>
+        <field name="comment">The admin will have access to all pilot auctions</field>
+    </record>
     <data>
 
     <record id="hr_mission_rule_admin" model="ir.rule">
@@ -49,6 +69,30 @@
             <field name="domain_force">[('name','=', user.name)]</field>
             <field name="groups" eval="[(4, ref('mission2.group_hr_request'))]"/>
     </record>
+    <record id="hr_report_rule_admin" model="ir.rule">
+            <field name="name">Report Administrator: Full access</field>
+            <field name="model_id" ref="model_mission2_report"/>
+            <field name="domain_force">[('name','like','%')]</field>
+            <field name="groups" eval="[(4, ref('mission2.group_hr_report_admin'))]"/>
+    </record>
+    <record id="hr_report_rule_all" model="ir.rule">
+            <field name="name">Customer Owner: Restricted access</field>
+            <field name="model_id" ref="model_mission2_report"/>
+            <field name="domain_force">[('name','=', user.name)]</field>
+            <field name="groups" eval="[(4, ref('mission2.group_hr_report'))]"/>
+    </record>
+    <record id="hr_auction_rule_admin" model="ir.rule">
+            <field name="name">Auction Administrator: Full access</field>
+            <field name="model_id" ref="model_mission2_auction"/>
+            <field name="domain_force">[('name','like','%')]</field>
+            <field name="groups" eval="[(4, ref('mission2.group_hr_auction_admin'))]"/>
+    </record>
+    <record id="hr_auction_rule_all" model="ir.rule">
+            <field name="name">Auction Owner: Restricted access</field>
+            <field name="model_id" ref="model_mission2_auction"/>
+            <field name="domain_force">[('name','=', user.name)]</field>
+            <field name="groups" eval="[(4, ref('mission2.group_hr_auction'))]"/>
+    </record>
     </data>
 
 </odoo>