From 5f29089b85d5902d260ddf1c274766d15494d1be Mon Sep 17 00:00:00 2001
From: ivan deng <guohuadeng@hotmail.com>
Date: Wed, 8 Nov 2017 18:31:04 +0800
Subject: [PATCH] fix security

---
 app_product_sequence/__openerp__.py                  |  2 ++
 app_product_sequence/models/product_internal_type.py |  1 +
 app_product_sequence/security/ir.model.access.csv    |  3 +++
 app_product_sequence/security/security.xml           | 12 ++++++++++++
 4 files changed, 18 insertions(+)
 create mode 100644 app_product_sequence/security/ir.model.access.csv
 create mode 100644 app_product_sequence/security/security.xml

diff --git a/app_product_sequence/__openerp__.py b/app_product_sequence/__openerp__.py
index 9d371ad6..efe2e6e2 100644
--- a/app_product_sequence/__openerp__.py
+++ b/app_product_sequence/__openerp__.py
@@ -50,6 +50,8 @@
                 ],
     'data': [
         # 视图
+        "security/ir.model.access.csv",
+        "security/security.xml",
         'views/product_template_view.xml',
         'views/product_product_view.xml',
         'views/product_internal_type_view.xml',
diff --git a/app_product_sequence/models/product_internal_type.py b/app_product_sequence/models/product_internal_type.py
index 723ec33b..818d4159 100644
--- a/app_product_sequence/models/product_internal_type.py
+++ b/app_product_sequence/models/product_internal_type.py
@@ -28,6 +28,7 @@ class ProductInternalType(models.Model):
         'ir.sequence', 'Link Sequence',
         auto_join=True, required=True, domain="[('code', '=', 'product.product')]")
     sequence_prefix = fields.Char(u'Sequence Prefix', related='link_sequence.prefix', readonly=True, store=False)
+    company_id = fields.Many2one('res.company')
 
     # _sql_constraints = [
     #     ('uniq_link_sequence',
diff --git a/app_product_sequence/security/ir.model.access.csv b/app_product_sequence/security/ir.model.access.csv
new file mode 100644
index 00000000..02697c29
--- /dev/null
+++ b/app_product_sequence/security/ir.model.access.csv
@@ -0,0 +1,3 @@
+id,name,model_id:id,group_id:id,perm_read,perm_write,perm_create,perm_unlink
+access_sale_order_type_manager,access_sale_order_type_manager,model_product_internal_type,sales_team.group_sale_manager,1,1,1,1
+access_sale_order_type_salesman,access_sale_order_type_salesman,model_product_internal_type,sales_team.group_sale_salesman,1,0,0,0
diff --git a/app_product_sequence/security/security.xml b/app_product_sequence/security/security.xml
new file mode 100644
index 00000000..97b97439
--- /dev/null
+++ b/app_product_sequence/security/security.xml
@@ -0,0 +1,12 @@
+<?xml version="1.0"?>
+<odoo>
+    <record model="ir.rule" id="sale_internal_type_comp_rule">
+        <field name="name">Sale Order Type multi-company</field>
+        <field name="model_id" ref="app_product_sequence.model_product_internal_type"/>
+        <field name="domain_force">['|',('company_id','=',False),('company_id','child_of',[user.company_id.id])]</field>
+        <field name="perm_read" eval="1"/>
+        <field name="perm_create" eval="1"/>
+        <field name="perm_write" eval="1"/>
+        <field name="perm_unlink" eval="1"/>
+    </record>
+</odoo>