fix security

This commit is contained in:
ivan deng
2017-11-08 18:31:04 +08:00
parent ef42dc7a53
commit 5f29089b85
4 changed files with 18 additions and 0 deletions

View File

@@ -50,6 +50,8 @@
], ],
'data': [ 'data': [
# 视图 # 视图
"security/ir.model.access.csv",
"security/security.xml",
'views/product_template_view.xml', 'views/product_template_view.xml',
'views/product_product_view.xml', 'views/product_product_view.xml',
'views/product_internal_type_view.xml', 'views/product_internal_type_view.xml',

View File

@@ -28,6 +28,7 @@ class ProductInternalType(models.Model):
'ir.sequence', 'Link Sequence', 'ir.sequence', 'Link Sequence',
auto_join=True, required=True, domain="[('code', '=', 'product.product')]") auto_join=True, required=True, domain="[('code', '=', 'product.product')]")
sequence_prefix = fields.Char(u'Sequence Prefix', related='link_sequence.prefix', readonly=True, store=False) sequence_prefix = fields.Char(u'Sequence Prefix', related='link_sequence.prefix', readonly=True, store=False)
company_id = fields.Many2one('res.company')
# _sql_constraints = [ # _sql_constraints = [
# ('uniq_link_sequence', # ('uniq_link_sequence',

View File

@@ -0,0 +1,3 @@
id,name,model_id:id,group_id:id,perm_read,perm_write,perm_create,perm_unlink
access_sale_order_type_manager,access_sale_order_type_manager,model_product_internal_type,sales_team.group_sale_manager,1,1,1,1
access_sale_order_type_salesman,access_sale_order_type_salesman,model_product_internal_type,sales_team.group_sale_salesman,1,0,0,0
1 id name model_id:id group_id:id perm_read perm_write perm_create perm_unlink
2 access_sale_order_type_manager access_sale_order_type_manager model_product_internal_type sales_team.group_sale_manager 1 1 1 1
3 access_sale_order_type_salesman access_sale_order_type_salesman model_product_internal_type sales_team.group_sale_salesman 1 0 0 0

View File

@@ -0,0 +1,12 @@
<?xml version="1.0"?>
<odoo>
<record model="ir.rule" id="sale_internal_type_comp_rule">
<field name="name">Sale Order Type multi-company</field>
<field name="model_id" ref="app_product_sequence.model_product_internal_type"/>
<field name="domain_force">['|',('company_id','=',False),('company_id','child_of',[user.company_id.id])]</field>
<field name="perm_read" eval="1"/>
<field name="perm_create" eval="1"/>
<field name="perm_write" eval="1"/>
<field name="perm_unlink" eval="1"/>
</record>
</odoo>