[ADD] base_suspend_security

base_suspend_security/models/__init__.py

@@ -0,0 +1,22 @@
+# -*- coding: utf-8 -*-
+##############################################################################
+#
+#    This module copyright (C) 2015 Therp BV <http://therp.nl>.
+#
+#    This program is free software: you can redistribute it and/or modify
+#    it under the terms of the GNU Affero General Public License as
+#    published by the Free Software Foundation, either version 3 of the
+#    License, or (at your option) any later version.
+#
+#    This program is distributed in the hope that it will be useful,
+#    but WITHOUT ANY WARRANTY; without even the implied warranty of
+#    MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.  See the
+#    GNU Affero General Public License for more details.
+#
+#    You should have received a copy of the GNU Affero General Public License
+#    along with this program.  If not, see <http://www.gnu.org/licenses/>.
+#
+##############################################################################
+from . import ir_rule
+from . import ir_model_access
+from . import res_users

base_suspend_security/models/ir_model_access.py

@@ -0,0 +1,34 @@
+# -*- coding: utf-8 -*-
+##############################################################################
+#
+#    This module copyright (C) 2015 Therp BV (<http://therp.nl>).
+#
+#    This program is free software: you can redistribute it and/or modify
+#    it under the terms of the GNU Affero General Public License as
+#    published by the Free Software Foundation, either version 3 of the
+#    License, or (at your option) any later version.
+#
+#    This program is distributed in the hope that it will be useful,
+#    but WITHOUT ANY WARRANTY; without even the implied warranty of
+#    MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.  See the
+#    GNU Affero General Public License for more details.
+#
+#    You should have received a copy of the GNU Affero General Public License
+#    along with this program.  If not, see <http://www.gnu.org/licenses/>.
+#
+##############################################################################
+from openerp import models, tools
+from ..base_suspend_security import BaseSuspendSecurityUid
+
+
+class IrModelAccess(models.Model):
+    _inherit = 'ir.model.access'
+
+    @tools.ormcache_context(accepted_keys=('lang'))
+    def check(self, cr, uid, model, mode='read', raise_exception=True,
+              context=None):
+        if isinstance(uid, BaseSuspendSecurityUid):
+            return True
+        return super(IrModelAccess, self).check(
+            cr, uid, model, mode=mode, raise_exception=raise_exception,
+            context=context)

base_suspend_security/models/ir_rule.py

@@ -0,0 +1,38 @@
+# -*- coding: utf-8 -*-
+##############################################################################
+#
+#    This module copyright (C) 2015 Therp BV (<http://therp.nl>).
+#
+#    This program is free software: you can redistribute it and/or modify
+#    it under the terms of the GNU Affero General Public License as
+#    published by the Free Software Foundation, either version 3 of the
+#    License, or (at your option) any later version.
+#
+#    This program is distributed in the hope that it will be useful,
+#    but WITHOUT ANY WARRANTY; without even the implied warranty of
+#    MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.  See the
+#    GNU Affero General Public License for more details.
+#
+#    You should have received a copy of the GNU Affero General Public License
+#    along with this program.  If not, see <http://www.gnu.org/licenses/>.
+#
+##############################################################################
+from openerp import models, api
+from ..base_suspend_security import BaseSuspendSecurityUid, SUSPEND_METHOD
+
+
+class IrRule(models.Model):
+    _inherit = 'ir.rule'
+
+    @api.model
+    def domain_get(self, model_name, mode='read'):
+        if isinstance(self.env.uid, BaseSuspendSecurityUid):
+            return [], [], ['"%s"' % self.pool[model_name]._table]
+        return super(IrRule, self).domain_get(model_name, mode=mode)
+
+    def _register_hook(self, cr):
+        if not hasattr(models.BaseModel, SUSPEND_METHOD):
+            setattr(models.BaseModel, SUSPEND_METHOD,
+                    lambda self: self.sudo(
+                        user=BaseSuspendSecurityUid(self.env.uid)))
+        return super(IrRule, self)._register_hook(cr)

base_suspend_security/models/res_users.py

@@ -0,0 +1,36 @@
+# -*- coding: utf-8 -*-
+##############################################################################
+#
+#    This module copyright (C) 2015 Therp BV (<http://therp.nl>).
+#
+#    This program is free software: you can redistribute it and/or modify
+#    it under the terms of the GNU Affero General Public License as
+#    published by the Free Software Foundation, either version 3 of the
+#    License, or (at your option) any later version.
+#
+#    This program is distributed in the hope that it will be useful,
+#    but WITHOUT ANY WARRANTY; without even the implied warranty of
+#    MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.  See the
+#    GNU Affero General Public License for more details.
+#
+#    You should have received a copy of the GNU Affero General Public License
+#    along with this program.  If not, see <http://www.gnu.org/licenses/>.
+#
+##############################################################################
+from openerp import models
+from ..base_suspend_security import BaseSuspendSecurityUid
+
+
+class ResUsers(models.Model):
+    _inherit = 'res.users'
+    
+    @classmethod
+    def _browse(cls, env, ids):
+        """be sure we browse ints, ids laread is normalized"""
+        return super(ResUsers, cls)._browse(
+            env,
+            [
+                i if not isinstance(i, BaseSuspendSecurityUid)
+                else super(BaseSuspendSecurityUid, i).__int__()
+                for i in ids
+            ])