From 559ab022388216277046ac0ed2d805b9982e09f3 Mon Sep 17 00:00:00 2001
From: Samir Ladoui <whitexhunter23@gmail.com>
Date: Thu, 8 Jan 2026 12:31:02 +0100
Subject: [PATCH] [FIX] odex_takaful

---
 .../odex_takaful/security/security_data.xml   | 25 +++++++++----------
 1 file changed, 12 insertions(+), 13 deletions(-)

diff --git a/odex25_takaful/odex_takaful/security/security_data.xml b/odex25_takaful/odex_takaful/security/security_data.xml
index 9fc86e22d..4945b8fe1 100644
--- a/odex25_takaful/odex_takaful/security/security_data.xml
+++ b/odex25_takaful/odex_takaful/security/security_data.xml
@@ -140,12 +140,11 @@
             <field name="name">Kufula User</field>
             <field name="category_id" ref="module_category_kufula"/>
         </record>
-        <odoo>
-    <record id="group_print_receipt" model="res.groups">
-        <field name="name">Sponsorship Receipt</field>
-        <field name="category_id" ref="module_category_kufula"/>
-    </record>
-</odoo>
+
+        <record id="group_print_receipt" model="res.groups">
+            <field name="name">Sponsorship Receipt</field>
+            <field name="category_id" ref="module_category_kufula"/>
+        </record>
 
         <record id="donation_officer_group" model="res.groups">
             <field name="name">Donations Officer</field>
@@ -251,11 +250,12 @@
         </record>
 
         <!-- Groups for Department-based Access Control -->
-        <record id="group_beneficiary_department_access" model="res.groups">
+        <!-- <record id="group_beneficiary_department_access" model="res.groups">
             <field name="name">Beneficiary - Department Access</field>
             <field name="category_id" ref="module_category_kufula"/>
+            <field name="implied_ids" eval="[(4, ref('group_kufula_user'))]"/>
             <field name="comment">Limits beneficiary records to user's department</field>
-        </record>
+        </record> -->
 
         <record id="group_sponsor_department_access" model="res.groups">
             <field name="name">Sponsor - Department Access</field>
@@ -263,12 +263,11 @@
             <field name="comment">Limits sponsor records to user's department</field>
         </record>
         <!-- Record Rules for Department-based Access Control -->
-        <record id="grant_benefit_department_rule" model="ir.rule">
+        <!-- <record id="grant_benefit_department_rule" model="ir.rule">
             <field name="name">Grant Benefit - Department Based Access</field>
             <field name="model_id" ref="odex_benefit.model_grant_benefit"/>
             <field name="groups" eval="[(4, ref('group_beneficiary_department_access'))]"/>
-            <field name="domain_force">[('branch_custom_id.branch', 'child_of', user.employee_id.department_id.id)]
-            </field>
+            <field name="domain_force">[('branch_custom_id.branch', '=', user.employee_id.department_id.id)]</field>
             <field name="perm_read" eval="1"/>
             <field name="perm_write" eval="1"/>
             <field name="perm_create" eval="1"/>
@@ -279,12 +278,12 @@
             <field name="name">Family Member - Department Based Access</field>
             <field name="model_id" ref="odex_benefit.model_family_member"/>
             <field name="groups" eval="[(4, ref('group_beneficiary_department_access'))]"/>
-            <field name="domain_force">[('benefit_id.branch_custom_id.branch', 'child_of', user.employee_id.department_id.id)]</field>
+            <field name="domain_force">[('benefit_id.branch_custom_id.branch', '=', user.employee_id.department_id.id)]</field>
             <field name="perm_read" eval="1"/>
             <field name="perm_write" eval="1"/>
             <field name="perm_create" eval="1"/>
             <field name="perm_unlink" eval="1"/>
-        </record>
+        </record> -->
 
         <record id="sponsor_department_rule" model="ir.rule">
             <field name="name">Sponsor - Department Based Access</field>