170 lines
5.4 KiB
Python
170 lines
5.4 KiB
Python
# Copyright 2017-2019 MuK IT GmbH
|
|
# Copyright 2020 RGB Consulting
|
|
# License LGPL-3.0 or later (http://www.gnu.org/licenses/lgpl).
|
|
|
|
from odoo import _, api, fields, models
|
|
from odoo.exceptions import ValidationError
|
|
|
|
|
|
class DmsAccessGroups(models.Model):
|
|
_name = "dms.access.group"
|
|
_description = "Record Access Groups"
|
|
_parent_store = True
|
|
_parent_name = "parent_group_id"
|
|
|
|
name = fields.Char(string="Group Name", required=True, translate=True)
|
|
parent_path = fields.Char(string="Parent Path", index=True)
|
|
|
|
# Permissions written directly on this group
|
|
perm_create = fields.Boolean(string="Create Access")
|
|
perm_write = fields.Boolean(string="Write Access")
|
|
perm_unlink = fields.Boolean(string="Unlink Access")
|
|
perm_download = fields.Boolean(string="Download Access")
|
|
|
|
# Permissions computed including parent group
|
|
perm_inclusive_create = fields.Boolean(
|
|
string="Inherited Create Access",
|
|
compute="_compute_inclusive_permissions",
|
|
store=True,
|
|
)
|
|
perm_inclusive_write = fields.Boolean(
|
|
string="Inherited Write Access",
|
|
compute="_compute_inclusive_permissions",
|
|
store=True,
|
|
)
|
|
perm_inclusive_unlink = fields.Boolean(
|
|
string="Inherited Unlink Access",
|
|
compute="_compute_inclusive_permissions",
|
|
store=True,
|
|
)
|
|
|
|
directory_ids = fields.Many2many(
|
|
comodel_name="dms.directory",
|
|
relation="dms_directory_groups_rel",
|
|
string="Directories",
|
|
column1="gid",
|
|
column2="aid",
|
|
auto_join=True,
|
|
readonly=True,
|
|
)
|
|
complete_directory_ids = fields.Many2many(
|
|
comodel_name="dms.directory",
|
|
relation="dms_directory_complete_groups_rel",
|
|
column1="gid",
|
|
column2="aid",
|
|
string="Complete directories",
|
|
auto_join=True,
|
|
readonly=True,
|
|
)
|
|
count_users = fields.Integer(compute="_compute_users", string="Users", store=True)
|
|
count_directories = fields.Integer(
|
|
compute="_compute_count_directories", string="Count Directories"
|
|
)
|
|
parent_group_id = fields.Many2one(
|
|
comodel_name="dms.access.group",
|
|
string="Parent Group",
|
|
ondelete="cascade",
|
|
index=True,
|
|
)
|
|
|
|
child_group_ids = fields.One2many(
|
|
comodel_name="dms.access.group",
|
|
inverse_name="parent_group_id",
|
|
string="Child Groups",
|
|
)
|
|
group_ids = fields.Many2many(
|
|
comodel_name="res.groups",
|
|
relation="dms_access_group_groups_rel",
|
|
column1="gid",
|
|
column2="rid",
|
|
string="Groups",
|
|
)
|
|
explicit_user_ids = fields.Many2many(
|
|
comodel_name="res.users",
|
|
relation="dms_access_group_explicit_users_rel",
|
|
column1="gid",
|
|
column2="uid",
|
|
string="Explicit Users",
|
|
)
|
|
users = fields.Many2many(
|
|
comodel_name="res.users",
|
|
relation="dms_access_group_users_rel",
|
|
column1="gid",
|
|
column2="uid",
|
|
string="Group Users",
|
|
compute="_compute_users",
|
|
auto_join=True,
|
|
store=True,
|
|
)
|
|
|
|
@api.depends("directory_ids")
|
|
def _compute_count_directories(self):
|
|
for record in self:
|
|
record.count_directories = len(record.directory_ids)
|
|
|
|
_sql_constraints = [
|
|
("name_uniq", "unique (name)", "The name of the group must be unique!")
|
|
]
|
|
|
|
@api.depends(
|
|
"parent_group_id.perm_inclusive_create",
|
|
"parent_group_id.perm_inclusive_unlink",
|
|
"parent_group_id.perm_inclusive_write",
|
|
"parent_path",
|
|
"perm_create",
|
|
"perm_unlink",
|
|
"perm_write",
|
|
"perm_download",
|
|
)
|
|
def _compute_inclusive_permissions(self):
|
|
"""Provide full permissions inheriting from parent recursively."""
|
|
for one in self:
|
|
one.update(
|
|
{
|
|
"perm_inclusive_%s"
|
|
% perm: (
|
|
one["perm_%s" % perm]
|
|
or one.parent_group_id["perm_inclusive_%s" % perm]
|
|
)
|
|
for perm in ("create", "unlink", "write")
|
|
}
|
|
)
|
|
|
|
@api.model
|
|
def default_get(self, fields_list):
|
|
res = super(DmsAccessGroups, self).default_get(fields_list)
|
|
if "explicit_user_ids" in res and res["explicit_user_ids"]:
|
|
res["explicit_user_ids"] = res["explicit_user_ids"] + [self.env.uid]
|
|
else:
|
|
res["explicit_user_ids"] = [(6, 0, [self.env.uid])]
|
|
return res
|
|
|
|
@api.depends(
|
|
"parent_group_id",
|
|
"parent_group_id.users",
|
|
"group_ids",
|
|
"group_ids.users",
|
|
"explicit_user_ids",
|
|
)
|
|
def _compute_users(self):
|
|
for record in self:
|
|
users = record.mapped("group_ids.users")
|
|
users |= record.mapped("explicit_user_ids")
|
|
users |= record.mapped("parent_group_id.users")
|
|
record.update({"users": users, "count_users": len(users)})
|
|
|
|
@api.constrains("parent_path")
|
|
def _check_parent_recursiveness(self):
|
|
"""Forbid recursive relationships."""
|
|
for one in self:
|
|
if not one.parent_group_id:
|
|
continue
|
|
if str(one.id) in one.parent_path.split("/"):
|
|
raise ValidationError(
|
|
_("Parent group '%(parent)s' is child of '%(current)s'.")
|
|
% {
|
|
"parent": one.parent_group_id.display_name,
|
|
"current": one.display_name,
|
|
}
|
|
)
|