odex30_standard/employee_requests/security/employee_requests_security.xml

275 lines
16 KiB
XML

<?xml version="1.0" encoding="utf-8"?>
<odoo>
<data noupdate="1">
<record id="employee_effective_form_emp_rule" model="ir.rule">
<field name="name">Employee: views its forms record</field>
<field name="model_id" ref="model_employee_effective_form"/>
<field name="domain_force">[('employee_id.user_id','=', user.id)]</field>
<field name="groups" eval="[(4, ref('base.group_user'))]"/>
</record>
<record id="employee_effective_form_division_mgr_rule" model="ir.rule">
<field name="name">Division manager: views forms of its subordinates</field>
<field name="model_id" ref="model_employee_effective_form"/>
<field name="domain_force">['|',('department_id.manager_id.user_id','=', user.id),
('department_id','child_of', user.employee_id.department_id.id if user.employee_id and user.employee_id.department_id else False)]
</field>
<field name="groups"
eval="[(4, ref('hr_base.group_department_manager')),(4, ref('hr_base.group_division_manager')),]"/>
</record>
<record id="employee_effective_form_hr_rule" model="ir.rule">
<field name="name">Allow HR : views custody receiving records of all employees</field>
<field name="model_id" ref="model_employee_effective_form"/>
<field name="domain_force">[(1 ,'=', 1)]</field>
<field name="groups" eval="[(3, ref('hr_base.group_account_manager')),
(4, ref('hr_base.group_executive_manager')),
(4, ref('hr_base.group_general_manager')),
(4, ref('hr_base.group_services_manager')),
(4, ref('hr.group_hr_manager')),
(4, ref('hr.group_hr_user'))]"/>
</record>
<record id="employee_effective_form_comp_rule" model="ir.rule">
<field name="name">Employee effective form company rule</field>
<field name="model_id" ref="model_employee_effective_form"/>
<field name="domain_force">['|',('company_id','=',False),('company_id', 'in', company_ids)]</field>
</record>
<!--##################overtime ###############################-->
<record id="employee_overtime_request_emp_rule" model="ir.rule">
<field name="name">Employee: views its overtime records</field>
<field name="model_id" ref="model_employee_overtime_request"/>
<field name="domain_force">[('employee_id.user_id','=', user.id)]</field>
<field name="groups" eval="[(4, ref('base.group_user'))]"/>
</record>
<record id="employee_overtime_request_division_mgr_rule" model="ir.rule">
<field name="name">Division manager: views overtime of its subordinates</field>
<field name="model_id" ref="model_employee_overtime_request"/>
<field name="domain_force">['|',('employee_id.department_id.manager_id.user_id','=', user.id),
('employee_id.department_id','child_of', user.employee_id.department_id.id if user.employee_id and user.employee_id.department_id else False)]
</field>
<field name="groups" eval="[(4, ref('hr_base.group_department_manager')),(4, ref('hr_base.group_division_manager')),]"/>
</record>
<record id="employee_overtime_request_hr_rule" model="ir.rule">
<field name="name">Allow HR : views custody receiving records of all employees</field>
<field name="model_id" ref="model_employee_overtime_request"/>
<field name="domain_force">[(1 ,'=', 1)]</field>
<field name="groups" eval="[(3, ref('hr_base.group_account_manager')),
(4, ref('hr_base.group_executive_manager')),
(4, ref('hr_base.group_general_manager')),
(4, ref('hr_base.group_services_manager')),
(4, ref('hr.group_hr_manager')),
(4, ref('hr.group_hr_user'))]"/>
</record>
<record id="employee_overtime_request_comp_rule" model="ir.rule">
<field name="name">Employee effective form company rule</field>
<field name="model_id" ref="model_employee_overtime_request"/>
<field name="domain_force">['|',('company_id','=',False),('company_id', 'in', company_ids)]</field>
</record>
<!--##################line_ids_over_time ###############################-->
<record id="employee_overtime_request_employee_rule" model="ir.rule">
<field name="name">Employee: views its overtime records</field>
<field name="model_id" ref="model_line_ids_over_time"/>
<field name="domain_force">[('employee_id.user_id','=', user.id)]</field>
<field name="groups" eval="[(4, ref('base.group_user'))]"/>
</record>
<record id="employee_overtime_request_division_mgr_employee_rule" model="ir.rule">
<field name="name">Division manager: views overtime of its subordinates</field>
<field name="model_id" ref="model_line_ids_over_time"/>
<field name="domain_force">['|',('employee_id.department_id.manager_id.user_id','=', user.id),
('employee_id.department_id','child_of', user.employee_id.department_id.id if user.employee_id and user.employee_id.department_id else False)]
</field>
<field name="groups"
eval="[(4, ref('hr_base.group_department_manager')),(4, ref('hr_base.group_division_manager')),]"/>
</record>
<record id="employee_overtime_request_hr_employee_rule" model="ir.rule">
<field name="name">Allow HR : views custody receiving records of all employees</field>
<field name="model_id" ref="model_line_ids_over_time"/>
<field name="domain_force">[(1 ,'=', 1)]</field>
<field name="groups" eval="[(3, ref('hr_base.group_account_manager')),
(4, ref('hr_base.group_executive_manager')),
(4, ref('hr_base.group_general_manager')),
(4, ref('hr_base.group_services_manager')),
(4, ref('hr.group_hr_manager')),
(4, ref('hr.group_hr_user'))]"/>
</record>
<record id="employee_overtime_request_comp_employee_rule" model="ir.rule">
<field name="name">Employee effective form company rule</field>
<field name="model_id" ref="model_line_ids_over_time"/>
<field name="domain_force">['|',('employee_id.company_id','=',False),('employee_id.company_id', 'in', company_ids)]</field>
</record>
<!--##################overtime ###############################-->
<record id="hr_clearance_form_emp_rule" model="ir.rule">
<field name="name">Employee: views its clearance records</field>
<field name="model_id" ref="model_hr_clearance_form"/>
<field name="domain_force">[('employee_id.user_id','=', user.id)]</field>
<field name="groups" eval="[(4, ref('base.group_user'))]"/>
</record>
<record id="hr_clearance_form_division_mgr_rule" model="ir.rule">
<field name="name">Division manager: views clearances of its subordinates</field>
<field name="model_id" ref="model_hr_clearance_form"/>
<field name="domain_force">['|','|',('department_id.manager_id','=',False),
('department_id.manager_id.user_id','=', user.id),
('department_id','child_of', user.employee_id.department_id.id if user.employee_id and user.employee_id.department_id else False)]
</field>
<field name="groups"
eval="[(4, ref('hr_base.group_department_manager')),(4, ref('hr_base.group_division_manager')),]"/>
</record>
<record id="hr_clearance_form_hr_rule" model="ir.rule">
<field name="name">Allow HR : views clearances of all employees</field>
<field name="model_id" ref="model_hr_clearance_form"/>
<field name="domain_force">[(1 ,'=', 1)]</field>
<field name="groups" eval="[(4, ref('hr_base.group_executive_manager')),
(4, ref('hr_base.group_general_manager')),
(4, ref('hr_base.group_services_manager')),
(4, ref('hr_base.group_account_manager')),
(4, ref('hr_base.group_administrative_affairs')),
(4, ref('hr_base.group_IT_manager')),
(4, ref('hr_base.group_cyber_security')),
(4, ref('hr.group_hr_manager')),
(4, ref('hr.group_hr_user'))]"/>
</record>
<record id="employee_clearance_form_hr_rule_comp_rule" model="ir.rule">
<field name="name">Employee clearances multi company rule</field>
<field name="model_id" ref="model_hr_clearance_form"/>
<field name="domain_force">['|',('company_id','=',False),('company_id', 'in', company_ids)]</field>
</record>
<record id="hr_personal_permission_emp_rule" model="ir.rule">
<field name="name">Employee: views its permission records</field>
<field name="model_id" ref="model_hr_personal_permission"/>
<field name="domain_force">[('employee_id.user_id','=', user.id)]</field>
<field name="groups" eval="[(4, ref('base.group_user'))]"/>
</record>
<record id="hr_personal_permission_division_mgr_rule" model="ir.rule">
<field name="name">Division manager: views permissions of its subordinates</field>
<field name="model_id" ref="model_hr_personal_permission"/>
<field name="domain_force">['|','|',('department_id.manager_id','=',False),
('department_id.manager_id.user_id','=', user.id),
('department_id','child_of', user.employee_id.department_id.id if user.employee_id and user.employee_id.department_id else False)]
</field>
<field name="groups"
eval="[(4, ref('hr_base.group_department_manager')),(4, ref('hr_base.group_division_manager')),]"/>
</record>
<record id="hr_personal_permission_hr_rule" model="ir.rule">
<field name="name">Allow HR : views permissions of all employees</field>
<field name="model_id" ref="model_hr_personal_permission"/>
<field name="domain_force">[(1 ,'=', 1)]</field>
<field name="groups" eval="[(3, ref('hr_base.group_account_manager')),
(4, ref('hr_base.group_executive_manager')),
(4, ref('hr_base.group_general_manager')),
(4, ref('hr_base.group_services_manager')),
(4, ref('hr.group_hr_manager')),
(4, ref('hr.group_hr_user'))]"/>
</record>
<record id="employee_personal_permission_comp_rule" model="ir.rule">
<field name="name">Employee personal permission company rule</field>
<field name="model_id" ref="model_hr_personal_permission"/>
<field name="domain_force">['|',('company_id','=',False),('company_id', 'in', company_ids)]</field>
</record>
<record id="employee_other_request_emp_rule" model="ir.rule">
<field name="name">Employee: views its Other Request</field>
<field name="model_id" ref="model_employee_other_request"/>
<field name="domain_force">[('employee_id.user_id','=', user.id)]</field>
<field name="groups" eval="[(4, ref('base.group_user'))]"/>
</record>
<record id="employee_other_request_division_mgr_rule" model="ir.rule">
<field name="name">Division manager: views Other Request of its subordinates</field>
<field name="model_id" ref="model_employee_other_request"/>
<field name="domain_force">['|','|',('department_id.manager_id','=',False),
('department_id.manager_id.user_id','=', user.id),
('department_id','child_of', user.employee_id.department_id.id if user.employee_id and user.employee_id.department_id else False)]
</field>
<field name="groups"
eval="[(4, ref('hr_base.group_department_manager')),(4, ref('hr_base.group_division_manager')),]"/>
</record>
<record id="employee_other_requests_hr_rules" model="ir.rule">
<field name="name">Allow HR : views Other Request of all employees</field>
<field name="model_id" ref="model_employee_other_request"/>
<field name="domain_force">[(1 ,'=', 1)]</field>
<field name="groups" eval="[(4, ref('hr_base.group_general_manager')),
(4, ref('hr.group_hr_manager')),
(4, ref('hr_base.group_services_manager')),
(4, ref('hr.group_hr_user'))]"/>
</record>
<!--Department Jobs Request-->
<record id="employee_department_jobs_emp_rule" model="ir.rule">
<field name="name">Employee: views its Department Jobs Request</field>
<field name="model_id" ref="model_employee_department_jobs"/>
<field name="domain_force">[('employee_id.user_id','=', user.id)]</field>
<field name="groups" eval="[(4, ref('base.group_user'))]"/>
</record>
<record id="employee_department_jobs_division_mgr1_rule" model="ir.rule">
<field name="name">Division manager1: views Department Jobs Request</field>
<field name="model_id" ref="model_employee_department_jobs"/>
<field name="domain_force">['|',('old_department_2_id.manager_id.user_id','=', user.id),
('old_department_2_id','child_of', user.employee_id.department_id.id if user.employee_id and user.employee_id.department_id else False)]
</field>
<field name="groups"
eval="[(4, ref('hr_base.group_department_manager')),(4, ref('hr_base.group_division_manager')),]"/>
</record>
<record id="employee_department_jobs_division_mgr2_rule" model="ir.rule">
<field name="name">Division manager2: views Department Jobs Request</field>
<field name="model_id" ref="model_employee_department_jobs"/>
<field name="domain_force">['|',('new_department_id.manager_id.user_id','=', user.id),
('new_department_id','child_of', user.employee_id.department_id.id if user.employee_id and user.employee_id.department_id else False)]
</field>
<field name="groups"
eval="[(4, ref('hr_base.group_department_manager')),(4, ref('hr_base.group_division_manager')),]"/>
</record>
<record id="employee_other_request_hr_rule" model="ir.rule">
<field name="name">Allow HR : views Other Request of all employees</field>
<field name="model_id" ref="model_employee_department_jobs"/>
<field name="domain_force">[(1 ,'=', 1)]</field>
<field name="groups" eval="[(4, ref('hr_base.group_executive_manager')),
(4, ref('hr_base.group_general_manager')),
(4, ref('hr_base.group_services_manager')),
(4, ref('hr.group_hr_manager')),
(4, ref('hr.group_hr_user'))]"/>
</record>
<record id="employee_department_jobs_hr_rule_comp_rule" model="ir.rule">
<field name="name">Employee department multi company rule</field>
<field name="model_id" ref="model_employee_department_jobs"/>
<field name="domain_force">['|',('company_id','=',False),('company_id', 'in', company_ids)]</field>
</record>
<record id="employee_other_request_hr_rule_comp_rule" model="ir.rule">
<field name="name">Employee other request multi company rule</field>
<field name="model_id" ref="model_employee_other_request"/>
<field name="domain_force">['|',('company_id','=',False),('company_id', 'in', company_ids)]</field>
</record>
</data>
</odoo>