odex30_standard/hr_base/security/hr_base_security.xml

165 lines
7.8 KiB
XML

<?xml version="1.0" ?>
<odoo>
<record id="group_division_manager" model="res.groups">
<field name="name">Division Manager</field>
<field name="category_id" ref="base.module_category_human_resources_employees" />
<field name="implied_ids" eval="[(4, ref('base.group_user'))]" />
<field name="comment">This user is the head of a division and it is the direct manager of the employee.</field>
</record>
<record id="group_department_manager" model="res.groups">
<field name="name">Department Manager</field>
<field name="category_id" ref="base.module_category_human_resources_employees" />
<field name="implied_ids" eval="[(4, ref('hr_base.group_division_manager'))]" />
<field name="comment">This user is the head of a department and it is the second direct manager of the employee.</field>
</record>
<record id="group_executive_manager" model="res.groups">
<field name="name">Executive Manager</field>
<field name="category_id" ref="base.module_category_human_resources_employees" />
<field name="implied_ids" eval="[(4, ref('base.group_user'))]" />
<field name="comment">Executive Manager</field>
</record>
<record id="group_general_manager" model="res.groups">
<field name="name">General Manager</field>
<field name="category_id" ref="base.module_category_human_resources_employees" />
<field name="implied_ids" eval="[(4, ref('base.group_user'))]" />
<field name="comment">This user is the head of the company.</field>
</record>
<record id="group_account_manager" model="res.groups">
<field name="name">Accounting Manager</field>
<field name="category_id" ref="base.module_category_human_resources_employees" />
<field name="implied_ids" eval="[(4, ref('base.group_user'))]" />
<field name="comment">Accounting Manager.</field>
</record>
<record id="group_government_relations" model="res.groups">
<field name="name">Government Relations</field>
<field name="category_id" ref="base.module_category_human_resources_employees" />
<field name="implied_ids" eval="[(4, ref('base.group_user'))]" />
<field name="comment">This user is the government relations.</field>
</record>
<record id="group_IT_manager" model="res.groups">
<field name="name">IT Manager</field>
<field name="category_id" ref="base.module_category_human_resources_employees" />
<field name="implied_ids" eval="[(4, ref('base.group_user'))]" />
<field name="comment">This user is the IT Manager.</field>
</record>
<record id="group_services_manager" model="res.groups">
<field name="name">Shared Services</field>
<field name="category_id" ref="base.module_category_human_resources_employees" />
<field name="implied_ids" eval="[(4, ref('base.group_user'))]" />
<field name="comment">This user is the Shared services Manager.</field>
</record>
<record id="group_administrative_affairs" model="res.groups">
<field name="name">Administrative Affairs</field>
<field name="category_id" ref="base.module_category_human_resources_employees" />
<field name="implied_ids" eval="[(4, ref('base.group_user'))]" />
<field name="comment">This user is Administrative Affairs Manager.</field>
</record>
<record id="group_cyber_security" model="res.groups">
<field name="name">Cyber Security</field>
<field name="category_id" ref="base.module_category_human_resources_employees" />
<field name="implied_ids" eval="[(4, ref('base.group_user'))]" />
<field name="comment">This user is the Cyber Security.</field>
</record>
<!-- Rules-->
<record id="hr_employee_employee_rule" model="ir.rule">
<field name="name">Employee: views its profile only</field>
<field name="model_id" ref="model_hr_employee" />
<field name="global" eval="True"/>
<field name="domain_force">[('user_id','=',user.id)] </field>
<field name="groups" eval="[(4, ref('base.group_user'))]"/>
<field name="perm_read" eval="1"/>
<field name="perm_write" eval="0"/>
<field name="perm_unlink" eval="0"/>
<field name="perm_create" eval="0"/>
</record>
<record id="hr_employee_manager_rule" model="ir.rule">
<field name="name"> Manager: views profiles of its subordinates </field>
<field name="model_id" ref="model_hr_employee" />
<field name="domain_force">['|','|',('department_id.manager_id','=',False),
('department_id.manager_id.user_id','=', user.id),
('department_id','child_of', user.employee_id.department_id.id if user.employee_id and user.employee_id.department_id else False)]
</field>
<field
name="groups"
eval="[(4, ref('hr_base.group_department_manager')),(4, ref('hr_base.group_division_manager'))]"
/>
</record>
<record id="hr_employee_all_rule" model="ir.rule">
<field name="name"> Manager: views profiles of all employee </field>
<field name="model_id" ref="model_hr_employee" />
<field name="domain_force">[(1 ,'=', 1)]</field>
<field
name="groups"
eval="[(3, ref('hr_base.group_account_manager')),
(4, ref('hr_base.group_executive_manager')),
(4, ref('hr_base.group_general_manager')),
(4, ref('hr.group_hr_manager')),
(4, ref('hr.group_hr_user'))]"
/>
</record>
<!-- <record id="hr_timesheet.timesheet_line_rule_user" model="ir.rule">-->
<!-- <field name="perm_read" eval="1"/>-->
<!-- </record>-->
<!-- Commented out - account.analytic.line doesn't have department_id field in Odoo 18 -->
<!--<record id="timesheet_line__manager_rule" model="ir.rule">-->
<!--<field name="name"> Manager: views timesheets of its subordinates </field>-->
<!--<field name="model_id" ref="analytic.model_account_analytic_line" />-->
<!--<field name="domain_force">['|','|',('department_id.manager_id','=',False),-->
<!--('department_id.manager_id.user_id','=', user.id),-->
<!--<field-->
<!--name="groups"-->
<!--eval="[(4, ref('hr_base.group_department_manager')),(4, ref('hr_base.group_division_manager'))]"-->
<!--/>-->
<!--<field name="perm_create" eval="0" />-->
<!--<field name="perm_write" eval="0" />-->
<!--<field name="perm_unlink" eval="0" />-->
<!--<field name="perm_read" eval="1" />-->
<!--</record>-->
<!--<record id="timesheet_line_hr_rule" model="ir.rule">-->
<!--<field name="name"> Manager: views timesheets of all employees </field>-->
<!--<field name="model_id" ref="analytic.model_account_analytic_line" />-->
<!--<field name="domain_force">[(1 ,'=', 1)]</field>-->
<!--<field-->
<!--name="groups"-->
<!--eval="[(4, ref('hr_base.group_executive_manager')),-->
<!--(4, ref('hr_base.group_general_manager')),-->
<!--(4, ref('hr.group_hr_user'))]"-->
<!--/>-->
<!--<field name="perm_create" eval="0" />-->
<!--<field name="perm_write" eval="0" />-->
<!--<field name="perm_unlink" eval="0" />-->
<!--<field name="perm_read" eval="1" />-->
<!--</record>-->
<!--<record id="hr.group_hr_user" model="res.groups">-->
<!--<field name="implied_ids" eval="[(4,ref('hr_expense.group_hr_expense_user'))]"/>-->
<!--</record>-->
<!--<record id="hr.group_hr_manager" model="res.groups">-->
<!--<field name="implied_ids" eval="[(4,ref('hr_expense.group_hr_expense_manager'))]"/>-->
<!--</record>-->
</odoo>