security_rules.xml

<?xml version="1.0"?>
<!-- Copyright 2019 Le Filament
     License AGPL-3.0 or later (https://www.gnu.org/licenses/agpl). -->

<odoo>
    <data noupdate="0">
        <record id="group_ur_list_modif" model="res.groups">
            <field name="name">Modifier les listes spécifiques de mon UR</field>
        </record>

        <record id="group_cg_administrative" model="res.groups">
            <field name="name">Administratif CG (modification périodes)</field>
        </record>

        <record id="group_cg_administrator" model="res.groups">
            <field name="name">Administrateur CG (modification listes)</field>
            <field name="implied_ids" eval="[(4, ref('cgscop_partner.group_cg_administrative')), (4, ref('group_ur_list_modif'))]"/>
        </record>

        <record id="base.res_users_rule" model="ir.rule">
            <field name="name">user rule</field>
            <field name="model_id" ref="base.model_res_users"/>
            <field name="domain_force">[('company_ids','child_of',[user.company_id.id])]</field>
            <field name="groups" eval="[(6, 0, [ref('base.group_erp_manager')])]"/>
            <field eval="True" name="global"/>
        </record>

        <record id="res_partner_rule_ur" model="ir.rule">
            <field name="name">user rule administrator cg</field>
            <field name="model_id" ref="base.model_res_users"/>
            <field name="domain_force">[(1,'=',1)]</field>
            <field name="groups" eval="[(6, 0, [ref('cgscop_partner.group_cg_administrator')])]"/>
            <field eval="True" name="global"/>
        </record>

        <record id="res_partner_rule_ur" model="ir.rule">
            <field name="name">partner rule per ur</field>
            <field name="model_id" ref="base.model_res_partner"/>
            <field name="domain_force">['|',('ur_id','=',False),('ur_id','=',user.company_id.ur_id.id)]</field>
            <field name="groups" eval="[(6, 0, [ref('base.group_user')])]"/>
            <field name="perm_read" eval="False"/>
            <field name="perm_write" eval="True"/>
            <field name="perm_create" eval="True"/>
            <field name="perm_unlink" eval="False"/>
        </record>

        <record id="res_partner_rule_admin" model="ir.rule">
            <field name="name">partner rule per ur</field>
            <field name="model_id" ref="base.model_res_partner"/>
            <field name="domain_force">[(1,'=',1)]</field>
            <field name="groups" eval="[(6, 0, [ref('cgscop_partner.group_cg_administrator')])]"/>
            <field name="perm_read" eval="False"/>
            <field name="perm_write" eval="True"/>
            <field name="perm_create" eval="False"/>
            <field name="perm_unlink" eval="False"/>
        </record>

        <record id="res_partner_segment_rule_ur" model="ir.rule">
            <field name="name">segment rule per ur</field>
            <field name="model_id" ref="model_res_partner_segment"/>
            <field name="domain_force">[('ur_id','=',user.company_id.ur_id.id)]</field>
            <field name="groups" eval="[(6, 0, ref('base.group_user'))]"/>
            <field eval="True" name="global"/>
        </record>

        <record id="res_partner_segment_rule_admin" model="ir.rule">
            <field name="name">partner rule per ur</field>
            <field name="model_id" ref="model_res_partner_segment"/>
            <field name="domain_force">[(1,'=',1)]</field>
            <field name="groups" eval="[(6, 0, [ref('cgscop_partner.group_cg_administrator')])]"/>
            <field eval="True" name="global"/>
        </record>

        <record id="base.access_res_partner_group_partner_manager" model="ir.model.access">
            <field name="name">res_partner group_partner_manager</field>
            <field name="model_id" ref="base.model_res_partner"/>
            <field name="group_id" ref="base.group_partner_manager"/>
            <field name="perm_read" eval="True"/>
            <field name="perm_write" eval="True"/>
            <field name="perm_create" eval="True"/>
            <field name="perm_unlink" eval="False"/>
        </record>
    </data>
</odoo>