[UPD] security rules for UR restriction

security/security_rules.xml

@@ -3,7 +3,7 @@
      License AGPL-3.0 or later (https://www.gnu.org/licenses/agpl). -->
 <odoo>
     <data>
-
+        <!-- UR Financial System -->
         <record id="ur_financial_system_rule_ur" model="ir.rule">
             <field name="name">ur financial system rule per ur</field>
             <field name="model_id" ref="model_ur_financial_system" />
@@ -11,7 +11,7 @@
             <field name="groups" eval="[(6, 0, [ref('base.group_user')])]" />
             <field eval="True" name="global" />
         </record>
-
+        <!-- UR Regional Convention -->
         <record id="ur_regional_convention_rule_ur" model="ir.rule">
             <field name="name">ur regional convention rule per ur</field>
             <field name="model_id" ref="model_ur_regional_convention" />
@@ -19,7 +19,7 @@
             <field name="groups" eval="[(6, 0, [ref('base.group_user')])]" />
             <field eval="True" name="global" />
         </record>
-
+        <!-- UR Month Timesheet -->
         <record id="ur_month_timesheet_rule_ur" model="ir.rule">
             <field name="name">ur month timesheet rule per ur</field>
             <field name="model_id" ref="model_ur_month_timesheet" />
@@ -28,6 +28,7 @@
             <field eval="True" name="global" />
         </record>
 
+        <!-- Project -->
         <record id="project_rule_ur" model="ir.rule">
             <field name="name">project rule per ur</field>
             <field name="model_id" ref="project.model_project_project" />
@@ -35,7 +36,6 @@
             <field name="groups" eval="[(6, 0, [ref('base.group_user')])]" />
             <field eval="True" name="global" />
         </record>
-
         <record id="project_rule_administrator_ur" model="ir.rule">
             <field name="name">project rule for administrator</field>
             <field name="model_id" ref="project.model_project_project" />
@@ -47,32 +47,20 @@
             <field eval="True" name="global" />
         </record>
 
+        <!-- Analytic Line -->
         <record id="analytic_line_ur_rule" model="ir.rule">
             <field name="name">Analytic line UR rule</field>
             <field name="model_id" ref="analytic.model_account_analytic_line" />
             <field name="groups" eval="[(6, 0, [ref('base.group_user')])]" />
             <field eval="True" name="global" />
-            <field name="domain_force">[('company_id','in',company_ids)]</field>
+            <field name="domain_force">[('ur_id','=',user.current_ur_id.id)]</field>
         </record>
-
-        <record id="analytic_rule_administrator_ur" model="ir.rule">
-            <field name="name">Analytic line UR administrator rule</field>
-            <field name="model_id" ref="analytic.model_account_analytic_line" />
-            <field name="domain_force">[(1,'=',1)]</field>
-            <field
-                name="groups"
-                eval="[(6, 0, [ref('cgscop_partner.group_cg_administrator')])]"
-            />
-            <field eval="True" name="global" />
-        </record>
-
         <record id="analytic.analytic_line_comp_rule" model="ir.rule">
             <field name="name">Analytic line multi company rule</field>
             <field name="model_id" ref="model_account_analytic_line" />
             <field eval="True" name="global" />
             <field name="active" eval="False" />
         </record>
-
         <record id="account.account_analytic_line_rule_billing_user" model="ir.rule">
             <field name="name">analytic.analytic.line.billing.user</field>
             <field name="model_id" ref="model_account_analytic_line" />
@@ -83,29 +71,16 @@
             <field name="active" eval="False" />
         </record>
 
+        <!-- CGScop Timesheet Sheet -->
         <record id="timesheet_sheet_rule_ur" model="ir.rule">
             <field name="name">Feuilles de temps de mon UR</field>
             <field
                 name="model_id"
                 ref="cgscop_timesheet.model_cgscop_timesheet_sheet"
             />
-            <field name="domain_force">[('company_id','in',company_ids)]</field>
+            <field name="domain_force">[('ur_id','=',user.current_ur_id.id)]</field>
             <field name="groups" eval="[(6, 0, [ref('base.group_user')])]" />
             <field eval="True" name="global" />
         </record>
-
-        <record id="timesheet_sheet_rule_administrator_ur" model="ir.rule">
-            <field name="name">Feuilles de temps administrator</field>
-            <field
-                name="model_id"
-                ref="cgscop_timesheet.model_cgscop_timesheet_sheet"
-            />
-            <field name="domain_force">[(1,'=',1)]</field>
-            <field
-                name="groups"
-                eval="[(6, 0, [ref('cgscop_partner.group_cg_administrator')])]"
-            />
-            <field eval="True" name="global" />
-        </record>
     </data>
 </odoo>