From cae70b06af6138461a550ba5048817744affb340 Mon Sep 17 00:00:00 2001
From: Remi <remi@le-filament.com>
Date: Thu, 12 Mar 2020 12:01:50 +0100
Subject: [PATCH] Add rights on cgscop_timesheet_sheet to my UR only

---
 security/ir.model.access.csv |  1 -
 security/security_rules.xml  | 26 ++++++++++++++++++++++++++
 2 files changed, 26 insertions(+), 1 deletion(-)

diff --git a/security/ir.model.access.csv b/security/ir.model.access.csv
index 4e85c89..df99751 100644
--- a/security/ir.model.access.csv
+++ b/security/ir.model.access.csv
@@ -9,4 +9,3 @@ access_project_project_cg_manager,access_project_project_cg,model_project_projec
 access_account_analytic_account_ur_manager,access_account_analytic_account_ur,analytic.model_account_analytic_account,cgscop_partner.group_ur_list_modif,1,1,1,1
 access_account_analytic_account_cg_manager,access_account_analytic_account_cg,analytic.model_account_analytic_account,cgscop_partner.group_cg_administrator,1,1,1,1
 access_cgscop_timesheet_sheet_user,access_cgscop_timesheet_sheet_user,model_cgscop_timesheet_sheet,hr_timesheet.group_hr_timesheet_user,1,1,1,1
-access_cgscop_timesheet_sheet_manager,access_cgscop_timesheet_sheet_user,model_cgscop_timesheet_sheet,hr_timesheet.group_timesheet_manager,1,1,1,1
diff --git a/security/security_rules.xml b/security/security_rules.xml
index 6fb3eda..58d3543 100644
--- a/security/security_rules.xml
+++ b/security/security_rules.xml
@@ -51,5 +51,31 @@
             <field eval="True" name="global"/>
             <field name="active" eval="False"/>
         </record>
+
+        <record id="account.account_analytic_line_rule_billing_user" model="ir.rule">
+            <field name="name">account.analytic.line.billing.user</field>
+            <field name="model_id" ref="model_account_analytic_line"/>
+            <field name="perm_read" eval="False"/>
+            <field name="perm_write" eval="True"/>
+            <field name="perm_create" eval="True"/>
+            <field name="perm_unlink" eval="True"/>
+            <field name="active" eval="False"/>
+        </record>
+
+        <record id="timesheet_sheet_rule_ur" model="ir.rule">
+            <field name="name">Feuilles de temps de mon UR</field>
+            <field name="model_id" ref="cgscop_timesheet.model_cgscop_timesheet_sheet"/>
+            <field name="domain_force">[('ur_id','=',user.company_id.ur_id.id)]</field>
+            <field name="groups" eval="[(6, 0, [ref('base.group_user')])]"/>
+            <field eval="True" name="global"/>
+        </record>
+
+        <record id="timesheet_sheet_rule_administrator_ur" model="ir.rule">
+            <field name="name">Feuilles de temps administrator</field>
+            <field name="model_id" ref="cgscop_timesheet.model_cgscop_timesheet_sheet"/>
+            <field name="domain_force">[(1,'=',1)]</field>
+            <field name="groups" eval="[(6, 0, [ref('cgscop_partner.group_cg_administrator')])]"/>
+            <field eval="True" name="global"/>
+        </record>
     </data>
 </odoo>
-- 
GitLab