1
<?xml version="1.0" encoding="utf-8"?>
6
<!-- Project Managers (modified): now can access all documents *only in own projects* -->
7
<record model="ir.rule" id="project_issue.issue_project_manager_rule">
8
<field name="name">Project/Issue: project managers: sees all for Managed projects (modified)</field>
9
<field name="domain_force">[('user_id', '=', user.id)]</field>
11
<field name="model_id" ref="model_project_issue"/>
12
<field name="domain_force">[(1, '=', 1)]</field>
13
<field name="groups" eval="[(4,ref('project.group_project_manager'))]"/>
18
<!-- Project Users (new): can access public, followed/member or assigned -->
19
<record model="ir.rule" id="issue_employee_rule_read">
20
<field name="name">Project/Issue: project users: public, following/member or assigned</field>
21
<field name="model_id" ref="project_issue.model_project_issue"/>
22
<field name="domain_force">['|', '|','|',
23
('user_id', '=', user.id),
24
('project_id.privacy_visibility', 'in', ['public']),
25
('message_follower_ids', 'in', [user.partner_id.id]),
26
('project_id.members', 'in', [user.id]),
28
<field name="groups" eval="[(4,ref('project.group_project_user'))]"/>
29
<field name="perm_read" eval="True"/>
30
<field name="perm_create" eval="True"/>
31
<field name="perm_write" eval="True"/>
32
<field name="perm_unlink" eval="False"/>
36
<!-- Employees (modified): can access public or followed/member; can edit only in "draft" and "cancelled" states -->
37
<record model="ir.rule" id="project_issue.issue_user_rule">
38
<field name="name">Project/Issue: employees: READ public or followed/member)</field>
39
<field name="domain_force">['|','|','|',
40
('user_id', '=', user.id),
41
('project_id.privacy_visibility', 'in', ['public']),
42
('message_follower_ids', 'in', [user.partner_id.id]),
43
('project_id.members', 'in', [user.id]),
45
<field name="perm_read" eval="True"/>
46
<field name="perm_create" eval="False"/>
47
<field name="perm_write" eval="False"/>
48
<field name="perm_unlink" eval="False"/>
52
<!-- Employees (new for limited edit access): can edit public or followed/member, if in "draft" or "cancelled" states -->
53
<record model="ir.rule" id="issue_employee_rule_write">
54
<field name="name">Project/Issue: employees: WRITE public or followed/member</field>
55
<field name="model_id" ref="project_issue.model_project_issue"/>
56
<field name="domain_force">['&', ('stage_id.state', 'in', ['draft', 'cancelled', None]),
58
('user_id', '=', user.id),
59
('project_id.privacy_visibility', 'in', ['public']),
60
('message_follower_ids', 'in', [user.partner_id.id]),
61
('project_id.members', 'in', [user.id]),
63
<field name="groups" eval="[(4,ref('base.group_user'))]"/>
64
<field name="perm_read" eval="True"/>
65
<field name="perm_create" eval="True"/>
66
<field name="perm_write" eval="True"/>
67
<field name="perm_unlink" eval="False"/>
added
removed
project_issue_baseuser/security/project_security.xml
