[SECURITY] +res_partner read access to group_volunteers

[burette/lhc.git] / security / lhc_custom_oe_security.xml

diff --git a/security/lhc_custom_oe_security.xml b/security/lhc_custom_oe_security.xml
index 98fcef0..7356678 100644 (file)
--- a/security/lhc_custom_oe_security.xml
+++ b/security/lhc_custom_oe_security.xml
@@ -6,9 +6,22 @@
             <field name="sequence">5</field>
             <field name="description">Customize OpenERP for L'Heureux Cyclage usages.</field>
         </record>
+        <record id="group_volunteer" model="res.groups">
+            <field name="name">Volunteer</field>
+            <field name="category_id" ref="module_category_lhc"/>
+            <field name="menu_access" eval="[(6, 0, [
+                ref('hr.menu_hr_root'),
+                ref('hr_expense.next_id_49'),
+                ref('hr_expense.menu_expense_all'),
+                ])]"/>
+            <field name="implied_ids" eval="[(4, ref('analytic.group_analytic_accounting'))]"/>
+        </record>
         <record id="group_ca" model="res.groups">
             <field name="name">Administration board members</field>
-            <field name="implied_ids" eval="[(4, ref('base.group_user'))]"/>
+            <field name="implied_ids" eval="[
+                (4, ref('group_volunteer')),
+                (4, ref('base.group_user')),
+                ]"/>
             <field name="category_id" ref="module_category_lhc"/>
         </record>
         <record id="group_rencontres" model="res.groups">
@@ -19,17 +32,22 @@
             <field name="name">L'Heureux Cyclage employees</field>
             <field name="implied_ids" eval="[(4, ref('base.group_user'))]"/>
             <field name="category_id" ref="module_category_lhc"/>
-            <field name="menu_access" eval="[(4, ref('hr.menu_hr_root'))]"/>
-            <field name="menu_access" eval="[(4, ref('hr.menu_hr_main'))]"/>
-            <field name="menu_access" eval="[(4, ref('hr.menu_open_view_employee_list_my'))]"/>
-            <field name="menu_access" eval="[(4, ref('hr_contract.hr_menu_contract'))]"/>
-            <field name="menu_access" eval="[(4, ref('sale.menu_sale_order'))]"/>
-            <field name="menu_access" eval="[(4, ref('hr_expense.menu_expense_all'))]"/>
-            <field name="menu_access" eval="[(4, ref('event.menu_action_registration'))]"/>
-            <field name="menu_access" eval="[(4, ref('hr_expense.menu_expense_all'))]"/>
-            <field name="menu_access" eval="[(4, ref('hr_holidays.menu_open_ask_holidays'))]"/>
-            <field name="menu_access" eval="[(4, ref('base.menu_association'))]"/>
-            <field name="menu_access" eval="[(4, ref('account.menu_finance'))]"/>
+            <field name="menu_access" eval="[(6, 0, [
+                ref('account.menu_finance'),
+                ref('base.menu_association'),
+                ref('event.menu_action_registration'),
+                ref('hr.menu_hr_main'),
+                ref('hr.menu_hr_root'),
+                ref('hr.menu_open_view_employee_list_my'),
+                ref('hr_contract.hr_menu_contract'),
+                ref('hr_expense.menu_expense_all'),
+                ref('hr_expense.next_id_49'),
+                ref('hr_holidays.menu_open_ask_holidays'),
+                ref('sale.menu_sale_order'),
+                ])]"/>
+        </record>
+        <record id="base.menu_association" model="ir.ui.menu">
+            <field name="groups_id" eval="[(4, ref('group_volunteer'))]"/>
         </record>
     </data>
 </openerp>