From: Ludovic CHEVALIER <ludovic@beurresarrasin.net>
Date: Thu, 23 Mar 2017 13:44:06 +0000 (+0100)
Subject: [SECURITY] ~fix lhc employees menu access
X-Git-Tag: production~35
X-Git-Url: http://git.cyclocoop.org/?p=burette%2Flhc.git;a=commitdiff_plain;h=2c442653ae8786bfb7f376e7df33883ba8176456

[SECURITY] ~fix lhc employees menu access
---

diff --git a/security/lhc_custom_oe_security.xml b/security/lhc_custom_oe_security.xml
index 98fcef0..70ccc94 100644
--- a/security/lhc_custom_oe_security.xml
+++ b/security/lhc_custom_oe_security.xml
@@ -19,17 +19,19 @@
             <field name="name">L'Heureux Cyclage employees</field>
             <field name="implied_ids" eval="[(4, ref('base.group_user'))]"/>
             <field name="category_id" ref="module_category_lhc"/>
-            <field name="menu_access" eval="[(4, ref('hr.menu_hr_root'))]"/>
-            <field name="menu_access" eval="[(4, ref('hr.menu_hr_main'))]"/>
-            <field name="menu_access" eval="[(4, ref('hr.menu_open_view_employee_list_my'))]"/>
-            <field name="menu_access" eval="[(4, ref('hr_contract.hr_menu_contract'))]"/>
-            <field name="menu_access" eval="[(4, ref('sale.menu_sale_order'))]"/>
-            <field name="menu_access" eval="[(4, ref('hr_expense.menu_expense_all'))]"/>
-            <field name="menu_access" eval="[(4, ref('event.menu_action_registration'))]"/>
-            <field name="menu_access" eval="[(4, ref('hr_expense.menu_expense_all'))]"/>
-            <field name="menu_access" eval="[(4, ref('hr_holidays.menu_open_ask_holidays'))]"/>
-            <field name="menu_access" eval="[(4, ref('base.menu_association'))]"/>
-            <field name="menu_access" eval="[(4, ref('account.menu_finance'))]"/>
+            <field name="menu_access" eval="[(6, 0, [
+                ref('account.menu_finance'),
+                ref('base.menu_association'),
+                ref('event.menu_action_registration'),
+                ref('hr.menu_hr_main'),
+                ref('hr.menu_hr_root'),
+                ref('hr.menu_open_view_employee_list_my'),
+                ref('hr_contract.hr_menu_contract'),
+                ref('hr_expense.menu_expense_all'),
+                ref('hr_expense.next_id_49'),
+                ref('hr_holidays.menu_open_ask_holidays'),
+                ref('sale.menu_sale_order'),
+                ])]"/>
         </record>
     </data>
 </openerp>