18.0 vanilla

odoo-bringout-oca-ocb-base/odoo/addons/base/security/base_groups.xml

@@ -24,6 +24,7 @@
 
         <record model="res.groups" id="group_user">
             <field name="name">Internal User</field>
+            <field name="api_key_duration">90.0</field>
         </record>
 
         <record id="default_user" model="res.users">

odoo-bringout-oca-ocb-base/odoo/addons/base/security/base_security.xml

@@ -203,5 +203,55 @@
             <field name="domain_force">[(1, '=', 1)]</field>
             <field name="groups" eval="[Command.link(ref('base.group_system'))]"/>
         </record>
+
+        <!-- rules for embedded actions -->
+        <record id="embedded_action_user_delete_rule" model="ir.rule">
+            <field name="name">Users can modify or delete embedded actions that they have created or that are shared</field>
+            <field name="model_id" ref="model_ir_embedded_actions"/>
+            <field name="domain_force">[('user_id', 'in', [user.id, False])]</field>
+            <field name="groups" eval="[Command.link(ref('base.group_user'))]"/>
+            <field name="perm_read" eval="False"/>
+            <field name="perm_write" eval="True"/>
+            <field name="perm_create" eval="False"/>
+            <field name="perm_unlink" eval="True"/>
+        </record>
+         <record id="embedded_action_admin_delete_rule" model="ir.rule">
+            <field name="name">Admins have all the rights on embedded actions</field>
+            <field name="model_id" ref="model_ir_embedded_actions"/>
+            <field name="domain_force">[(1, '=', 1)]</field>
+            <field name="groups" eval="[Command.link(ref('base.group_system'))]"/>
+            <field name="perm_read" eval="False"/>
+            <field name="perm_write" eval="True"/>
+            <field name="perm_create" eval="False"/>
+            <field name="perm_unlink" eval="True"/>
+        </record>
+
+        <!-- Record Rules For User Devices -->
+        <record id="user_device" model="ir.rule">
+            <field name="name">Users can read only their own devices</field>
+            <field name="model_id" ref="model_res_device"/>
+            <field name="domain_force">[('user_id', '=', user.id)]</field>
+            <field name="groups" eval="[Command.link(ref('base.group_user'))]"/>
+        </record>
+        <record id="user_device_admin" model="ir.rule">
+            <field name="name">Administrators can read all devices</field>
+            <field name="model_id" ref="model_res_device"/>
+            <field name="domain_force">[(1, '=', 1)]</field>
+            <field name="groups" eval="[Command.link(ref('base.group_system'))]"/>
+        </record>
+
+        <record id="user_device_logs" model="ir.rule">
+            <field name="name">Users can read only their own device logs</field>
+            <field name="model_id" ref="model_res_device_log"/>
+            <field name="domain_force">[('user_id', '=', user.id)]</field>
+            <field name="groups" eval="[Command.link(ref('base.group_user'))]"/>
+        </record>
+        <record id="user_device_logs_admin" model="ir.rule">
+            <field name="name">Administrators can read all device logs</field>
+            <field name="model_id" ref="model_res_device_log"/>
+            <field name="domain_force">[(1, '=', 1)]</field>
+            <field name="groups" eval="[Command.link(ref('base.group_system'))]"/>
+        </record>
+
     </data>
 </odoo>

odoo-bringout-oca-ocb-base/odoo/addons/base/security/ir.model.access.csv

@@ -3,6 +3,7 @@
 "access_ir_attachment_group_user","ir_attachment group_user","model_ir_attachment","group_user",1,1,1,1
 "access_ir_attachment_group_portal_public","ir_attachment group_portal_public","model_ir_attachment",,0,0,0,0
 "access_ir_cron_group_cron","ir_cron group_cron","model_ir_cron","group_system",1,1,1,1
+"access_ir_cron_progress_group_cron","ir_cron_progress group_cron","model_ir_cron_progress","group_system",1,1,1,1
 "access_ir_cron_trigger_group_cron","ir_cron_trigger group_cron","model_ir_cron_trigger","group_system",1,1,1,1
 "access_ir_exports_group_system","ir_exports group_system","model_ir_exports","base.group_allow_export",1,1,1,1
 "access_ir_exports_line_group_system","ir_exports_line group_system","model_ir_exports_line","base.group_user",1,1,1,1
@@ -22,8 +23,6 @@
 "access_ir_module_module_group_user","ir_module_module group_user","model_ir_module_module","group_system",1,1,1,1
 "access_ir_module_module_dependency_group_system","ir_module_module_dependency group_system","model_ir_module_module_dependency","group_system",1,1,1,1
 "access_ir_module_module_exclusion_group_system","ir_module_module_exclusion group_system","model_ir_module_module_exclusion","group_system",1,1,1,1
-"access_ir_property_group_user","ir_property group_user","model_ir_property",,0,0,0,0
-"access_ir_property_group_system","ir_property group_system","model_ir_property","base.group_system",1,1,1,0
 "access_ir_rule_group_erp_manager","ir_rule group_erp_manager","model_ir_rule","group_erp_manager",1,1,1,1
 "access_ir_sequence_group_user","ir_sequence group_user","model_ir_sequence","group_user",1,0,0,0
 "access_ir_sequence_group_system","ir_sequence group_system","model_ir_sequence","group_system",1,1,1,1
@@ -106,6 +105,7 @@ access_res_users_settings_user,res.users.settings,model_res_users_settings,group
 "access_ir_actions_act_window_view_group_system","ir_actions_act_window_view_group_system","model_ir_actions_act_window_view","group_system",1,1,1,1
 "access_ir_actions_act_url_group_system","ir_actions_act_url_group_system","model_ir_actions_act_url","group_system",1,1,1,1
 "access_ir_actions_server_group_system","ir_actions_server_group_system","model_ir_actions_server","group_system",1,1,1,1
+"access_ir_embedded_actions_group_user","ir_embedded_actions_group_user","model_ir_embedded_actions","group_user",1,1,1,1
 "access_ir_actions_client","ir_actions_client all","model_ir_actions_client","group_system",1,1,1,1
 "access_res_bank_group_system","res_bank_group_system","model_res_bank","group_system",1,1,1,1
 "access_res_bank_group_partner_manager","res_bank_group_partner_manager","model_res_bank","group_partner_manager",1,1,1,1
@@ -126,7 +126,6 @@ access_res_users_settings_user,res.users.settings,model_res_users_settings,group
 "access_ir_demo_failure","access.ir.demo_failure","model_ir_demo_failure","base.group_system",1,1,1,0
 "access_ir_demo_failure_wizard","access.ir.demo_failure.wizard","model_ir_demo_failure_wizard","base.group_system",1,1,1,0
 "access_res_config","access.res.config","model_res_config","base.group_system",1,1,1,0
-"access_res_config_installer","access.res.config.installer","model_res_config_installer","base.group_system",1,1,1,0
 "access_res_config_settings","access.res.config.settings","model_res_config_settings","base.group_system",1,1,1,0
 "access_change_password_wizard","access.change.password.wizard","model_change_password_wizard","base.group_erp_manager",1,1,1,0
 "access_change_password_user","access.change.password.user","model_change_password_user","base.group_erp_manager",1,1,1,0
@@ -141,3 +140,5 @@ access_res_users_settings_user,res.users.settings,model_res_users_settings,group
 "access_base_partner_merge_automatic_wizard","access.base.partner.merge.automatic.wizard","model_base_partner_merge_automatic_wizard","base.group_partner_manager",1,1,1,0
 "access_ir_profile","ir_profile","model_ir_profile","group_system",1,1,1,1
 "access_base_enable_profiling_wizard","access.base.enable.profiling.wizard","model_base_enable_profiling_wizard","group_system",1,1,1,0
+"access_res_device",access_res_device,base.model_res_device,base.group_user,1,0,0,0
+"access_res_device_log",access_res_device_log,base.model_res_device_log,base.group_user,1,0,0,0