Initial commit: OCA Technical packages (595 packages)

odoo-bringout-oca-server-ux-announcement/doc/SECURITY.md

@@ -0,0 +1,42 @@
+# Security
+
+Access control and security definitions in announcement.
+
+## Access Control Lists (ACLs)
+
+Model access permissions defined in:
+- **[ir.model.access.csv](../announcement/security/ir.model.access.csv)**
+  - 6 model access rules
+
+## Record Rules
+
+Row-level security rules defined in:
+
+## Security Groups & Configuration
+
+Security groups and permissions defined in:
+- **[announcement_security.xml](../announcement/security/announcement_security.xml)**
+  - 1 security groups defined
+
+```mermaid
+graph TB
+    subgraph "Security Layers"
+        A[Users] --> B[Groups]
+        B --> C[Access Control Lists]
+        C --> D[Models]
+        B --> E[Record Rules]
+        E --> F[Individual Records]
+    end
+```
+
+Security files overview:
+- **[announcement_security.xml](../announcement/security/announcement_security.xml)**
+  - Security groups, categories, and XML-based rules
+- **[ir.model.access.csv](../announcement/security/ir.model.access.csv)**
+  - Model access permissions (CRUD rights)
+
+Notes
+- Access Control Lists define which groups can access which models
+- Record Rules provide row-level security (filter records by user/group)
+- Security groups organize users and define permission sets
+- All security is enforced at the ORM level by Odoo