oca/oca-workflow-process
2
0
Fork 0
mirror of https://github.com/bringout/oca-workflow-process.git synced 2026-04-20 03:12:01 +02:00
Code Issues Projects Releases Packages Wiki Activity Actions

Initial commit: OCA Workflow Process packages (456 packages)

Browse source
This commit is contained in:
Ernad Husremovic 2025-08-29 15:43:00 +02:00
commit d366e42934
18799 changed files with 1284507 additions and 0 deletions
Download patch file Download diff file Expand all files Collapse all files

115
odoo-bringout-oca-purchase-workflow-purchase_security/purchase_security/README.rst Normal file
View file

@ -0,0 +1,115 @@
=======================
Purchase Order security
=======================
..
!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!
!! This file is generated by oca-gen-addon-readme !!
!! changes will be overwritten. !!
!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!
!! source digest: sha256:9e1bbc1a8aa6093aa6f5cffb798552acf8886822317f4ed66d7b5da5684ea62d
!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!
.. |badge1| image:: https://img.shields.io/badge/maturity-Production%2FStable-green.png
:target: https://odoo-community.org/page/development-status
:alt: Production/Stable
.. |badge2| image:: https://img.shields.io/badge/licence-AGPL--3-blue.png
:target: http://www.gnu.org/licenses/agpl-3.0-standalone.html
:alt: License: AGPL-3
.. |badge3| image:: https://img.shields.io/badge/github-OCA%2Fpurchase--workflow-lightgray.png?logo=github
:target: https://github.com/OCA/purchase-workflow/tree/16.0/purchase_security
:alt: OCA/purchase-workflow
.. |badge4| image:: https://img.shields.io/badge/weblate-Translate%20me-F47D42.png
:target: https://translation.odoo-community.org/projects/purchase-workflow-16-0/purchase-workflow-16-0-purchase_security
:alt: Translate me on Weblate
.. |badge5| image:: https://img.shields.io/badge/runboat-Try%20me-875A7B.png
:target: https://runboat.odoo-community.org/builds?repo=OCA/purchase-workflow&target_branch=16.0
:alt: Try me on Runboat
|badge1| |badge2| |badge3| |badge4| |badge5|
This addon creates new groups in Purchase.
Visibility of purchase orders is restricted for users in these groups.
You can only see the purchase order:
- User (own orders): If you are a follower of the partner or there is no user
or you are the partner's user.
- User (team orders): If you are a follower of the partner or there is no user
or you are a user of your purchasing team.
**Table of contents**
.. contents::
:local:
Usage
=====
To use this module, you need to:
#. Go to **Purchase > Orders > Purchase Orders**
#. Create a Purchase Order and assing a **Purchase Representative**
(in the **Other Information** tab), if you are a Purchase User or Manager.
If you are a Purchass User (own orders), i'll be automatically assigned,
and you won't be able to change it
#. Confirm the Purchase Order
#. Go back to the **Purchase Orders** view.
#. If you are a Purchase User or a Purchase Manager, you should be
able to see all orders. If not, you'll only see your own orders.
Bug Tracker
===========
Bugs are tracked on `GitHub Issues <https://github.com/OCA/purchase-workflow/issues>`_.
In case of trouble, please check there if your issue has already been reported.
If you spotted it first, help us to smash it by providing a detailed and welcomed
`feedback <https://github.com/OCA/purchase-workflow/issues/new?body=module:%20purchase_security%0Aversion:%2016.0%0A%0A**Steps%20to%20reproduce**%0A-%20...%0A%0A**Current%20behavior**%0A%0A**Expected%20behavior**>`_.
Do not contact contributors directly about support or help with technical issues.
Credits
=======
Authors
~~~~~~~
* Tecnativa
Contributors
~~~~~~~~~~~~
* `Tecnativa <https://www.tecnativa.com>`_:
* João Marques
* Pilar Vargas
* Stefan Ungureanu
* Pedro M. Baeza
* `Solvos <https://www.solvos.es>`_:
* David Alonso <david.alonso@solvos.es>
Maintainers
~~~~~~~~~~~
This module is maintained by the OCA.
.. image:: https://odoo-community.org/logo.png
:alt: Odoo Community Association
:target: https://odoo-community.org
OCA, or the Odoo Community Association, is a nonprofit organization whose
mission is to support the collaborative development of Odoo features and
promote its widespread use.
.. |maintainer-pilarvargas-tecnativa| image:: https://github.com/pilarvargas-tecnativa.png?size=40px
:target: https://github.com/pilarvargas-tecnativa
:alt: pilarvargas-tecnativa
Current `maintainer <https://odoo-community.org/page/maintainer-role>`__:
|maintainer-pilarvargas-tecnativa|
This module is part of the `OCA/purchase-workflow <https://github.com/OCA/purchase-workflow/tree/16.0/purchase_security>`_ project on GitHub.
You are welcome to contribute. To learn how please visit https://odoo-community.org/page/Contribute.

1
odoo-bringout-oca-purchase-workflow-purchase_security/purchase_security/__init__.py Normal file
View file

@ -0,0 +1 @@
from . import models

23
odoo-bringout-oca-purchase-workflow-purchase_security/purchase_security/__manifest__.py Normal file
View file

@ -0,0 +1,23 @@
# License AGPL-3.0 or later (https://www.gnu.org/licenses/agpl.html).
{
"name": "Purchase Order security",
"version": "16.0.2.0.2",
"category": "Purchase",
"development_status": "Production/Stable",
"author": "Tecnativa, Odoo Community Association (OCA)",
"summary": "See only your purchase orders",
"website": "https://github.com/OCA/purchase-workflow",
"license": "AGPL-3",
"depends": ["purchase"],
"maintainers": ["pilarvargas-tecnativa"],
"data": [
"security/security.xml",
"security/ir.model.access.csv",
"views/purchase_order_views.xml",
"views/purchase_team_views.xml",
"views/res_partner_views.xml",
],
"installable": True,
"auto_install": False,
}

154
odoo-bringout-oca-purchase-workflow-purchase_security/purchase_security/i18n/bs.po Normal file
View file

@ -0,0 +1,154 @@
# Translation of Odoo Server.
# This file contains the translation of the following modules:
# * purchase_security
#
msgid ""
msgstr ""
"Project-Id-Version: Odoo Server 16.0\n"
"Report-Msgid-Bugs-To: \n"
"Last-Translator: \n"
"Language-Team: \n"
"MIME-Version: 1.0\n"
"Content-Type: text/plain; charset=UTF-8\n"
"Content-Transfer-Encoding: \n"
"Plural-Forms: \n"
#. module: purchase_security
#: model_terms:ir.ui.view,arch_db:purchase_security.purchase_team_form
msgid "<i class=\"fa fa-envelope mr-1\" role=\"img\" aria-label=\"Email\" title=\"Email\"/>"
msgstr "<i class="
#. module: purchase_security
#: model_terms:ir.ui.view,arch_db:purchase_security.purchase_team_form
msgid "Avatar"
msgstr "Avatar"
#. module: purchase_security
#: model:ir.model,name:purchase_security.model_res_partner
msgid "Contact"
msgstr "Kontakt"
#. module: purchase_security
#: model:ir.model.fields,field_description:purchase_security.field_purchase_team__create_uid
msgid "Created by"
msgstr "Kreirao"
#. module: purchase_security
#: model:ir.model.fields,field_description:purchase_security.field_purchase_team__create_date
msgid "Created on"
msgstr "Kreirano"
#. module: purchase_security
#: model:ir.model.fields,field_description:purchase_security.field_purchase_team__display_name
msgid "Display Name"
msgstr "Prikazani naziv"
#. module: purchase_security
#: model:ir.model.fields,field_description:purchase_security.field_purchase_team__id
msgid "ID"
msgstr "ID"
#. module: purchase_security
#: model:ir.model.fields,field_description:purchase_security.field_purchase_order__is_user_id_editable
msgid "Is User Id Editable"
msgstr "ID korisnika se može uređivati"
#. module: purchase_security
#: model:ir.model.fields,field_description:purchase_security.field_purchase_team____last_update
msgid "Last Modified on"
msgstr "Zadnje mijenjano"
#. module: purchase_security
#: model:ir.model.fields,field_description:purchase_security.field_purchase_team__write_uid
msgid "Last Updated by"
msgstr "Zadnji ažurirao"
#. module: purchase_security
#: model:ir.model.fields,field_description:purchase_security.field_purchase_team__write_date
msgid "Last Updated on"
msgstr "Zadnje ažurirano"
#. module: purchase_security
#: model_terms:ir.ui.view,arch_db:purchase_security.purchase_team_form
msgid "Members"
msgstr "Članovi"
#. module: purchase_security
#: model:ir.model.fields,field_description:purchase_security.field_purchase_team__name
msgid "Name"
msgstr "Naziv:"
#. module: purchase_security
#: model:ir.model,name:purchase_security.model_purchase_order
msgid "Purchase Order"
msgstr "Nalog za nabavu"
#. module: purchase_security
#: model:ir.model,name:purchase_security.model_purchase_team
#: model_terms:ir.ui.view,arch_db:purchase_security.purchase_team_form
msgid "Purchase Team"
msgstr "Nabavni tim"
#. module: purchase_security
#: model:ir.actions.act_window,name:purchase_security.action_purchase_team_display
#: model:ir.ui.menu,name:purchase_security.menu_purchase_team_tree
msgid "Purchase Teams"
msgstr "Nabavni timovi"
#. module: purchase_security
#: model:ir.model.fields,field_description:purchase_security.field_purchase_team__user_ids
msgid "Purchase Users"
msgstr "Korisnici nabavke"
#. module: purchase_security
#: model:ir.model.fields,field_description:purchase_security.field_res_partner__purchase_user_id
#: model:ir.model.fields,field_description:purchase_security.field_res_users__purchase_user_id
#: model_terms:ir.ui.view,arch_db:purchase_security.view_res_partner_filter
msgid "Purchase representative"
msgstr "Predstavnik nabavke"
#. module: purchase_security
#: model:ir.model.fields,field_description:purchase_security.field_res_partner__purchase_team_id
#: model:ir.model.fields,field_description:purchase_security.field_res_users__purchase_team_id
msgid "Purchase team"
msgstr "Nabavni tim"
#. module: purchase_security
#: model:ir.model.fields,field_description:purchase_security.field_res_users__purchase_team_ids
msgid "Purchases Teams"
msgstr "Nabavni timovi"
#. module: purchase_security
#: model:ir.model,name:purchase_security.model_ir_rule
msgid "Record Rule"
msgstr "Pravilo zapisa"
#. module: purchase_security
#: model:ir.model.fields,field_description:purchase_security.field_purchase_team__sequence
msgid "Sequence"
msgstr "Sekvenca"
#. module: purchase_security
#: model:ir.model.fields,field_description:purchase_security.field_purchase_order__team_id
msgid "Team"
msgstr "Tim"
#. module: purchase_security
#: model:ir.model,name:purchase_security.model_res_users
msgid "User"
msgstr "Korisnik"
#. module: purchase_security
#: model:res.groups,name:purchase_security.group_purchase_own_orders
msgid "User (own orders)"
msgstr "Korisnik (vlastite narudžbe)"
#. module: purchase_security
#: model:res.groups,name:purchase_security.group_purchase_group_orders
msgid "User (team orders)"
msgstr "Korisnik (narudžbe tima)"
#. module: purchase_security
#: model_terms:ir.ui.view,arch_db:purchase_security.purchase_team_form
msgid "e.g. Europe"
msgstr "npr. Evropa"

161
odoo-bringout-oca-purchase-workflow-purchase_security/purchase_security/i18n/es.po Normal file
View file

@ -0,0 +1,161 @@
# Translation of Odoo Server.
# This file contains the translation of the following modules:
# * purchase_security
#
msgid ""
msgstr ""
"Project-Id-Version: Odoo Server 16.0\n"
"Report-Msgid-Bugs-To: \n"
"PO-Revision-Date: 2024-04-18 08:37+0000\n"
"Last-Translator: Ivorra78 <informatica@totmaterial.es>\n"
"Language-Team: none\n"
"Language: es\n"
"MIME-Version: 1.0\n"
"Content-Type: text/plain; charset=UTF-8\n"
"Content-Transfer-Encoding: \n"
"Plural-Forms: nplurals=2; plural=n != 1;\n"
"X-Generator: Weblate 4.17\n"
#. module: purchase_security
#: model_terms:ir.ui.view,arch_db:purchase_security.purchase_team_form
msgid ""
"<i class=\"fa fa-envelope mr-1\" role=\"img\" aria-label=\"Email\" title="
"\"Email\"/>"
msgstr ""
"<i class=\"fa fa-envelope mr-1\" role=\"img\" aria-label=\"Email\" title="
"\"Email\"/>"
#. module: purchase_security
#: model_terms:ir.ui.view,arch_db:purchase_security.purchase_team_form
msgid "Avatar"
msgstr "Avatar"
#. module: purchase_security
#: model:ir.model,name:purchase_security.model_res_partner
msgid "Contact"
msgstr "Contacto"
#. module: purchase_security
#: model:ir.model.fields,field_description:purchase_security.field_purchase_team__create_uid
msgid "Created by"
msgstr "Creado por"
#. module: purchase_security
#: model:ir.model.fields,field_description:purchase_security.field_purchase_team__create_date
msgid "Created on"
msgstr "Creado el"
#. module: purchase_security
#: model:ir.model.fields,field_description:purchase_security.field_purchase_team__display_name
msgid "Display Name"
msgstr "Mostrar Nombre"
#. module: purchase_security
#: model:ir.model.fields,field_description:purchase_security.field_purchase_team__id
msgid "ID"
msgstr "ID"
#. module: purchase_security
#: model:ir.model.fields,field_description:purchase_security.field_purchase_order__is_user_id_editable
msgid "Is User Id Editable"
msgstr "Se puede editar el ID de usuario"
#. module: purchase_security
#: model:ir.model.fields,field_description:purchase_security.field_purchase_team____last_update
msgid "Last Modified on"
msgstr "Última Modificación el"
#. module: purchase_security
#: model:ir.model.fields,field_description:purchase_security.field_purchase_team__write_uid
msgid "Last Updated by"
msgstr "Última Actualización por"
#. module: purchase_security
#: model:ir.model.fields,field_description:purchase_security.field_purchase_team__write_date
msgid "Last Updated on"
msgstr "Última Actualización el"
#. module: purchase_security
#: model_terms:ir.ui.view,arch_db:purchase_security.purchase_team_form
msgid "Members"
msgstr "Miembros"
#. module: purchase_security
#: model:ir.model.fields,field_description:purchase_security.field_purchase_team__name
msgid "Name"
msgstr "Nombre"
#. module: purchase_security
#: model:ir.model,name:purchase_security.model_purchase_order
msgid "Purchase Order"
msgstr "Pedido de compra"
#. module: purchase_security
#: model:ir.model,name:purchase_security.model_purchase_team
#: model_terms:ir.ui.view,arch_db:purchase_security.purchase_team_form
msgid "Purchase Team"
msgstr "Equipo de Compras"
#. module: purchase_security
#: model:ir.actions.act_window,name:purchase_security.action_purchase_team_display
#: model:ir.ui.menu,name:purchase_security.menu_purchase_team_tree
msgid "Purchase Teams"
msgstr "Equipos de Compra"
#. module: purchase_security
#: model:ir.model.fields,field_description:purchase_security.field_purchase_team__user_ids
msgid "Purchase Users"
msgstr "Usuarios de Compra"
#. module: purchase_security
#: model:ir.model.fields,field_description:purchase_security.field_res_partner__purchase_user_id
#: model:ir.model.fields,field_description:purchase_security.field_res_users__purchase_user_id
#: model_terms:ir.ui.view,arch_db:purchase_security.view_res_partner_filter
msgid "Purchase representative"
msgstr "Representante de compra"
#. module: purchase_security
#: model:ir.model.fields,field_description:purchase_security.field_res_partner__purchase_team_id
#: model:ir.model.fields,field_description:purchase_security.field_res_users__purchase_team_id
msgid "Purchase team"
msgstr "Equipo de compra"
#. module: purchase_security
#: model:ir.model.fields,field_description:purchase_security.field_res_users__purchase_team_ids
msgid "Purchases Teams"
msgstr "Equipos de Compras"
#. module: purchase_security
#: model:ir.model,name:purchase_security.model_ir_rule
msgid "Record Rule"
msgstr "Regla de Registro"
#. module: purchase_security
#: model:ir.model.fields,field_description:purchase_security.field_purchase_team__sequence
msgid "Sequence"
msgstr "Secuencia"
#. module: purchase_security
#: model:ir.model.fields,field_description:purchase_security.field_purchase_order__team_id
msgid "Team"
msgstr "Equipo"
#. module: purchase_security
#: model:ir.model,name:purchase_security.model_res_users
msgid "User"
msgstr "Usuario"
#. module: purchase_security
#: model:res.groups,name:purchase_security.group_purchase_own_orders
msgid "User (own orders)"
msgstr "Usuario (pedidos propios)"
#. module: purchase_security
#: model:res.groups,name:purchase_security.group_purchase_group_orders
msgid "User (team orders)"
msgstr "Usuario (pedidos del equipo)"
#. module: purchase_security
#: model_terms:ir.ui.view,arch_db:purchase_security.purchase_team_form
msgid "e.g. Europe"
msgstr "Por ejemplo, Europa"

161
odoo-bringout-oca-purchase-workflow-purchase_security/purchase_security/i18n/it.po Normal file
View file

@ -0,0 +1,161 @@
# Translation of Odoo Server.
# This file contains the translation of the following modules:
# * purchase_security
#
msgid ""
msgstr ""
"Project-Id-Version: Odoo Server 13.0\n"
"Report-Msgid-Bugs-To: \n"
"PO-Revision-Date: 2024-03-13 12:38+0000\n"
"Last-Translator: mymage <stefano.consolaro@mymage.it>\n"
"Language-Team: none\n"
"Language: it\n"
"MIME-Version: 1.0\n"
"Content-Type: text/plain; charset=UTF-8\n"
"Content-Transfer-Encoding: \n"
"Plural-Forms: nplurals=2; plural=n != 1;\n"
"X-Generator: Weblate 4.17\n"
#. module: purchase_security
#: model_terms:ir.ui.view,arch_db:purchase_security.purchase_team_form
msgid ""
"<i class=\"fa fa-envelope mr-1\" role=\"img\" aria-label=\"Email\" title="
"\"Email\"/>"
msgstr ""
"<i class=\"fa fa-envelope mr-1\" role=\"img\" aria-label=\"Email\" title=\"E-"
"mail\"/>"
#. module: purchase_security
#: model_terms:ir.ui.view,arch_db:purchase_security.purchase_team_form
msgid "Avatar"
msgstr "Avatar"
#. module: purchase_security
#: model:ir.model,name:purchase_security.model_res_partner
msgid "Contact"
msgstr "Contatto"
#. module: purchase_security
#: model:ir.model.fields,field_description:purchase_security.field_purchase_team__create_uid
msgid "Created by"
msgstr "Creato da"
#. module: purchase_security
#: model:ir.model.fields,field_description:purchase_security.field_purchase_team__create_date
msgid "Created on"
msgstr "Creato il"
#. module: purchase_security
#: model:ir.model.fields,field_description:purchase_security.field_purchase_team__display_name
msgid "Display Name"
msgstr "Nome visualizzato"
#. module: purchase_security
#: model:ir.model.fields,field_description:purchase_security.field_purchase_team__id
msgid "ID"
msgstr "ID"
#. module: purchase_security
#: model:ir.model.fields,field_description:purchase_security.field_purchase_order__is_user_id_editable
msgid "Is User Id Editable"
msgstr "L'ID utente è modificabile"
#. module: purchase_security
#: model:ir.model.fields,field_description:purchase_security.field_purchase_team____last_update
msgid "Last Modified on"
msgstr "Ultima modifica il"
#. module: purchase_security
#: model:ir.model.fields,field_description:purchase_security.field_purchase_team__write_uid
msgid "Last Updated by"
msgstr "Ultimo aggiornamento di"
#. module: purchase_security
#: model:ir.model.fields,field_description:purchase_security.field_purchase_team__write_date
msgid "Last Updated on"
msgstr "Ultimo aggiornamento il"
#. module: purchase_security
#: model_terms:ir.ui.view,arch_db:purchase_security.purchase_team_form
msgid "Members"
msgstr "Membri"
#. module: purchase_security
#: model:ir.model.fields,field_description:purchase_security.field_purchase_team__name
msgid "Name"
msgstr "Nome"
#. module: purchase_security
#: model:ir.model,name:purchase_security.model_purchase_order
msgid "Purchase Order"
msgstr "Ordine di acquisto"
#. module: purchase_security
#: model:ir.model,name:purchase_security.model_purchase_team
#: model_terms:ir.ui.view,arch_db:purchase_security.purchase_team_form
msgid "Purchase Team"
msgstr "Team acquisti"
#. module: purchase_security
#: model:ir.actions.act_window,name:purchase_security.action_purchase_team_display
#: model:ir.ui.menu,name:purchase_security.menu_purchase_team_tree
msgid "Purchase Teams"
msgstr "Team acquisti"
#. module: purchase_security
#: model:ir.model.fields,field_description:purchase_security.field_purchase_team__user_ids
msgid "Purchase Users"
msgstr "Utente acquisti"
#. module: purchase_security
#: model:ir.model.fields,field_description:purchase_security.field_res_partner__purchase_user_id
#: model:ir.model.fields,field_description:purchase_security.field_res_users__purchase_user_id
#: model_terms:ir.ui.view,arch_db:purchase_security.view_res_partner_filter
msgid "Purchase representative"
msgstr "Rappresentante acquisti"
#. module: purchase_security
#: model:ir.model.fields,field_description:purchase_security.field_res_partner__purchase_team_id
#: model:ir.model.fields,field_description:purchase_security.field_res_users__purchase_team_id
msgid "Purchase team"
msgstr "Team acquisti"
#. module: purchase_security
#: model:ir.model.fields,field_description:purchase_security.field_res_users__purchase_team_ids
msgid "Purchases Teams"
msgstr "Team acquisti"
#. module: purchase_security
#: model:ir.model,name:purchase_security.model_ir_rule
msgid "Record Rule"
msgstr "Regola su record"
#. module: purchase_security
#: model:ir.model.fields,field_description:purchase_security.field_purchase_team__sequence
msgid "Sequence"
msgstr "Sequenza"
#. module: purchase_security
#: model:ir.model.fields,field_description:purchase_security.field_purchase_order__team_id
msgid "Team"
msgstr "Team"
#. module: purchase_security
#: model:ir.model,name:purchase_security.model_res_users
msgid "User"
msgstr "Utente"
#. module: purchase_security
#: model:res.groups,name:purchase_security.group_purchase_own_orders
msgid "User (own orders)"
msgstr "Utente (solo propri ordini)"
#. module: purchase_security
#: model:res.groups,name:purchase_security.group_purchase_group_orders
msgid "User (team orders)"
msgstr "Utente (ordini team)"
#. module: purchase_security
#: model_terms:ir.ui.view,arch_db:purchase_security.purchase_team_form
msgid "e.g. Europe"
msgstr "es. Europa"

154
odoo-bringout-oca-purchase-workflow-purchase_security/purchase_security/i18n/purchase_security.pot Normal file
View file

@ -0,0 +1,154 @@
# Translation of Odoo Server.
# This file contains the translation of the following modules:
# * purchase_security
#
msgid ""
msgstr ""
"Project-Id-Version: Odoo Server 16.0\n"
"Report-Msgid-Bugs-To: \n"
"Last-Translator: \n"
"Language-Team: \n"
"MIME-Version: 1.0\n"
"Content-Type: text/plain; charset=UTF-8\n"
"Content-Transfer-Encoding: \n"
"Plural-Forms: \n"
#. module: purchase_security
#: model_terms:ir.ui.view,arch_db:purchase_security.purchase_team_form
msgid "<i class=\"fa fa-envelope mr-1\" role=\"img\" aria-label=\"Email\" title=\"Email\"/>"
msgstr ""
#. module: purchase_security
#: model_terms:ir.ui.view,arch_db:purchase_security.purchase_team_form
msgid "Avatar"
msgstr ""
#. module: purchase_security
#: model:ir.model,name:purchase_security.model_res_partner
msgid "Contact"
msgstr ""
#. module: purchase_security
#: model:ir.model.fields,field_description:purchase_security.field_purchase_team__create_uid
msgid "Created by"
msgstr ""
#. module: purchase_security
#: model:ir.model.fields,field_description:purchase_security.field_purchase_team__create_date
msgid "Created on"
msgstr ""
#. module: purchase_security
#: model:ir.model.fields,field_description:purchase_security.field_purchase_team__display_name
msgid "Display Name"
msgstr ""
#. module: purchase_security
#: model:ir.model.fields,field_description:purchase_security.field_purchase_team__id
msgid "ID"
msgstr ""
#. module: purchase_security
#: model:ir.model.fields,field_description:purchase_security.field_purchase_order__is_user_id_editable
msgid "Is User Id Editable"
msgstr ""
#. module: purchase_security
#: model:ir.model.fields,field_description:purchase_security.field_purchase_team____last_update
msgid "Last Modified on"
msgstr ""
#. module: purchase_security
#: model:ir.model.fields,field_description:purchase_security.field_purchase_team__write_uid
msgid "Last Updated by"
msgstr ""
#. module: purchase_security
#: model:ir.model.fields,field_description:purchase_security.field_purchase_team__write_date
msgid "Last Updated on"
msgstr ""
#. module: purchase_security
#: model_terms:ir.ui.view,arch_db:purchase_security.purchase_team_form
msgid "Members"
msgstr ""
#. module: purchase_security
#: model:ir.model.fields,field_description:purchase_security.field_purchase_team__name
msgid "Name"
msgstr ""
#. module: purchase_security
#: model:ir.model,name:purchase_security.model_purchase_order
msgid "Purchase Order"
msgstr ""
#. module: purchase_security
#: model:ir.model,name:purchase_security.model_purchase_team
#: model_terms:ir.ui.view,arch_db:purchase_security.purchase_team_form
msgid "Purchase Team"
msgstr ""
#. module: purchase_security
#: model:ir.actions.act_window,name:purchase_security.action_purchase_team_display
#: model:ir.ui.menu,name:purchase_security.menu_purchase_team_tree
msgid "Purchase Teams"
msgstr ""
#. module: purchase_security
#: model:ir.model.fields,field_description:purchase_security.field_purchase_team__user_ids
msgid "Purchase Users"
msgstr ""
#. module: purchase_security
#: model:ir.model.fields,field_description:purchase_security.field_res_partner__purchase_user_id
#: model:ir.model.fields,field_description:purchase_security.field_res_users__purchase_user_id
#: model_terms:ir.ui.view,arch_db:purchase_security.view_res_partner_filter
msgid "Purchase representative"
msgstr ""
#. module: purchase_security
#: model:ir.model.fields,field_description:purchase_security.field_res_partner__purchase_team_id
#: model:ir.model.fields,field_description:purchase_security.field_res_users__purchase_team_id
msgid "Purchase team"
msgstr ""
#. module: purchase_security
#: model:ir.model.fields,field_description:purchase_security.field_res_users__purchase_team_ids
msgid "Purchases Teams"
msgstr ""
#. module: purchase_security
#: model:ir.model,name:purchase_security.model_ir_rule
msgid "Record Rule"
msgstr ""
#. module: purchase_security
#: model:ir.model.fields,field_description:purchase_security.field_purchase_team__sequence
msgid "Sequence"
msgstr ""
#. module: purchase_security
#: model:ir.model.fields,field_description:purchase_security.field_purchase_order__team_id
msgid "Team"
msgstr ""
#. module: purchase_security
#: model:ir.model,name:purchase_security.model_res_users
msgid "User"
msgstr ""
#. module: purchase_security
#: model:res.groups,name:purchase_security.group_purchase_own_orders
msgid "User (own orders)"
msgstr ""
#. module: purchase_security
#: model:res.groups,name:purchase_security.group_purchase_group_orders
msgid "User (team orders)"
msgstr ""
#. module: purchase_security
#: model_terms:ir.ui.view,arch_db:purchase_security.purchase_team_form
msgid "e.g. Europe"
msgstr ""

5
odoo-bringout-oca-purchase-workflow-purchase_security/purchase_security/models/__init__.py Normal file
View file

@ -0,0 +1,5 @@
from . import ir_rule
from . import purchase_order
from . import purchase_team
from . import res_partner
from . import res_users

57
odoo-bringout-oca-purchase-workflow-purchase_security/purchase_security/models/ir_rule.py Normal file
View file

@ -0,0 +1,57 @@
# Copyright 2024 Tecnativa - Víctor Martínez
# License AGPL-3 - See http://www.gnu.org/licenses/agpl-3.0.html
from odoo import api, models, tools
from odoo.osv import expression
from odoo.tools import config
class IrRule(models.Model):
_inherit = "ir.rule"
@api.model
@tools.conditional(
"xml" not in config["dev_mode"],
tools.ormcache(
"self.env.uid",
"self.env.su",
"model_name",
"mode",
"tuple(self._compute_domain_context_values())",
),
)
def _compute_domain(self, model_name, mode="read"):
"""Inject extra domain for restricting partners when the user
has the group 'Purchase / User (own orders)."""
res = super()._compute_domain(model_name, mode=mode)
user = self.env.user
group1 = "purchase_security.group_purchase_own_orders"
group2 = "purchase_security.group_purchase_group_orders"
group3 = "purchase.group_purchase_manager"
if model_name == "res.partner" and not self.env.su:
if user.has_group(group1) and not user.has_group(group3):
extra_domain = [
"|",
("message_partner_ids", "in", user.partner_id.ids),
"|",
("id", "=", user.partner_id.id),
]
if user.has_group(group2):
extra_domain += [
"|",
("purchase_team_id", "=", user.purchase_team_ids[:1].id),
("purchase_team_id", "=", False),
]
else:
extra_domain += [
"|",
("purchase_user_id", "=", user.id),
"&",
("purchase_user_id", "=", False),
"|",
("purchase_team_id", "=", False),
("purchase_team_id", "=", user.purchase_team_ids[:1].id),
]
extra_domain = expression.normalize_domain(extra_domain)
res = expression.AND([extra_domain] + [res])
return res

54
odoo-bringout-oca-purchase-workflow-purchase_security/purchase_security/models/purchase_order.py Normal file
View file

@ -0,0 +1,54 @@
# © 2023 Solvos Consultoría Informática (<http://www.solvos.es>)
# Copyright 2023 Tecnativa - Stefan Ungureanu
# Copyright 2023 Tecnativa - Pedro M. Baeza
# Copyright 2024 Tecnativa - Víctor Martínez
# License AGPL-3.0 or later (https://www.gnu.org/licenses/agpl).
from odoo import api, fields, models
class PurchaseOrder(models.Model):
_inherit = "purchase.order"
is_user_id_editable = fields.Boolean(
compute="_compute_is_user_id_editable",
)
team_id = fields.Many2one(
"purchase.team",
string="Team",
index=True,
auto_join=True,
compute="_compute_team_id",
store=True,
readonly=False,
)
def _compute_is_user_id_editable(self):
is_user_id_editable = self.env.user.has_group(
"purchase.group_purchase_manager"
) or not self.env.user.has_group("purchase_security.group_purchase_own_orders")
self.is_user_id_editable = is_user_id_editable
@api.depends("user_id")
def _compute_team_id(self):
"""When a user is assigned, the first team which the user belongs to is
assigned, and if no one, the first purchase team.
"""
first_team = self.env["purchase.team"].search([], limit=1)
for record in self:
record.team_id = record.user_id.purchase_team_ids[:1] or first_team
@api.onchange("partner_id")
def onchange_partner_id(self):
res = super().onchange_partner_id()
if self.partner_id:
partner = self.partner_id.commercial_partner_id
if not self.env.context.get("default_user_id"):
self.user_id = partner.purchase_user_id or self.env.user
if not self.env.context.get("default_team_id"):
self.team_id = (
partner.purchase_team_id
or self.user_id.purchase_team_ids[:1]
or self.env["purchase.team"].search([], limit=1)
)
return res

21
odoo-bringout-oca-purchase-workflow-purchase_security/purchase_security/models/purchase_team.py Normal file
View file

@ -0,0 +1,21 @@
# Copyright 2023 Tecnativa - Stefan Ungureanu
# Copyright 2023 Tecnativa - Pedro M. Baeza
# License AGPL-3.0 or later (https://www.gnu.org/licenses/agpl).
from odoo import fields, models
class PurchaseTeam(models.Model):
_name = "purchase.team"
_description = "Purchase Team"
_order = "sequence,id"
name = fields.Char(required=True)
sequence = fields.Integer(default=10)
user_ids = fields.Many2many(
comodel_name="res.users",
relation="purchase_team_res_users_rel",
column1="purchase_team_id",
column2="res_users_id",
string="Purchase Users",
)

20
odoo-bringout-oca-purchase-workflow-purchase_security/purchase_security/models/res_partner.py Normal file
View file

@ -0,0 +1,20 @@
# Copyright 2024 Tecnativa - Víctor Martínez
# License AGPL-3 - See http://www.gnu.org/licenses/agpl-3.0.html
from odoo import fields, models
class ResPartner(models.Model):
_inherit = "res.partner"
purchase_user_id = fields.Many2one(
comodel_name="res.users",
domain="[('share', '=', False)]",
string="Purchase representative",
index=True,
)
purchase_team_id = fields.Many2one(
comodel_name="purchase.team",
string="Purchase team",
index=True,
)

19
odoo-bringout-oca-purchase-workflow-purchase_security/purchase_security/models/res_users.py Normal file
View file

@ -0,0 +1,19 @@
# Copyright 2024 Tecnativa - Víctor Martínez
# License AGPL-3.0 or later (https://www.gnu.org/licenses/agpl).
from odoo import fields, models
class ResUsers(models.Model):
_inherit = "res.users"
purchase_team_ids = fields.Many2many(
comodel_name="purchase.team",
relation="purchase_team_res_users_rel",
column1="res_users_id",
column2="purchase_team_id",
string="Purchases Teams",
check_company=True,
copy=False,
readonly=True,
)

5
odoo-bringout-oca-purchase-workflow-purchase_security/purchase_security/readme/CONFIGURATION.rst Normal file
View file

@ -0,0 +1,5 @@
To use this module you need to add the users whose access you want to restrict
to the "Purchases / User (own orders)" group
You can also assign a Purchase Manager by adding him to the
"Purchases / Administrator" group

9
odoo-bringout-oca-purchase-workflow-purchase_security/purchase_security/readme/CONTRIBUTORS.rst Normal file
View file

@ -0,0 +1,9 @@
* `Tecnativa <https://www.tecnativa.com>`_:
* João Marques
* Pilar Vargas
* Stefan Ungureanu
* Pedro M. Baeza
* `Solvos <https://www.solvos.es>`_:
* David Alonso <david.alonso@solvos.es>

9
odoo-bringout-oca-purchase-workflow-purchase_security/purchase_security/readme/DESCRIPTION.rst Normal file
View file

@ -0,0 +1,9 @@
This addon creates new groups in Purchase.
Visibility of purchase orders is restricted for users in these groups.
You can only see the purchase order:
- User (own orders): If you are a follower of the partner or there is no user
or you are the partner's user.
- User (team orders): If you are a follower of the partner or there is no user
or you are a user of your purchasing team.

11
odoo-bringout-oca-purchase-workflow-purchase_security/purchase_security/readme/USAGE.rst Normal file
View file

@ -0,0 +1,11 @@
To use this module, you need to:
#. Go to **Purchase > Orders > Purchase Orders**
#. Create a Purchase Order and assing a **Purchase Representative**
(in the **Other Information** tab), if you are a Purchase User or Manager.
If you are a Purchass User (own orders), i'll be automatically assigned,
and you won't be able to change it
#. Confirm the Purchase Order
#. Go back to the **Purchase Orders** view.
#. If you are a Purchase User or a Purchase Manager, you should be
able to see all orders. If not, you'll only see your own orders.

3
odoo-bringout-oca-purchase-workflow-purchase_security/purchase_security/security/ir.model.access.csv Normal file
View file

@ -0,0 +1,3 @@
id,name,model_id:id,group_id:id,perm_read,perm_write,perm_create,perm_unlink
purchase_security.access_purchase_team_manager,access_purchase_team,purchase_security.model_purchase_team,purchase.group_purchase_manager,1,1,1,1
purchase_security.access_purchase_team_user,access_purchase_team,purchase_security.model_purchase_team,purchase.group_purchase_user,1,0,0,0
1 id name model_id:id group_id:id perm_read perm_write perm_create perm_unlink
2 purchase_security.access_purchase_team_manager access_purchase_team purchase_security.model_purchase_team purchase.group_purchase_manager 1 1 1 1
3 purchase_security.access_purchase_team_user access_purchase_team purchase_security.model_purchase_team purchase.group_purchase_user 1 0 0 0

74
odoo-bringout-oca-purchase-workflow-purchase_security/purchase_security/security/security.xml Normal file
View file

@ -0,0 +1,74 @@
<odoo>
<data>
<record id="group_purchase_own_orders" model="res.groups">
<field name="name">User (own orders)</field>
<field name="category_id" ref="base.module_category_inventory_purchase" />
<field
name="implied_ids"
eval="[(4, ref('purchase.group_purchase_user'))]"
/>
</record>
<record id="group_purchase_group_orders" model="res.groups">
<field name="name">User (team orders)</field>
<field name="category_id" ref="base.module_category_inventory_purchase" />
<field
name="implied_ids"
eval="[(4, ref('purchase_security.group_purchase_own_orders'))]"
/>
</record>
<record id="purchase.group_purchase_manager" model="res.groups">
<field
name="implied_ids"
eval="[(3, ref('purchase.group_purchase_user')),
(4, ref('group_purchase_own_orders')),(4, ref('group_purchase_group_orders'))]"
/>
</record>
</data>
<data noupdate="1">
<record model="ir.rule" id="purchase_order_group_purchase_manager_rule">
<field name="name">View purchase orders (manager)</field>
<field name="model_id" ref="purchase.model_purchase_order" />
<field name="domain_force">[(1, '=', 1)]</field>
<field name="groups" eval="[(4, ref('purchase.group_purchase_manager'))]" />
</record>
<record model="ir.rule" id="purchase_order_group_purchase_order_own_orders">
<field name="name">View purchase orders (own responsible)</field>
<field name="model_id" ref="purchase.model_purchase_order" />
<field
name="domain_force"
>['|',('user_id','=',user.id),'&amp;',('user_id','=',False),('team_id','=',False)]</field>
<field name="groups" eval="[(4,ref('group_purchase_own_orders'))]" />
</record>
<record model="ir.rule" id="purchase_order_group_purchase_order_group_orders">
<field name="name">View purchase orders (purchase team member)</field>
<field name="model_id" ref="purchase.model_purchase_order" />
<field name="domain_force">[('team_id.user_ids', '=', user.id)]</field>
<field name="groups" eval="[(4,ref('group_purchase_group_orders'))]" />
</record>
<record model="ir.rule" id="purchase_order_line_group_purchase_manager_rule">
<field name="name">View purchase order lines (manager)</field>
<field name="model_id" ref="purchase.model_purchase_order_line" />
<field name="domain_force">[(1, '=', 1)]</field>
<field name="groups" eval="[(4, ref('purchase.group_purchase_manager'))]" />
</record>
<record
model="ir.rule"
id="purchase_order_line_group_purchase_order_own_orders"
>
<field name="name">View purchase order lines (own responsible)</field>
<field name="model_id" ref="purchase.model_purchase_order_line" />
<field
name="domain_force"
>['|',('order_id.user_id','=',user.id),'&amp;',('order_id.user_id','=',False),('order_id.team_id','=',False)]</field>
<field name="groups" eval="[(4,ref('group_purchase_own_orders'))]" />
</record>
<record model="ir.rule" id="purchase_order_user_group_purchases_rule">
<field name="name">View purchase order lines (purchase responsible)</field>
<field name="model_id" ref="purchase.model_purchase_order_line" />
<field
name="domain_force"
>[('order_id.team_id.user_ids', '=', user.id)]</field>
<field name="groups" eval="[(4, ref('group_purchase_group_orders'))]" />
</record>
</data>
</odoo>

BIN
odoo-bringout-oca-purchase-workflow-purchase_security/purchase_security/static/description/icon.png Normal file
View file

Binary file not shown.
Side by side

After

Width:  |  Height:  |  Size: 9.2 KiB

459
odoo-bringout-oca-purchase-workflow-purchase_security/purchase_security/static/description/index.html Normal file
View file

@ -0,0 +1,459 @@
<!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Transitional//EN" "http://www.w3.org/TR/xhtml1/DTD/xhtml1-transitional.dtd">
<html xmlns="http://www.w3.org/1999/xhtml" xml:lang="en" lang="en">
<head>
<meta http-equiv="Content-Type" content="text/html; charset=utf-8" />
<meta name="generator" content="Docutils: https://docutils.sourceforge.io/" />
<title>Purchase Order security</title>
<style type="text/css">
/*
:Author: David Goodger (goodger@python.org)
:Id: $Id: html4css1.css 9511 2024-01-13 09:50:07Z milde $
:Copyright: This stylesheet has been placed in the public domain.
Default cascading style sheet for the HTML output of Docutils.
Despite the name, some widely supported CSS2 features are used.
See https://docutils.sourceforge.io/docs/howto/html-stylesheets.html for how to
customize this style sheet.
*/
/* used to remove borders from tables and images */
.borderless, table.borderless td, table.borderless th {
border: 0 }
table.borderless td, table.borderless th {
/* Override padding for "table.docutils td" with "! important".
The right padding separates the table cells. */
padding: 0 0.5em 0 0 ! important }
.first {
/* Override more specific margin styles with "! important". */
margin-top: 0 ! important }
.last, .with-subtitle {
margin-bottom: 0 ! important }
.hidden {
display: none }
.subscript {
vertical-align: sub;
font-size: smaller }
.superscript {
vertical-align: super;
font-size: smaller }
a.toc-backref {
text-decoration: none ;
color: black }
blockquote.epigraph {
margin: 2em 5em ; }
dl.docutils dd {
margin-bottom: 0.5em }
object[type="image/svg+xml"], object[type="application/x-shockwave-flash"] {
overflow: hidden;
}
/* Uncomment (and remove this text!) to get bold-faced definition list terms
dl.docutils dt {
font-weight: bold }
*/
div.abstract {
margin: 2em 5em }
div.abstract p.topic-title {
font-weight: bold ;
text-align: center }
div.admonition, div.attention, div.caution, div.danger, div.error,
div.hint, div.important, div.note, div.tip, div.warning {
margin: 2em ;
border: medium outset ;
padding: 1em }
div.admonition p.admonition-title, div.hint p.admonition-title,
div.important p.admonition-title, div.note p.admonition-title,
div.tip p.admonition-title {
font-weight: bold ;
font-family: sans-serif }
div.attention p.admonition-title, div.caution p.admonition-title,
div.danger p.admonition-title, div.error p.admonition-title,
div.warning p.admonition-title, .code .error {
color: red ;
font-weight: bold ;
font-family: sans-serif }
/* Uncomment (and remove this text!) to get reduced vertical space in
compound paragraphs.
div.compound .compound-first, div.compound .compound-middle {
margin-bottom: 0.5em }
div.compound .compound-last, div.compound .compound-middle {
margin-top: 0.5em }
*/
div.dedication {
margin: 2em 5em ;
text-align: center ;
font-style: italic }
div.dedication p.topic-title {
font-weight: bold ;
font-style: normal }
div.figure {
margin-left: 2em ;
margin-right: 2em }
div.footer, div.header {
clear: both;
font-size: smaller }
div.line-block {
display: block ;
margin-top: 1em ;
margin-bottom: 1em }
div.line-block div.line-block {
margin-top: 0 ;
margin-bottom: 0 ;
margin-left: 1.5em }
div.sidebar {
margin: 0 0 0.5em 1em ;
border: medium outset ;
padding: 1em ;
background-color: #ffffee ;
width: 40% ;
float: right ;
clear: right }
div.sidebar p.rubric {
font-family: sans-serif ;
font-size: medium }
div.system-messages {
margin: 5em }
div.system-messages h1 {
color: red }
div.system-message {
border: medium outset ;
padding: 1em }
div.system-message p.system-message-title {
color: red ;
font-weight: bold }
div.topic {
margin: 2em }
h1.section-subtitle, h2.section-subtitle, h3.section-subtitle,
h4.section-subtitle, h5.section-subtitle, h6.section-subtitle {
margin-top: 0.4em }
h1.title {
text-align: center }
h2.subtitle {
text-align: center }
hr.docutils {
width: 75% }
img.align-left, .figure.align-left, object.align-left, table.align-left {
clear: left ;
float: left ;
margin-right: 1em }
img.align-right, .figure.align-right, object.align-right, table.align-right {
clear: right ;
float: right ;
margin-left: 1em }
img.align-center, .figure.align-center, object.align-center {
display: block;
margin-left: auto;
margin-right: auto;
}
table.align-center {
margin-left: auto;
margin-right: auto;
}
.align-left {
text-align: left }
.align-center {
clear: both ;
text-align: center }
.align-right {
text-align: right }
/* reset inner alignment in figures */
div.align-right {
text-align: inherit }
/* div.align-center * { */
/* text-align: left } */
.align-top {
vertical-align: top }
.align-middle {
vertical-align: middle }
.align-bottom {
vertical-align: bottom }
ol.simple, ul.simple {
margin-bottom: 1em }
ol.arabic {
list-style: decimal }
ol.loweralpha {
list-style: lower-alpha }
ol.upperalpha {
list-style: upper-alpha }
ol.lowerroman {
list-style: lower-roman }
ol.upperroman {
list-style: upper-roman }
p.attribution {
text-align: right ;
margin-left: 50% }
p.caption {
font-style: italic }
p.credits {
font-style: italic ;
font-size: smaller }
p.label {
white-space: nowrap }
p.rubric {
font-weight: bold ;
font-size: larger ;
color: maroon ;
text-align: center }
p.sidebar-title {
font-family: sans-serif ;
font-weight: bold ;
font-size: larger }
p.sidebar-subtitle {
font-family: sans-serif ;
font-weight: bold }
p.topic-title {
font-weight: bold }
pre.address {
margin-bottom: 0 ;
margin-top: 0 ;
font: inherit }
pre.literal-block, pre.doctest-block, pre.math, pre.code {
margin-left: 2em ;
margin-right: 2em }
pre.code .ln { color: gray; } /* line numbers */
pre.code, code { background-color: #eeeeee }
pre.code .comment, code .comment { color: #5C6576 }
pre.code .keyword, code .keyword { color: #3B0D06; font-weight: bold }
pre.code .literal.string, code .literal.string { color: #0C5404 }
pre.code .name.builtin, code .name.builtin { color: #352B84 }
pre.code .deleted, code .deleted { background-color: #DEB0A1}
pre.code .inserted, code .inserted { background-color: #A3D289}
span.classifier {
font-family: sans-serif ;
font-style: oblique }
span.classifier-delimiter {
font-family: sans-serif ;
font-weight: bold }
span.interpreted {
font-family: sans-serif }
span.option {
white-space: nowrap }
span.pre {
white-space: pre }
span.problematic, pre.problematic {
color: red }
span.section-subtitle {
/* font-size relative to parent (h1..h6 element) */
font-size: 80% }
table.citation {
border-left: solid 1px gray;
margin-left: 1px }
table.docinfo {
margin: 2em 4em }
table.docutils {
margin-top: 0.5em ;
margin-bottom: 0.5em }
table.footnote {
border-left: solid 1px black;
margin-left: 1px }
table.docutils td, table.docutils th,
table.docinfo td, table.docinfo th {
padding-left: 0.5em ;
padding-right: 0.5em ;
vertical-align: top }
table.docutils th.field-name, table.docinfo th.docinfo-name {
font-weight: bold ;
text-align: left ;
white-space: nowrap ;
padding-left: 0 }
/* "booktabs" style (no vertical lines) */
table.docutils.booktabs {
border: 0px;
border-top: 2px solid;
border-bottom: 2px solid;
border-collapse: collapse;
}
table.docutils.booktabs * {
border: 0px;
}
table.docutils.booktabs th {
border-bottom: thin solid;
text-align: left;
}
h1 tt.docutils, h2 tt.docutils, h3 tt.docutils,
h4 tt.docutils, h5 tt.docutils, h6 tt.docutils {
font-size: 100% }
ul.auto-toc {
list-style-type: none }
</style>
</head>
<body>
<div class="document" id="purchase-order-security">
<h1 class="title">Purchase Order security</h1>
<!-- !!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!
!! This file is generated by oca-gen-addon-readme !!
!! changes will be overwritten. !!
!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!
!! source digest: sha256:9e1bbc1a8aa6093aa6f5cffb798552acf8886822317f4ed66d7b5da5684ea62d
!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!! -->
<p><a class="reference external image-reference" href="https://odoo-community.org/page/development-status"><img alt="Production/Stable" src="https://img.shields.io/badge/maturity-Production%2FStable-green.png" /></a> <a class="reference external image-reference" href="http://www.gnu.org/licenses/agpl-3.0-standalone.html"><img alt="License: AGPL-3" src="https://img.shields.io/badge/licence-AGPL--3-blue.png" /></a> <a class="reference external image-reference" href="https://github.com/OCA/purchase-workflow/tree/16.0/purchase_security"><img alt="OCA/purchase-workflow" src="https://img.shields.io/badge/github-OCA%2Fpurchase--workflow-lightgray.png?logo=github" /></a> <a class="reference external image-reference" href="https://translation.odoo-community.org/projects/purchase-workflow-16-0/purchase-workflow-16-0-purchase_security"><img alt="Translate me on Weblate" src="https://img.shields.io/badge/weblate-Translate%20me-F47D42.png" /></a> <a class="reference external image-reference" href="https://runboat.odoo-community.org/builds?repo=OCA/purchase-workflow&amp;target_branch=16.0"><img alt="Try me on Runboat" src="https://img.shields.io/badge/runboat-Try%20me-875A7B.png" /></a></p>
<p>This addon creates new groups in Purchase.</p>
<p>Visibility of purchase orders is restricted for users in these groups.
You can only see the purchase order:</p>
<ul class="simple">
<li>User (own orders): If you are a follower of the partner or there is no user
or you are the partner’s user.</li>
<li>User (team orders): If you are a follower of the partner or there is no user
or you are a user of your purchasing team.</li>
</ul>
<p><strong>Table of contents</strong></p>
<div class="contents local topic" id="contents">
<ul class="simple">
<li><a class="reference internal" href="#usage" id="toc-entry-1">Usage</a></li>
<li><a class="reference internal" href="#bug-tracker" id="toc-entry-2">Bug Tracker</a></li>
<li><a class="reference internal" href="#credits" id="toc-entry-3">Credits</a><ul>
<li><a class="reference internal" href="#authors" id="toc-entry-4">Authors</a></li>
<li><a class="reference internal" href="#contributors" id="toc-entry-5">Contributors</a></li>
<li><a class="reference internal" href="#maintainers" id="toc-entry-6">Maintainers</a></li>
</ul>
</li>
</ul>
</div>
<div class="section" id="usage">
<h1><a class="toc-backref" href="#toc-entry-1">Usage</a></h1>
<p>To use this module, you need to:</p>
<ol class="arabic simple">
<li>Go to <strong>Purchase &gt; Orders &gt; Purchase Orders</strong></li>
<li>Create a Purchase Order and assing a <strong>Purchase Representative</strong>
(in the <strong>Other Information</strong> tab), if you are a Purchase User or Manager.
If you are a Purchass User (own orders), i’ll be automatically assigned,
and you won’t be able to change it</li>
<li>Confirm the Purchase Order</li>
<li>Go back to the <strong>Purchase Orders</strong> view.</li>
<li>If you are a Purchase User or a Purchase Manager, you should be
able to see all orders. If not, you’ll only see your own orders.</li>
</ol>
</div>
<div class="section" id="bug-tracker">
<h1><a class="toc-backref" href="#toc-entry-2">Bug Tracker</a></h1>
<p>Bugs are tracked on <a class="reference external" href="https://github.com/OCA/purchase-workflow/issues">GitHub Issues</a>.
In case of trouble, please check there if your issue has already been reported.
If you spotted it first, help us to smash it by providing a detailed and welcomed
<a class="reference external" href="https://github.com/OCA/purchase-workflow/issues/new?body=module:%20purchase_security%0Aversion:%2016.0%0A%0A**Steps%20to%20reproduce**%0A-%20...%0A%0A**Current%20behavior**%0A%0A**Expected%20behavior**">feedback</a>.</p>
<p>Do not contact contributors directly about support or help with technical issues.</p>
</div>
<div class="section" id="credits">
<h1><a class="toc-backref" href="#toc-entry-3">Credits</a></h1>
<div class="section" id="authors">
<h2><a class="toc-backref" href="#toc-entry-4">Authors</a></h2>
<ul class="simple">
<li>Tecnativa</li>
</ul>
</div>
<div class="section" id="contributors">
<h2><a class="toc-backref" href="#toc-entry-5">Contributors</a></h2>
<ul class="simple">
<li><a class="reference external" href="https://www.tecnativa.com">Tecnativa</a>:<ul>
<li>João Marques</li>
<li>Pilar Vargas</li>
<li>Stefan Ungureanu</li>
<li>Pedro M. Baeza</li>
</ul>
</li>
<li><a class="reference external" href="https://www.solvos.es">Solvos</a>:<ul>
<li>David Alonso &lt;<a class="reference external" href="mailto:david.alonso&#64;solvos.es">david.alonso&#64;solvos.es</a>&gt;</li>
</ul>
</li>
</ul>
</div>
<div class="section" id="maintainers">
<h2><a class="toc-backref" href="#toc-entry-6">Maintainers</a></h2>
<p>This module is maintained by the OCA.</p>
<a class="reference external image-reference" href="https://odoo-community.org">
<img alt="Odoo Community Association" src="https://odoo-community.org/logo.png" />
</a>
<p>OCA, or the Odoo Community Association, is a nonprofit organization whose
mission is to support the collaborative development of Odoo features and
promote its widespread use.</p>
<p>Current <a class="reference external" href="https://odoo-community.org/page/maintainer-role">maintainer</a>:</p>
<p><a class="reference external image-reference" href="https://github.com/pilarvargas-tecnativa"><img alt="pilarvargas-tecnativa" src="https://github.com/pilarvargas-tecnativa.png?size=40px" /></a></p>
<p>This module is part of the <a class="reference external" href="https://github.com/OCA/purchase-workflow/tree/16.0/purchase_security">OCA/purchase-workflow</a> project on GitHub.</p>
<p>You are welcome to contribute. To learn how please visit <a class="reference external" href="https://odoo-community.org/page/Contribute">https://odoo-community.org/page/Contribute</a>.</p>
</div>
</div>
</div>
</body>
</html>

3
odoo-bringout-oca-purchase-workflow-purchase_security/purchase_security/tests/__init__.py Normal file
View file

@ -0,0 +1,3 @@
# License AGPL-3.0 or later (https://www.gnu.org/licenses/agpl.html).
from . import test_access_rights

377
odoo-bringout-oca-purchase-workflow-purchase_security/purchase_security/tests/test_access_rights.py Normal file
View file

@ -0,0 +1,377 @@
# Copyright 2020 Tecnativa - Víctor Martínez
# Copyright 2023 Tecnativa - Stefan Ungureanu
# Copyright 2023 Tecnativa - Pedro M. Baeza
# Copyright 2024 Tecnativa - Víctor Martínez
# License AGPL-3.0 or later (https://www.gnu.org/licenses/agpl.html).
from odoo.tests import Form, common, new_test_user
from odoo.tests.common import users
class TestPurchaseOrderSecurity(common.TransactionCase):
@classmethod
def setUpClass(cls):
super().setUpClass()
cls.env = cls.env(
context=dict(
cls.env.context,
mail_create_nolog=True,
mail_create_nosubscribe=True,
mail_notrack=True,
no_reset_password=True,
tracking_disable=True,
)
)
# Teams
cls.team1 = cls.env["purchase.team"].create({"name": "Team1"})
cls.team2 = cls.env["purchase.team"].create({"name": "Team2"})
# Users
# User in group_purchase_own_orders
cls.user_group_purchase_own_orders = new_test_user(
cls.env,
login="group_purchase_own_orders",
groups="purchase_security.group_purchase_own_orders",
)
# User 1 in group_purchase_group_orders
cls.user_group_team_1 = new_test_user(
cls.env,
login="group_purchase_team_1_orders",
groups="purchase_security.group_purchase_group_orders",
)
# Adding user 1 to both teams
cls.team1.write({"user_ids": [(4, cls.user_group_team_1.id)]})
cls.team2.write({"user_ids": [(4, cls.user_group_team_1.id)]})
# User 2 in group_purchase_group_orders
cls.user_group_team_2 = new_test_user(
cls.env,
login="group_purchase_team_2_orders",
groups="purchase_security.group_purchase_group_orders",
)
# Adding user 2 to only one team
cls.team1.write({"user_ids": [(4, cls.user_group_team_2.id)]})
# User with group permission but without being assigned to any team
cls.user_group_team_3 = new_test_user(
cls.env,
login="group_purchase_team_3_orders",
groups="purchase_security.group_purchase_group_orders",
)
# Purchase order user
cls.user_po_user = new_test_user(
cls.env, login="po_user", groups="purchase.group_purchase_user"
)
# Purchase order manager
cls.user_po_manager = new_test_user(
cls.env, login="po_manager", groups="purchase.group_purchase_manager"
)
# User without groups
cls.user_without_groups = new_test_user(cls.env, login="without_groups")
# Partner for the POs
cls.partner_po = cls.env["res.partner"].create({"name": "PO Partner"})
# Purchase Order
cls.orders = cls.env["purchase.order"].create(
(
{
"name": "po_security_1",
"partner_id": cls.partner_po.id,
"user_id": False, # No Purchase Representative
"team_id": False, # No automatic team
},
{
"name": "po_security_2",
"user_id": cls.user_po_user.id,
"partner_id": cls.partner_po.id,
},
{
"name": "po_security_3",
"user_id": cls.user_po_manager.id,
"partner_id": cls.partner_po.id,
"team_id": cls.team1.id,
},
{
"name": "po_security_4",
"user_id": cls.user_group_purchase_own_orders.id,
"partner_id": cls.partner_po.id,
"team_id": cls.team2.id,
},
)
)
@users("group_purchase_team_1_orders")
def test_new_purchase_order(self):
order_form_1 = Form(self.env["purchase.order"])
self.assertEqual(order_form_1.user_id, self.user_group_team_1)
self.assertEqual(order_form_1.team_id, self.team1)
order_form_1.partner_id = self.partner_po
self.assertEqual(order_form_1.user_id, self.user_group_team_1)
self.assertEqual(order_form_1.team_id, self.team1)
# order_form with default_user_id (user_group_team_2 > team_2)
self.team1.write({"user_ids": [(3, self.user_group_team_2.id)]})
self.team2.write({"user_ids": [(4, self.user_group_team_2.id)]})
order_form_2 = Form(
self.env["purchase.order"].with_context(
default_user_id=self.user_group_team_2.id
)
)
self.assertEqual(order_form_2.user_id, self.user_group_team_2)
self.assertEqual(order_form_2.team_id, self.team2)
order_form_2.partner_id = self.partner_po
self.assertEqual(order_form_2.user_id, self.user_group_team_2)
self.assertEqual(order_form_2.team_id, self.team2)
# order_form with default_user_id (user_group_team_3 > without team)
order_form_2 = Form(
self.env["purchase.order"].with_context(
default_user_id=self.user_group_team_3.id
)
)
self.assertEqual(order_form_2.user_id, self.user_group_team_3)
self.assertEqual(order_form_2.team_id, self.team1)
order_form_2.partner_id = self.partner_po
self.assertEqual(order_form_2.user_id, self.user_group_team_3)
self.assertEqual(order_form_2.team_id, self.team1)
def _check_permission(self, user, team, expected):
self.partner_po.write(
{
"purchase_user_id": user.id if user else user,
"purchase_team_id": team.id if team else team,
}
)
domain = [("id", "=", self.partner_po.id)]
obj = self.env[self.partner_po._name]
self.assertEqual(bool(obj.search(domain)), expected)
def test_po_auto_team(self):
order = self.env["purchase.order"].search([("name", "=", "po_security_2")])
self.assertEqual(order.team_id, self.team1)
def test_access_user_user_group_purchase_own_orders(self):
# User in group should have access to it's own PO
# and to those w/o Purchase Representative
self.assertEqual(
len(
self.env["purchase.order"]
.with_user(self.user_group_purchase_own_orders)
.search([])
),
2,
)
self.assertFalse(
self.orders.filtered(
lambda x: x.user_id == self.user_group_purchase_own_orders
)
.with_user(self.user_group_purchase_own_orders)[0]
.is_user_id_editable
)
def test_access_user_po_user(self):
# Normal PO user should have access to all of them
# because he is not in group
self.assertEqual(
len(
self.env["purchase.order"]
.with_user(self.user_po_user)
.search([("name", "like", "po_security")])
),
4,
)
self.assertTrue(self.orders.with_user(self.user_po_user)[0].is_user_id_editable)
def test_access_user_po_manager(self):
# Manager PO user should have access to all of them
self.assertEqual(
len(
self.env["purchase.order"]
.with_user(self.user_po_manager)
.search([("name", "like", "po_security")])
),
4,
)
self.assertTrue(
self.orders.with_user(self.user_po_manager)[1].is_user_id_editable
)
def test_access_user_without_groups(self):
# User without groups should not have access to POs
self.assertEqual(
len(self.env["purchase.order"].with_user(self.user_without_groups).read()),
0,
)
def test_access_user_user_group_purchase_group_orders_1(self):
# User in group should have access PO's without any team assigned,
# and to those to whose team he belongs. In this case, it belongs to
# both teams
self.assertEqual(
len(
self.env["purchase.order"]
.with_user(self.user_group_team_1)
.search([("name", "like", "po_security")])
),
4,
)
def test_access_user_user_group_purchase_group_orders_2(self):
# User in group should have access PO's without any team assigned,
# and to those to whose team he belongs. In this case, it belongs to
# only one team, so the other order won't be seen
self.assertEqual(
len(
self.env["purchase.order"]
.with_user(self.user_group_team_2)
.search([("name", "like", "po_security")])
),
3,
)
def test_access_user_user_group_purchase_group_orders_3(self):
# User in group should have access PO's without any team assigned,
# and to those to whose team they belongs. In this case, it does not
# belongs to any team, so the other orders won't be seen
self.assertEqual(
len(
self.env["purchase.order"]
.with_user(self.user_group_team_3)
.search([("name", "like", "po_security")])
),
1,
)
@users("po_user")
def test_partner_permissions_01(self):
"""User with purchase.group_purchase_user group."""
self._check_permission(False, False, True)
self._check_permission(False, self.team1, True)
self._check_permission(False, self.team2, True)
self._check_permission(self.user_group_purchase_own_orders, False, True)
self._check_permission(self.user_group_purchase_own_orders, self.team1, True)
self._check_permission(self.user_group_purchase_own_orders, self.team2, True)
self._check_permission(self.user_group_team_1, False, True)
self._check_permission(self.user_group_team_1, self.team1, True)
self._check_permission(self.user_group_team_1, self.team2, True)
self._check_permission(self.user_group_team_2, False, True)
self._check_permission(self.user_group_team_2, self.team1, True)
self._check_permission(self.user_group_team_2, self.team2, True)
self._check_permission(self.user_group_team_3, False, True)
self._check_permission(self.user_group_team_3, self.team1, True)
self._check_permission(self.user_group_team_3, self.team2, True)
self._check_permission(self.user_po_user, False, True)
self._check_permission(self.user_po_user, self.team1, True)
self._check_permission(self.user_po_user, self.team2, True)
self._check_permission(self.user_po_manager, False, True)
self._check_permission(self.user_po_manager, self.team1, True)
self._check_permission(self.user_po_manager, self.team2, True)
self._check_permission(self.user_without_groups, False, True)
self._check_permission(self.user_without_groups, self.team1, True)
self._check_permission(self.user_without_groups, self.team2, True)
@users("group_purchase_own_orders")
def test_partner_permissions_02(self):
"""User with purchase_security.group_purchase_own_orders group."""
self._check_permission(False, False, True)
self._check_permission(False, self.team1, False)
self._check_permission(False, self.team2, False)
self._check_permission(self.user_group_purchase_own_orders, False, True)
self._check_permission(self.user_group_purchase_own_orders, self.team1, True)
self._check_permission(self.user_group_purchase_own_orders, self.team2, True)
self._check_permission(self.user_group_team_1, False, False)
self._check_permission(self.user_group_team_1, self.team1, False)
self._check_permission(self.user_group_team_1, self.team2, False)
self._check_permission(self.user_group_team_2, False, False)
self._check_permission(self.user_group_team_2, self.team1, False)
self._check_permission(self.user_group_team_2, self.team2, False)
self._check_permission(self.user_group_team_3, False, False)
self._check_permission(self.user_group_team_3, self.team1, False)
self._check_permission(self.user_group_team_3, self.team2, False)
self._check_permission(self.user_po_user, False, False)
self._check_permission(self.user_po_user, self.team1, False)
self._check_permission(self.user_po_user, self.team2, False)
self._check_permission(self.user_po_manager, False, False)
self._check_permission(self.user_po_manager, self.team1, False)
self._check_permission(self.user_po_manager, self.team2, False)
self._check_permission(self.user_without_groups, False, False)
self._check_permission(self.user_without_groups, self.team1, False)
self._check_permission(self.user_without_groups, self.team2, False)
@users("group_purchase_team_1_orders")
def test_partner_permissions_03(self):
"""User with purchase_security.group_purchase_group_orders group."""
self._check_permission(False, False, True)
self._check_permission(False, self.team1, True)
self._check_permission(False, self.team2, False)
self._check_permission(self.user_group_purchase_own_orders, False, True)
self._check_permission(self.user_group_purchase_own_orders, self.team1, True)
self._check_permission(self.user_group_purchase_own_orders, self.team2, False)
self._check_permission(self.user_group_team_1, False, True)
self._check_permission(self.user_group_team_1, self.team1, True)
self._check_permission(self.user_group_team_1, self.team2, False)
self._check_permission(self.user_group_team_2, False, True)
self._check_permission(self.user_group_team_2, self.team1, True)
self._check_permission(self.user_group_team_2, self.team2, False)
self._check_permission(self.user_group_team_3, False, True)
self._check_permission(self.user_group_team_3, self.team1, True)
self._check_permission(self.user_group_team_3, self.team2, False)
self._check_permission(self.user_po_user, False, True)
self._check_permission(self.user_po_user, self.team1, True)
self._check_permission(self.user_po_user, self.team2, False)
self._check_permission(self.user_po_manager, False, True)
self._check_permission(self.user_po_manager, self.team1, True)
self._check_permission(self.user_po_manager, self.team2, False)
self._check_permission(self.user_without_groups, False, True)
self._check_permission(self.user_without_groups, self.team1, True)
self._check_permission(self.user_without_groups, self.team2, False)
@users("po_manager")
def test_partner_permissions_04(self):
"""User with purchase.group_purchase_manager group."""
self._check_permission(False, False, True)
self._check_permission(False, self.team1, True)
self._check_permission(False, self.team2, True)
self._check_permission(self.user_group_purchase_own_orders, False, True)
self._check_permission(self.user_group_purchase_own_orders, self.team1, True)
self._check_permission(self.user_group_purchase_own_orders, self.team2, True)
self._check_permission(self.user_group_team_1, False, True)
self._check_permission(self.user_group_team_1, self.team1, True)
self._check_permission(self.user_group_team_1, self.team2, True)
self._check_permission(self.user_group_team_2, False, True)
self._check_permission(self.user_group_team_2, self.team1, True)
self._check_permission(self.user_group_team_2, self.team2, True)
self._check_permission(self.user_group_team_3, False, True)
self._check_permission(self.user_group_team_3, self.team1, True)
self._check_permission(self.user_group_team_3, self.team2, True)
self._check_permission(self.user_po_user, False, True)
self._check_permission(self.user_po_user, self.team1, True)
self._check_permission(self.user_po_user, self.team2, True)
self._check_permission(self.user_po_manager, False, True)
self._check_permission(self.user_po_manager, self.team1, True)
self._check_permission(self.user_po_manager, self.team2, True)
self._check_permission(self.user_without_groups, False, True)
self._check_permission(self.user_without_groups, self.team1, True)
self._check_permission(self.user_without_groups, self.team2, True)
@users("without_groups")
def test_partner_permissions_05(self):
"""User witout groups"""
self._check_permission(False, False, True)
self._check_permission(False, self.team1, True)
self._check_permission(False, self.team2, True)
self._check_permission(self.user_group_purchase_own_orders, False, True)
self._check_permission(self.user_group_purchase_own_orders, self.team1, True)
self._check_permission(self.user_group_purchase_own_orders, self.team2, True)
self._check_permission(self.user_group_team_1, False, True)
self._check_permission(self.user_group_team_1, self.team1, True)
self._check_permission(self.user_group_team_1, self.team2, True)
self._check_permission(self.user_group_team_2, False, True)
self._check_permission(self.user_group_team_2, self.team1, True)
self._check_permission(self.user_group_team_2, self.team2, True)
self._check_permission(self.user_group_team_3, False, True)
self._check_permission(self.user_group_team_3, self.team1, True)
self._check_permission(self.user_group_team_3, self.team2, True)
self._check_permission(self.user_po_user, False, True)
self._check_permission(self.user_po_user, self.team1, True)
self._check_permission(self.user_po_user, self.team2, True)
self._check_permission(self.user_po_manager, False, True)
self._check_permission(self.user_po_manager, self.team1, True)
self._check_permission(self.user_po_manager, self.team2, True)
self._check_permission(self.user_without_groups, False, True)
self._check_permission(self.user_without_groups, self.team1, True)
self._check_permission(self.user_without_groups, self.team2, True)

31
odoo-bringout-oca-purchase-workflow-purchase_security/purchase_security/views/purchase_order_views.xml Normal file
View file

@ -0,0 +1,31 @@
<?xml version="1.0" encoding="utf-8" ?>
<odoo>
<record id="purchase_order_form" model="ir.ui.view">
<field name="name">purchase.order.form (in purchase_security)</field>
<field name="model">purchase.order</field>
<field name="inherit_id" ref="purchase.purchase_order_form" />
<field name="arch" type="xml">
<field name="user_id" position="before">
<field name="is_user_id_editable" invisible="1" />
</field>
<field name="user_id" position="attributes">
<attribute name="attrs">{
'readonly': [('is_user_id_editable','=',False)],
}</attribute>
<attribute name="force_save">1</attribute>
</field>
<xpath expr="//field[@name='user_id']" position="after">
<field
name="team_id"
readonly="1"
groups="!purchase_security.group_purchase_group_orders"
/>
<field
name="team_id"
readonly="0"
groups="purchase_security.group_purchase_group_orders"
/>
</xpath>
</field>
</record>
</odoo>

99
odoo-bringout-oca-purchase-workflow-purchase_security/purchase_security/views/purchase_team_views.xml Normal file
View file

@ -0,0 +1,99 @@
<?xml version="1.0" encoding="utf-8" ?>
<odoo>
<record id="purchase_team_form" model="ir.ui.view">
<field name="name">purchase.team.form</field>
<field name="model">purchase.team</field>
<field name="arch" type="xml">
<form string="Purchase Team">
<sheet>
<div class="oe_title">
<label for="name" string="Purchase Team" />
<h1>
<field
class="text-break"
name="name"
placeholder="e.g. Europe"
/>
</h1>
</div>
<notebook>
<page string="Members">
<field name="user_ids" mode="kanban" class="w-100">
<kanban>
<field name="id" />
<field name="name" />
<field name="email" />
<field name="avatar_128" />
<templates>
<t t-name="kanban-box">
<div
class="oe_kanban_card oe_kanban_global_click"
>
<div
class="o_kanban_card_content d-flex"
>
<div>
<img
t-att-src="kanban_image('res.users', 'avatar_128', record.id.raw_value)"
class="o_kanban_image o_image_64_cover"
alt="Avatar"
/>
</div>
<div
class="oe_kanban_details d-flex flex-column ml-3"
>
<strong
class="o_kanban_record_title oe_partner_heading"
><field name="name" /></strong>
<div
class="d-flex align-items-baseline text-break"
>
<i
class="fa fa-envelope mr-1"
role="img"
aria-label="Email"
title="Email"
/><field name="email" />
</div>
</div>
</div>
</div>
</t>
</templates>
</kanban>
</field>
</page>
</notebook>
</sheet>
</form>
</field>
</record>
<record id="purchase_team_tree" model="ir.ui.view">
<field name="name">purchase.team.form</field>
<field name="model">purchase.team</field>
<field name="arch" type="xml">
<tree editable="bottom">
<field name="sequence" widget="handle" />
<field name="name" />
<field
name="user_ids"
widget="many2many_avatar_user"
domain="[('share', '=', False)]"
/>
</tree>
</field>
</record>
<record id="action_purchase_team_display" model="ir.actions.act_window">
<field name="name">Purchase Teams</field>
<field name="type">ir.actions.act_window</field>
<field name="res_model">purchase.team</field>
<field name="view_mode">tree,form</field>
</record>
<menuitem
id="menu_purchase_team_tree"
name="Purchase Teams"
parent="purchase.menu_purchase_config"
action="action_purchase_team_display"
sequence="5"
/>
</odoo>

59
odoo-bringout-oca-purchase-workflow-purchase_security/purchase_security/views/res_partner_views.xml Normal file
View file

@ -0,0 +1,59 @@
<?xml version="1.0" encoding="utf-8" ?>
<odoo>
<record id="view_res_partner_filter" model="ir.ui.view">
<field name="name">res.partner.select</field>
<field name="model">res.partner</field>
<field name="inherit_id" ref="base.view_res_partner_filter" />
<field name="arch" type="xml">
<field name="user_id" position="after">
<field
name="purchase_user_id"
groups="purchase_security.group_purchase_own_orders"
/>
</field>
<filter name="salesperson" position="after">
<filter
name="purchase_user_id_filter"
groups="purchase_security.group_purchase_own_orders"
string="Purchase representative"
domain="[]"
context="{'group_by' : 'purchase_user_id'}"
/>
</filter>
</field>
</record>
<record id="view_partner_tree" model="ir.ui.view">
<field name="name">res.partner.tree</field>
<field name="model">res.partner</field>
<field name="inherit_id" ref="base.view_partner_tree" />
<field name="arch" type="xml">
<field name="user_id" position="after">
<field
name="purchase_user_id"
groups="purchase_security.group_purchase_own_orders"
optional="show"
widget="many2one_avatar_user"
/>
</field>
</field>
</record>
<record id="view_partner_property_form" model="ir.ui.view">
<field name="name">res.partner.property.form.inherit</field>
<field name="model">res.partner</field>
<field name="inherit_id" ref="account.view_partner_property_form" />
<field name="arch" type="xml">
<!-- Use this field to place the field first in Purchase group. !-->
<field name="property_supplier_payment_term_id" position="before">
<field
name="purchase_user_id"
groups="purchase_security.group_purchase_own_orders"
widget="many2one_avatar_user"
/>
<field
name="purchase_team_id"
groups="purchase_security.group_purchase_own_orders"
/>
</field>
</field>
</record>
</odoo>