Initial commit
This commit is contained in:
gsinghpal
75
fusion_claims/security/ir.model.access.csv
Normal file
75
fusion_claims/security/ir.model.access.csv
Normal file
@@ -0,0 +1,75 @@
|
||||
id,name,model_id:id,group_id:id,perm_read,perm_write,perm_create,perm_unlink
|
||||
access_fusion_claims_config_user,fusion.central.config.user,model_fusion_claims_config,base.group_user,1,1,1,1
|
||||
access_fusion_claims_export_wizard_user,fusion.central.export.wizard.user,model_fusion_claims_export_wizard,account.group_account_invoice,1,1,1,1
|
||||
access_fusion_claims_export_wizard_manager,fusion.central.export.wizard.manager,model_fusion_claims_export_wizard,account.group_account_manager,1,1,1,1
|
||||
access_fusion_adp_device_code_user,fusion.adp.device.code.user,model_fusion_adp_device_code,base.group_user,1,0,0,0
|
||||
access_fusion_adp_device_code_sales,fusion.adp.device.code.sales,model_fusion_adp_device_code,sales_team.group_sale_salesman,1,1,1,0
|
||||
access_fusion_adp_device_code_manager,fusion.adp.device.code.manager,model_fusion_adp_device_code,sales_team.group_sale_manager,1,1,1,1
|
||||
access_fusion_device_import_wizard,fusion.central.device.import.wizard,model_fusion_claims_device_import_wizard,sales_team.group_sale_manager,1,1,1,1
|
||||
access_fusion_device_approval_wizard,fusion.device.approval.wizard.user,model_fusion_claims_device_approval_wizard,sales_team.group_sale_salesman,1,1,1,1
|
||||
access_fusion_device_approval_wizard_line,fusion.device.approval.wizard.line.user,model_fusion_claims_device_approval_wizard_line,sales_team.group_sale_salesman,1,1,1,1
|
||||
access_fusion_submission_verification_wizard,fusion.submission.verification.wizard.user,model_fusion_claims_submission_verification_wizard,sales_team.group_sale_salesman,1,1,1,1
|
||||
access_fusion_submission_verification_wizard_line,fusion.submission.verification.wizard.line.user,model_fusion_claims_submission_verification_wizard_line,sales_team.group_sale_salesman,1,1,1,1
|
||||
access_fusion_status_change_reason_wizard,fusion.status.change.reason.wizard.user,model_fusion_status_change_reason_wizard,sales_team.group_sale_salesman,1,1,1,1
|
||||
access_fusion_case_close_verification_wizard,fusion.case.close.verification.wizard.user,model_fusion_claims_case_close_verification_wizard,sales_team.group_sale_salesman,1,1,1,1
|
||||
access_fusion_schedule_assessment_wizard,fusion.schedule.assessment.wizard.user,model_fusion_claims_schedule_assessment_wizard,sales_team.group_sale_salesman,1,1,1,1
|
||||
access_fusion_assessment_completed_wizard,fusion.assessment.completed.wizard.user,model_fusion_claims_assessment_completed_wizard,sales_team.group_sale_salesman,1,1,1,1
|
||||
access_fusion_application_received_wizard,fusion.application.received.wizard.user,model_fusion_claims_application_received_wizard,sales_team.group_sale_salesman,1,1,1,1
|
||||
access_fusion_ready_for_submission_wizard,fusion.ready.for.submission.wizard.user,model_fusion_claims_ready_for_submission_wizard,sales_team.group_sale_salesman,1,1,1,1
|
||||
access_fusion_ready_to_bill_wizard,fusion.ready.to.bill.wizard.user,model_fusion_claims_ready_to_bill_wizard,sales_team.group_sale_salesman,1,1,1,1
|
||||
access_fusion_submission_history_user,fusion.submission.history.user,model_fusion_submission_history,sales_team.group_sale_salesman,1,1,1,0
|
||||
access_fusion_submission_history_manager,fusion.submission.history.manager,model_fusion_submission_history,sales_team.group_sale_manager,1,1,1,1
|
||||
access_fusion_loaner_checkout_user,fusion.loaner.checkout.user,model_fusion_loaner_checkout,sales_team.group_sale_salesman,1,1,1,0
|
||||
access_fusion_loaner_checkout_manager,fusion.loaner.checkout.manager,model_fusion_loaner_checkout,sales_team.group_sale_manager,1,1,1,1
|
||||
access_fusion_loaner_history_user,fusion.loaner.history.user,model_fusion_loaner_history,sales_team.group_sale_salesman,1,0,0,0
|
||||
access_fusion_loaner_history_manager,fusion.loaner.history.manager,model_fusion_loaner_history,sales_team.group_sale_manager,1,1,1,1
|
||||
access_fusion_loaner_checkout_wizard,fusion.loaner.checkout.wizard.user,model_fusion_loaner_checkout_wizard,sales_team.group_sale_salesman,1,1,1,1
|
||||
access_fusion_loaner_return_wizard,fusion.loaner.return.wizard.user,model_fusion_loaner_return_wizard,sales_team.group_sale_salesman,1,1,1,1
|
||||
access_fusion_ready_for_delivery_wizard,fusion.ready.for.delivery.wizard.user,model_fusion_ready_for_delivery_wizard,sales_team.group_sale_salesman,1,1,1,1
|
||||
access_fusion_client_profile_user,fusion.client.profile.user,model_fusion_client_profile,sales_team.group_sale_salesman,1,1,1,0
|
||||
access_fusion_client_profile_manager,fusion.client.profile.manager,model_fusion_client_profile,sales_team.group_sale_manager,1,1,1,1
|
||||
access_fusion_adp_application_data_user,fusion.adp.application.data.user,model_fusion_adp_application_data,sales_team.group_sale_salesman,1,1,1,0
|
||||
access_fusion_adp_application_data_manager,fusion.adp.application.data.manager,model_fusion_adp_application_data,sales_team.group_sale_manager,1,1,1,1
|
||||
access_fusion_client_chat_session_user,fusion.client.chat.session.user,model_fusion_client_chat_session,sales_team.group_sale_salesman,1,1,1,0
|
||||
access_fusion_client_chat_session_manager,fusion.client.chat.session.manager,model_fusion_client_chat_session,sales_team.group_sale_manager,1,1,1,1
|
||||
access_fusion_client_chat_message_user,fusion.client.chat.message.user,model_fusion_client_chat_message,sales_team.group_sale_salesman,1,1,1,0
|
||||
access_fusion_client_chat_message_manager,fusion.client.chat.message.manager,model_fusion_client_chat_message,sales_team.group_sale_manager,1,1,1,1
|
||||
access_fusion_xml_import_wizard,fusion.xml.import.wizard.user,model_fusion_xml_import_wizard,sales_team.group_sale_manager,1,1,1,1
|
||||
access_fusion_claims_dashboard_user,fusion.claims.dashboard.user,model_fusion_claims_dashboard,sales_team.group_sale_salesman,1,1,1,1
|
||||
access_fusion_technician_task_user,fusion.technician.task.user,model_fusion_technician_task,sales_team.group_sale_salesman,1,1,1,0
|
||||
access_fusion_technician_task_manager,fusion.technician.task.manager,model_fusion_technician_task,sales_team.group_sale_manager,1,1,1,1
|
||||
access_fusion_technician_task_technician,fusion.technician.task.technician,model_fusion_technician_task,fusion_claims.group_field_technician,1,1,0,0
|
||||
access_fusion_technician_task_portal,fusion.technician.task.portal,model_fusion_technician_task,base.group_portal,1,0,0,0
|
||||
access_fusion_push_subscription_user,fusion.push.subscription.user,model_fusion_push_subscription,base.group_user,1,1,1,0
|
||||
access_fusion_push_subscription_portal,fusion.push.subscription.portal,model_fusion_push_subscription,base.group_portal,1,1,1,0
|
||||
access_fusion_technician_location_manager,fusion.technician.location.manager,model_fusion_technician_location,sales_team.group_sale_manager,1,1,1,1
|
||||
access_fusion_technician_location_user,fusion.technician.location.user,model_fusion_technician_location,sales_team.group_sale_salesman,1,0,0,0
|
||||
access_fusion_technician_location_portal,fusion.technician.location.portal,model_fusion_technician_location,base.group_portal,0,0,1,0
|
||||
access_fusion_send_to_mod_wizard_user,fusion_claims.send.to.mod.wizard.user,model_fusion_claims_send_to_mod_wizard,sales_team.group_sale_salesman,1,1,1,0
|
||||
access_fusion_send_to_mod_wizard_manager,fusion_claims.send.to.mod.wizard.manager,model_fusion_claims_send_to_mod_wizard,sales_team.group_sale_manager,1,1,1,1
|
||||
access_fusion_mod_awaiting_wizard_user,fusion_claims.mod.awaiting.funding.wizard.user,model_fusion_claims_mod_awaiting_funding_wizard,sales_team.group_sale_salesman,1,1,1,0
|
||||
access_fusion_mod_awaiting_wizard_manager,fusion_claims.mod.awaiting.funding.wizard.manager,model_fusion_claims_mod_awaiting_funding_wizard,sales_team.group_sale_manager,1,1,1,1
|
||||
access_fusion_mod_approved_wizard_user,fusion_claims.mod.funding.approved.wizard.user,model_fusion_claims_mod_funding_approved_wizard,sales_team.group_sale_salesman,1,1,1,0
|
||||
access_fusion_mod_approved_wizard_manager,fusion_claims.mod.funding.approved.wizard.manager,model_fusion_claims_mod_funding_approved_wizard,sales_team.group_sale_manager,1,1,1,1
|
||||
access_fusion_mod_approved_line_user,fusion_claims.mod.funding.approved.wizard.line.user,model_fusion_claims_mod_funding_approved_wizard_line,sales_team.group_sale_salesman,1,1,1,0
|
||||
access_fusion_mod_approved_line_manager,fusion_claims.mod.funding.approved.wizard.line.manager,model_fusion_claims_mod_funding_approved_wizard_line,sales_team.group_sale_manager,1,1,1,1
|
||||
access_fusion_mod_pca_wizard_user,fusion_claims.mod.pca.received.wizard.user,model_fusion_claims_mod_pca_received_wizard,sales_team.group_sale_salesman,1,1,1,0
|
||||
access_fusion_mod_pca_wizard_manager,fusion_claims.mod.pca.received.wizard.manager,model_fusion_claims_mod_pca_received_wizard,sales_team.group_sale_manager,1,1,1,1
|
||||
access_fusion_sa_mobility_wizard_user,fusion_claims.sa.mobility.wizard.user,model_fusion_claims_sa_mobility_wizard,sales_team.group_sale_salesman,1,1,1,0
|
||||
access_fusion_sa_mobility_wizard_manager,fusion_claims.sa.mobility.wizard.manager,model_fusion_claims_sa_mobility_wizard,sales_team.group_sale_manager,1,1,1,1
|
||||
access_fusion_sa_mobility_part_line_user,fusion_claims.sa.mobility.part.line.user,model_fusion_claims_sa_mobility_part_line,sales_team.group_sale_salesman,1,1,1,0
|
||||
access_fusion_sa_mobility_part_line_manager,fusion_claims.sa.mobility.part.line.manager,model_fusion_claims_sa_mobility_part_line,sales_team.group_sale_manager,1,1,1,1
|
||||
access_fusion_sa_mobility_labour_line_user,fusion_claims.sa.mobility.labour.line.user,model_fusion_claims_sa_mobility_labour_line,sales_team.group_sale_salesman,1,1,1,0
|
||||
access_fusion_sa_mobility_labour_line_manager,fusion_claims.sa.mobility.labour.line.manager,model_fusion_claims_sa_mobility_labour_line,sales_team.group_sale_manager,1,1,1,1
|
||||
access_fusion_sa_mobility_fee_line_user,fusion_claims.sa.mobility.fee.line.user,model_fusion_claims_sa_mobility_fee_line,sales_team.group_sale_salesman,1,1,1,0
|
||||
access_fusion_sa_mobility_fee_line_manager,fusion_claims.sa.mobility.fee.line.manager,model_fusion_claims_sa_mobility_fee_line,sales_team.group_sale_manager,1,1,1,1
|
||||
access_fusion_discretionary_wizard_user,fusion_claims.discretionary.benefit.wizard.user,model_fusion_claims_discretionary_benefit_wizard,sales_team.group_sale_salesman,1,1,1,0
|
||||
access_fusion_discretionary_wizard_manager,fusion_claims.discretionary.benefit.wizard.manager,model_fusion_claims_discretionary_benefit_wizard,sales_team.group_sale_manager,1,1,1,1
|
||||
access_fusion_odsp_pre_approved_wizard_user,fusion_claims.odsp.pre.approved.wizard.user,model_fusion_claims_odsp_pre_approved_wizard,sales_team.group_sale_salesman,1,1,1,0
|
||||
access_fusion_odsp_pre_approved_wizard_manager,fusion_claims.odsp.pre.approved.wizard.manager,model_fusion_claims_odsp_pre_approved_wizard,sales_team.group_sale_manager,1,1,1,1
|
||||
access_fusion_odsp_ready_delivery_wizard_user,fusion_claims.odsp.ready.delivery.wizard.user,model_fusion_claims_odsp_ready_delivery_wizard,sales_team.group_sale_salesman,1,1,1,0
|
||||
access_fusion_odsp_ready_delivery_wizard_manager,fusion_claims.odsp.ready.delivery.wizard.manager,model_fusion_claims_odsp_ready_delivery_wizard,sales_team.group_sale_manager,1,1,1,1
|
||||
access_fusion_submit_to_odsp_wizard_user,fusion_claims.submit.to.odsp.wizard.user,model_fusion_claims_submit_to_odsp_wizard,sales_team.group_sale_salesman,1,1,1,0
|
||||
access_fusion_submit_to_odsp_wizard_manager,fusion_claims.submit.to.odsp.wizard.manager,model_fusion_claims_submit_to_odsp_wizard,sales_team.group_sale_manager,1,1,1,1
|
||||
access_fusion_sa_sig_template_user,fusion.sa.signature.template.user,model_fusion_sa_signature_template,sales_team.group_sale_salesman,1,0,0,0
|
||||
access_fusion_sa_sig_template_manager,fusion.sa.signature.template.manager,model_fusion_sa_signature_template,sales_team.group_sale_manager,1,1,1,1
|
||||
|
141
fusion_claims/security/security.xml
Normal file
141
fusion_claims/security/security.xml
Normal file
@@ -0,0 +1,141 @@
|
||||
<?xml version="1.0" encoding="utf-8"?>
|
||||
<odoo>
|
||||
<!-- ================================================================== -->
|
||||
<!-- MODULE CATEGORY (required for user settings section rendering) -->
|
||||
<!-- Odoo 19 organizes privileges by ir.module.category. -->
|
||||
<!-- Without this, groups fall into the generic Extra Rights list. -->
|
||||
<!-- ================================================================== -->
|
||||
<record id="module_category_fusion_claims" model="ir.module.category">
|
||||
<field name="name">Fusion Claims</field>
|
||||
<field name="sequence">45</field>
|
||||
</record>
|
||||
|
||||
<!-- ================================================================== -->
|
||||
<!-- FUSION CLAIMS PRIVILEGE (Odoo 19 pattern) -->
|
||||
<!-- Linked to module_category_fusion_claims so all groups appear -->
|
||||
<!-- under a "FUSION CLAIMS" section in user settings. -->
|
||||
<!-- ================================================================== -->
|
||||
<record id="res_groups_privilege_fusion_claims" model="res.groups.privilege">
|
||||
<field name="name">Fusion Claims</field>
|
||||
<field name="sequence">45</field>
|
||||
<field name="category_id" ref="module_category_fusion_claims"/>
|
||||
</record>
|
||||
|
||||
<!-- ================================================================== -->
|
||||
<!-- USER GROUP -->
|
||||
<!-- Implies sales_team.group_sale_salesman so existing access rules -->
|
||||
<!-- continue working without changes to ir.model.access.csv -->
|
||||
<!-- ================================================================== -->
|
||||
<record id="group_fusion_claims_user" model="res.groups">
|
||||
<field name="name">User</field>
|
||||
<field name="sequence">10</field>
|
||||
<field name="implied_ids" eval="[(4, ref('base.group_user')), (4, ref('sales_team.group_sale_salesman'))]"/>
|
||||
<field name="privilege_id" ref="res_groups_privilege_fusion_claims"/>
|
||||
</record>
|
||||
|
||||
<!-- ================================================================== -->
|
||||
<!-- MANAGER GROUP -->
|
||||
<!-- ================================================================== -->
|
||||
<record id="group_fusion_claims_manager" model="res.groups">
|
||||
<field name="name">Administrator</field>
|
||||
<field name="sequence">20</field>
|
||||
<field name="privilege_id" ref="res_groups_privilege_fusion_claims"/>
|
||||
<field name="implied_ids" eval="[(4, ref('group_fusion_claims_user')), (4, ref('sales_team.group_sale_manager'))]"/>
|
||||
<field name="user_ids" eval="[(4, ref('base.user_root')), (4, ref('base.user_admin'))]"/>
|
||||
</record>
|
||||
|
||||
<!-- DOCUMENT LOCK OVERRIDE GROUP -->
|
||||
<!-- Only users in this group can edit locked documents when the -->
|
||||
<!-- "Allow Document Lock Override" setting is enabled. -->
|
||||
<!-- Not implied by Manager. Must be explicitly assigned. -->
|
||||
<record id="group_document_lock_override" model="res.groups">
|
||||
<field name="name">Document Lock Override</field>
|
||||
<field name="privilege_id" ref="res_groups_privilege_fusion_claims"/>
|
||||
<field name="comment">Can edit locked documents on old/legacy cases when the override setting is enabled. Assign only to specific trusted users.</field>
|
||||
</record>
|
||||
|
||||
<!-- ================================================================== -->
|
||||
<!-- FIELD TECHNICIAN GROUP -->
|
||||
<!-- Standalone group safe for both portal and internal users. -->
|
||||
<!-- Do NOT imply group_fusion_claims_user — that chain leads to -->
|
||||
<!-- base.group_user which conflicts with portal users (share=True). -->
|
||||
<!-- Menu visibility is handled via comma-separated groups= on menus. -->
|
||||
<!-- ================================================================== -->
|
||||
<record id="group_field_technician" model="res.groups">
|
||||
<field name="name">Field Technician</field>
|
||||
<field name="privilege_id" ref="res_groups_privilege_fusion_claims"/>
|
||||
</record>
|
||||
|
||||
<!-- ================================================================== -->
|
||||
<!-- TECHNICIAN TASK RECORD RULES -->
|
||||
<!-- ================================================================== -->
|
||||
|
||||
<!-- Managers: full access to all tasks -->
|
||||
<record id="rule_technician_task_manager" model="ir.rule">
|
||||
<field name="name">Technician Task: Manager Full Access</field>
|
||||
<field name="model_id" ref="model_fusion_technician_task"/>
|
||||
<field name="domain_force">[(1, '=', 1)]</field>
|
||||
<field name="groups" eval="[(4, ref('sales_team.group_sale_manager'))]"/>
|
||||
<field name="perm_read" eval="True"/>
|
||||
<field name="perm_write" eval="True"/>
|
||||
<field name="perm_create" eval="True"/>
|
||||
<field name="perm_unlink" eval="True"/>
|
||||
</record>
|
||||
|
||||
<!-- Sales users: read/write all tasks, create tasks -->
|
||||
<record id="rule_technician_task_sales_user" model="ir.rule">
|
||||
<field name="name">Technician Task: Sales User Access</field>
|
||||
<field name="model_id" ref="model_fusion_technician_task"/>
|
||||
<field name="domain_force">[(1, '=', 1)]</field>
|
||||
<field name="groups" eval="[(4, ref('sales_team.group_sale_salesman'))]"/>
|
||||
<field name="perm_read" eval="True"/>
|
||||
<field name="perm_write" eval="True"/>
|
||||
<field name="perm_create" eval="True"/>
|
||||
<field name="perm_unlink" eval="False"/>
|
||||
</record>
|
||||
|
||||
<!-- Field Technicians (internal): own tasks only -->
|
||||
<record id="rule_technician_task_technician" model="ir.rule">
|
||||
<field name="name">Technician Task: Technician Own Tasks</field>
|
||||
<field name="model_id" ref="model_fusion_technician_task"/>
|
||||
<field name="domain_force">[('technician_id', '=', user.id)]</field>
|
||||
<field name="groups" eval="[(4, ref('group_field_technician'))]"/>
|
||||
<field name="perm_read" eval="True"/>
|
||||
<field name="perm_write" eval="True"/>
|
||||
<field name="perm_create" eval="False"/>
|
||||
<field name="perm_unlink" eval="False"/>
|
||||
</record>
|
||||
|
||||
<!-- Portal technicians: own tasks only, read + limited write -->
|
||||
<record id="rule_technician_task_portal" model="ir.rule">
|
||||
<field name="name">Technician Task: Portal Technician Access</field>
|
||||
<field name="model_id" ref="model_fusion_technician_task"/>
|
||||
<field name="domain_force">[('technician_id', '=', user.id)]</field>
|
||||
<field name="groups" eval="[(4, ref('base.group_portal'))]"/>
|
||||
<field name="perm_read" eval="True"/>
|
||||
<field name="perm_write" eval="False"/>
|
||||
<field name="perm_create" eval="False"/>
|
||||
<field name="perm_unlink" eval="False"/>
|
||||
</record>
|
||||
|
||||
<!-- ================================================================== -->
|
||||
<!-- PUSH SUBSCRIPTION RECORD RULES -->
|
||||
<!-- ================================================================== -->
|
||||
|
||||
<!-- Users: own subscriptions only -->
|
||||
<record id="rule_push_subscription_user" model="ir.rule">
|
||||
<field name="name">Push Subscription: Own Only</field>
|
||||
<field name="model_id" ref="model_fusion_push_subscription"/>
|
||||
<field name="domain_force">[('user_id', '=', user.id)]</field>
|
||||
<field name="groups" eval="[(4, ref('base.group_user'))]"/>
|
||||
</record>
|
||||
|
||||
<!-- Portal: own subscriptions only -->
|
||||
<record id="rule_push_subscription_portal" model="ir.rule">
|
||||
<field name="name">Push Subscription: Portal Own Only</field>
|
||||
<field name="model_id" ref="model_fusion_push_subscription"/>
|
||||
<field name="domain_force">[('user_id', '=', user.id)]</field>
|
||||
<field name="groups" eval="[(4, ref('base.group_portal'))]"/>
|
||||
</record>
|
||||
|
||||
</odoo>
|
||||
Reference in New Issue
Block a user