8eb2c2de95
Phase B of permissions overhaul. Mechanical text replacement across 11 ir.model.access.csv files: - group_fusion_plating_operator -> fusion_plating.group_fp_technician - group_fusion_plating_supervisor -> fusion_plating.group_fp_shop_manager_v2 - group_fusion_plating_manager -> fusion_plating.group_fp_manager - group_fusion_plating_admin -> fusion_plating.group_fp_owner - group_fp_estimator (configurator)-> fusion_plating.group_fp_sales_rep - group_fp_accounting -> fusion_plating.group_fp_manager - group_fp_receiving -> fusion_plating.group_fp_shop_manager_v2 - group_fp_shop_manager (legacy) -> fusion_plating.group_fp_manager - group_fusion_plating_cgp_officer -> fusion_plating.group_fp_quality_manager - group_fusion_plating_cgp_designated_official -> fusion_plating.group_fp_owner Backward-compat: old group xmlids still resolve (Phase A's implied_ids chains keep old ACLs working for users still holding old groups). This sweep ensures future-state correctness: when old groups are deleted after the 30-day rollback window, ACLs continue resolving via the new group xmlids. Also adds fusion_plating/tests/test_acl_migration.py with sample-based per-role access checks. The 2 CAPA tests are expected to fail until Phase C implements the Manager/QM quality split. Co-Authored-By: Claude Opus 4.7 (1M context) <noreply@anthropic.com>
95 lines
3.6 KiB
Python
95 lines
3.6 KiB
Python
# -*- coding: utf-8 -*-
|
|
# Copyright 2026 Nexa Systems Inc.
|
|
# License OPL-1 (Odoo Proprietary License v1.0)
|
|
# Part of the Fusion Plating product family.
|
|
|
|
{
|
|
'name': 'Fusion Plating — Controlled Goods Program',
|
|
'version': '19.0.1.2.1',
|
|
'category': 'Manufacturing/Plating',
|
|
'summary': 'Canadian Controlled Goods Program (CGP) compliance for plating '
|
|
'shops handling defence work: registration, authorized individuals, '
|
|
'personnel security assessments, visitor control, controlled goods '
|
|
'log, security incidents.',
|
|
'description': """
|
|
Fusion Plating — Controlled Goods Program (CGP)
|
|
===============================================
|
|
|
|
Part of the Fusion Plating product family by Nexa Systems Inc.
|
|
|
|
Canadian Controlled Goods Program compliance pack for plating / metal
|
|
finishing shops that handle defence or ITAR-adjacent work. The Controlled
|
|
Goods Program is administered by Public Services and Procurement Canada
|
|
(PSPC) under the Defence Production Act. Non-compliance is a criminal
|
|
offence, so this module defaults every record to restricted access and
|
|
keeps sensitive personnel security assessments out of the general
|
|
manager's view.
|
|
|
|
Records included
|
|
----------------
|
|
* CGP Registration — company registration with PSPC, 5-year renewal cycle
|
|
* Authorized Individuals — AI appointment, training, PSA linkage
|
|
* Personnel Security Assessments (PSA) — restricted to CGP Officer+
|
|
* Visitor Control — PSA-on-file check, escort, approval
|
|
* Controlled Goods Inventory — what the shop actually handles
|
|
* Receipts & Shipments — movement log with AI authorization
|
|
* Security Incidents — breach reporting, PSPC notification (restricted)
|
|
* Physical Access Log — entry / exit of controlled areas
|
|
* Security Plan — seeded as a doc.control template
|
|
|
|
Security model
|
|
--------------
|
|
A new restricted group ``CGP Officer`` is introduced on top of the core
|
|
Fusion Plating privilege. PSA and Security Incident records are visible
|
|
ONLY to the CGP Officer and the CGP Designated Official — not to the
|
|
generic manager role, because not every manager should see personnel
|
|
assessments. Admin must grant the new group manually; no user is
|
|
assigned by default.
|
|
|
|
Depends on ``fusion_plating_quality`` for the ``fusion.plating.doc.control``
|
|
model (the Security Plan lives there as a controlled document).
|
|
|
|
Reference: https://www.tpsgc-pwgsc.gc.ca/pmc-cgp/
|
|
|
|
Copyright (c) 2026 Nexa Systems Inc. All rights reserved.
|
|
""",
|
|
'author': 'Nexa Systems Inc.',
|
|
'website': 'https://www.nexasystems.ca',
|
|
'maintainer': 'Nexa Systems Inc.',
|
|
'support': 'support@nexasystems.ca',
|
|
'license': 'OPL-1',
|
|
'price': 0.00,
|
|
'currency': 'CAD',
|
|
'depends': [
|
|
'fusion_plating_quality',
|
|
'hr',
|
|
],
|
|
'data': [
|
|
'security/fp_cgp_security.xml',
|
|
'security/ir.model.access.csv',
|
|
'data/fp_sequence_data.xml',
|
|
'data/fp_cgp_doc_template_data.xml',
|
|
'views/fp_cgp_registration_views.xml',
|
|
'views/fp_cgp_ai_views.xml',
|
|
'views/fp_cgp_psa_views.xml',
|
|
'views/fp_cgp_visitor_views.xml',
|
|
'views/fp_cgp_controlled_good_views.xml',
|
|
'views/fp_cgp_receipt_shipment_views.xml',
|
|
'views/fp_cgp_security_incident_views.xml',
|
|
'views/fp_cgp_access_log_views.xml',
|
|
'views/hr_employee_views.xml',
|
|
'views/fp_menu.xml',
|
|
],
|
|
'demo': [
|
|
'data/fp_demo_cgp_data.xml',
|
|
],
|
|
'assets': {
|
|
'web.assets_backend': [
|
|
'fusion_plating_cgp/static/src/scss/fusion_plating_cgp.scss',
|
|
],
|
|
},
|
|
'installable': True,
|
|
'application': False,
|
|
'auto_install': False,
|
|
}
|