8eb2c2de95
Phase B of permissions overhaul. Mechanical text replacement across 11 ir.model.access.csv files: - group_fusion_plating_operator -> fusion_plating.group_fp_technician - group_fusion_plating_supervisor -> fusion_plating.group_fp_shop_manager_v2 - group_fusion_plating_manager -> fusion_plating.group_fp_manager - group_fusion_plating_admin -> fusion_plating.group_fp_owner - group_fp_estimator (configurator)-> fusion_plating.group_fp_sales_rep - group_fp_accounting -> fusion_plating.group_fp_manager - group_fp_receiving -> fusion_plating.group_fp_shop_manager_v2 - group_fp_shop_manager (legacy) -> fusion_plating.group_fp_manager - group_fusion_plating_cgp_officer -> fusion_plating.group_fp_quality_manager - group_fusion_plating_cgp_designated_official -> fusion_plating.group_fp_owner Backward-compat: old group xmlids still resolve (Phase A's implied_ids chains keep old ACLs working for users still holding old groups). This sweep ensures future-state correctness: when old groups are deleted after the 30-day rollback window, ACLs continue resolving via the new group xmlids. Also adds fusion_plating/tests/test_acl_migration.py with sample-based per-role access checks. The 2 CAPA tests are expected to fail until Phase C implements the Manager/QM quality split. Co-Authored-By: Claude Opus 4.7 (1M context) <noreply@anthropic.com>
Fusion Plating — Controlled Goods Program (CGP)
Canadian Controlled Goods Program compliance pack for plating shops doing defence or ITAR-adjacent work. Part of the Fusion Plating product family by Nexa Systems Inc.
What it covers
The Controlled Goods Program (CGP) is administered by Public Services and Procurement Canada (PSPC) under the Defence Production Act. Every Canadian entity that examines, possesses, or transfers controlled goods must be registered, must appoint an Authorized Individual, must run Personnel Security Assessments on anyone with access, and must maintain visitor, movement, and incident logs. Non-compliance is a criminal offence.
This module layers the minimum record set to stay audit-ready on top of the Fusion Plating core.
Records
| Model | Purpose |
|---|---|
fusion.plating.cgp.registration |
Company CGP registration with PSPC, 5-year renewal |
fusion.plating.cgp.authorized.individual |
AI appointment, training, state |
fusion.plating.cgp.psa |
Personnel Security Assessment (restricted) |
fusion.plating.cgp.visitor |
Visitor log with PSA / escort / approval |
fusion.plating.cgp.controlled.good |
Inventory of controlled goods handled |
fusion.plating.cgp.receipt.shipment |
Movement log with AI authorization |
fusion.plating.cgp.security.incident |
Security incidents, PSPC notification (restricted) |
fusion.plating.cgp.access.log |
Physical access log for controlled areas |
It also extends hr.employee with CGP fields (x_fc_cgp_psa_id,
x_fc_cgp_ai, etc.) and res.company with a link to the current CGP
registration.
Security
CGP data is sensitive. This module introduces a new restricted group
on top of the core fusion_plating.group_fusion_plating_manager:
- CGP Officer — full access to every CGP record
- CGP Designated Official — implies CGP Officer; top-level accountable person named in the PSPC registration
ir.rule records enforce that PSA and Security Incident records are
visible only to CGP Officer and above — a regular plating manager
cannot see them. No users are assigned by default; admin must grant
access explicitly.
Security Plan template
On install the module seeds a fusion.plating.doc.control record titled
"CGP Security Plan (Template)". Customise it to your facility and
submit to PSPC as part of your registration.
Dependencies
fusion_plating_quality— forfusion.plating.doc.controlhr— for employee linkage on PSAs, AIs, and access logs
Reference
https://www.tpsgc-pwgsc.gc.ca/pmc-cgp/
Copyright (c) 2026 Nexa Systems Inc. All rights reserved. License: OPL-1 (Odoo Proprietary License v1.0)