Restrict access to data

This commit is contained in:
Matt Marcha 2024-10-25 17:24:39 -10:00
parent 41f85f9898
commit d8ca2b9684
7 changed files with 67 additions and 9 deletions

View file

@ -1,7 +1,7 @@
# -*- coding: utf-8 -*-
{
'name': 'Real Estate',
'category': 'Tutorials/Estate',
'category': 'Real Estate/Brokerage',
'application': True,
'installable': True,
'author': 'Matt Marcha',
@ -15,6 +15,7 @@
'views/estate_property_views.xml',
'views/res_users_views.xml',
'views/estate_menus.xml',
'security/security.xml',
'security/ir.model.access.csv',
'data/estate.property.type.csv',
],

View file

@ -11,6 +11,7 @@ class EstateProperty(models.Model):
_name = "estate.property"
_description = "Properties for the Estate module"
_order = "id desc"
_check_company_auto = True
_sql_constraints = [
('check_expected_price', 'CHECK (expected_price > 0)', 'Expected rice should be superior to 0'),
@ -39,12 +40,13 @@ class EstateProperty(models.Model):
garden_area = fields.Integer()
garden_orientation = fields.Selection(selection=[('north', 'North'), ('south', 'South'), ('east', 'East'), ('west', 'West')])
property_type_id = fields.Many2one("estate.property.type", "Property Type")
salesman_id = fields.Many2one("res.users", string="Salesman")
buyer_id = fields.Many2one("res.partner", string="Buyer")
salesman_id = fields.Many2one("res.users", string="Salesman", check_company=True)
buyer_id = fields.Many2one("res.partner", string="Buyer", check_company=True)
tag_ids = fields.Many2many("estate.property.tag", string="Tags")
offer_ids = fields.One2many("estate.property.offer", "property_id", string="Offers")
total_area = fields.Integer(compute="_get_total_area", readonly=True)
best_price = fields.Float(compute="_compute_best_price")
company_id = fields.Many2one('res.company', 'Company', required=True, default=lambda self: self.env.company)
# ----------------- CRUD methods --------------------------- #

View file

@ -1,5 +1,9 @@
id,name,model_id/id,group_id/id,perm_read,perm_write,perm_create,perm_unlink
access_estate_property,access_estate_property,model_estate_property,base.group_user,1,1,1,1
access_estate_property_type,access_estate_property_type,model_estate_property_type,base.group_user,1,1,1,1
access_estate_property_tag,access_estate_property_tag,model_estate_property_tag,base.group_user,1,1,1,1
access_estate_property_offer,access_estate_property_offer,model_estate_property_offer,base.group_user,1,1,1,1
access_estate_property_manager,access_estate_property_manager,model_estate_property,estate_group_manager,1,1,1,1
access_estate_property_type_manager,access_estate_property_type_manager,model_estate_property_type,estate_group_manager,1,1,1,1
access_estate_property_tag_manager,access_estate_property_tag_manager,model_estate_property_tag,estate_group_manager,1,1,1,1
access_estate_property_offer_manager,access_estate_property_offer_manager,model_estate_property_offer,estate_group_manager,1,1,1,1
access_estate_property_agent,access_estate_property_agent,model_estate_property,estate_group_user,1,1,1,0
access_estate_property_type_agent,access_estate_property_type_agent,model_estate_property_type,estate_group_user,1,0,0,0
access_estate_property_tag_agent,access_estate_property_tag_agent,model_estate_property_tag,estate_group_user,1,0,0,0
access_estate_property_offer_agent,access_estate_property_offer_agent,model_estate_property_offer,estate_group_user,1,1,1,1
1 id name model_id/id group_id/id perm_read perm_write perm_create perm_unlink
2 access_estate_property access_estate_property_manager access_estate_property access_estate_property_manager model_estate_property base.group_user estate_group_manager 1 1 1 1
3 access_estate_property_type access_estate_property_type_manager access_estate_property_type access_estate_property_type_manager model_estate_property_type base.group_user estate_group_manager 1 1 1 1
4 access_estate_property_tag access_estate_property_tag_manager access_estate_property_tag access_estate_property_tag_manager model_estate_property_tag base.group_user estate_group_manager 1 1 1 1
5 access_estate_property_offer access_estate_property_offer_manager access_estate_property_offer access_estate_property_offer_manager model_estate_property_offer base.group_user estate_group_manager 1 1 1 1
6 access_estate_property_agent access_estate_property_agent model_estate_property estate_group_user 1 1 1 0
7 access_estate_property_type_agent access_estate_property_type_agent model_estate_property_type estate_group_user 1 0 0 0
8 access_estate_property_tag_agent access_estate_property_tag_agent model_estate_property_tag estate_group_user 1 0 0 0
9 access_estate_property_offer_agent access_estate_property_offer_agent model_estate_property_offer estate_group_user 1 1 1 1

View file

@ -0,0 +1,44 @@
<?xml version="1.0" encoding="utf-8"?>
<odoo>
<record id="base.module_category_real_estate_brokerage" model="ir.module.category" />
<record id="estate_group_user" model="res.groups">
<field name="name">Agent</field>
<field name="category_id" ref="base.module_category_real_estate_brokerage"/>
</record>
<record id="estate_group_manager" model="res.groups">
<field name="name">Manager</field>
<field name="category_id" ref="base.module_category_real_estate_brokerage"/>
<field name="implied_ids" eval="[(4, ref('estate.estate_group_user'))]"/>
</record>
<record id="rule_estate_property_agent_owner" model="ir.rule">
<field name="name">Restrict properties management for agents to their owners</field>
<field name="model_id" ref="model_estate_property"/>
<field name="perm_create" eval="False"/>
<field name="groups" eval="[(4, ref('estate.estate_group_user'))]"/>
<field name="domain_force">[
'|', ('salesman_id', '=', user.id),
('salesman_id', '=', False)
]</field>
</record>
<record id="rule_estate_property_manager" model="ir.rule">
<field name="name">Manager rule</field>
<field name="model_id" ref="model_estate_property"/>
<field name="groups" eval="[Command.link(ref('estate.estate_group_manager'))]"/>
<field name="domain_force">[(1, '=', 1)]</field>
</record>
<record id="rule_estate_property_company" model="ir.rule">
<field name="name">Restrict properties management for agents of the property's company</field>
<field name="model_id" ref="model_estate_property"/>
<field name="global" eval="True"/>
<field name="domain_force">
[('company_id', 'in', company_ids)]
</field>
</record>
</odoo>

View file

@ -4,7 +4,7 @@
<menuitem id="estate_property_menu" name="Advertisements" parent="estate_menu_root" />
<menuitem id="estate_property_menu_action" action="estate_property_action" parent="estate_property_menu"/>
<menuitem id="estate_property_menu_settings" name="Settings" parent="estate_menu_root" />
<menuitem id="estate_property_menu_settings" name="Settings" parent="estate_menu_root" groups="estate.estate_group_manager"/>
<menuitem id="estate_property_type_menu_action" action="estate_property_type_action" name="Property Types" parent="estate_property_menu_settings"/>
<menuitem id="estate_property_tag_menu_action" action="estate_property_tag_action" name="Property Tags" parent="estate_property_menu_settings"/>
</odoo>

View file

@ -13,6 +13,7 @@
<field name="arch" type="xml">
<tree string="Properties" decoration-success="state in ('offer_accepted', 'offer_received')" decoration-muted="state == 'sold'" decoration-bf="state == 'offer_accepted'" >
<field name="name" />
<field name="company_id" invisible="1" />
<field name="property_type_id" />
<field name="tag_ids" widget="many2many_tags" options="{'color_field': 'color'}" />
<field name="postcode" />
@ -41,6 +42,7 @@
<field name="name" />
</h1>
<field name="tag_ids" widget="many2many_tags" options="{'color_field': 'color'}" />
<field name="company_id" invisible="1" />
<group>
<group>
<field name="property_type_id" can_create="False" can_write="False" options="{'no_create': true, 'no_open': true}" />
@ -88,6 +90,7 @@
<field name="arch" type="xml">
<search>
<field name="name" string="Title" />
<field name="company_id" invisible="1" />
<field name="postcode"/>
<field name="property_type_id" />
<field name="bedrooms"/>
@ -111,6 +114,7 @@
<t t-name="kanban-box">
<div class="oe_kanban_global_click">
<h3><field name="name"/></h3>
<field name="company_id" invisible="1" />
<p>
Expected price : <field name="expected_price" /><br />
<t t-if="record.best_price.raw_value > 0.00">Best offer : <field name="best_price" /><br /></t>

View file

@ -9,6 +9,9 @@ class EstateProperty(models.Model):
"""
Create an invoice when a property is sold
"""
self.check_access_rights('write')
self.check_access_rule('write')
# Run the parent method first so that nothing is
# invoiced if an error is raised
parent = super().action_sold()
@ -33,6 +36,6 @@ class EstateProperty(models.Model):
],
}
# Create the invoice
self.env['account.move'].create(vals)
self.env['account.move'].sudo().create(vals)
return parent