85 lines
4.4 KiB
XML
85 lines
4.4 KiB
XML
<?xml version="1.0" encoding="utf-8"?>
|
|
<odoo>
|
|
<data noupdate="0">
|
|
<!-- Security Groups -->
|
|
<record id="group_k8s_odoo_manager_user" model="res.groups">
|
|
<field name="name">Kubernetes Odoo Manager / User</field>
|
|
<field name="category_id" ref="base.module_category_administration"/>
|
|
<field name="implied_ids" eval="[(4, ref('base.group_user'))]"/>
|
|
</record>
|
|
|
|
<record id="group_k8s_odoo_manager_admin" model="res.groups">
|
|
<field name="name">Kubernetes Odoo Manager / Administrator</field>
|
|
<field name="category_id" ref="base.module_category_administration"/>
|
|
<field name="implied_ids" eval="[(4, ref('group_k8s_odoo_manager_user'))]"/>
|
|
<field name="users" eval="[(4, ref('base.user_admin'))]"/>
|
|
</record>
|
|
|
|
<!-- Record Rules -->
|
|
<record id="rule_k8s_cluster_admin" model="ir.rule">
|
|
<field name="name">Kubernetes Cluster: Administrators can see all clusters</field>
|
|
<field name="model_id" ref="model_k8s_cluster"/>
|
|
<field name="groups" eval="[(4, ref('group_k8s_odoo_manager_admin'))]"/>
|
|
<field name="domain_force">[(1, '=', 1)]</field>
|
|
<field name="perm_read" eval="True"/>
|
|
<field name="perm_write" eval="True"/>
|
|
<field name="perm_create" eval="True"/>
|
|
<field name="perm_unlink" eval="True"/>
|
|
</record>
|
|
|
|
<record id="rule_k8s_cluster_user" model="ir.rule">
|
|
<field name="name">Kubernetes Cluster: Users can only see active clusters</field>
|
|
<field name="model_id" ref="model_k8s_cluster"/>
|
|
<field name="groups" eval="[(4, ref('group_k8s_odoo_manager_user'))]"/>
|
|
<field name="domain_force">[('active', '=', True)]</field>
|
|
<field name="perm_read" eval="True"/>
|
|
<field name="perm_write" eval="False"/>
|
|
<field name="perm_create" eval="False"/>
|
|
<field name="perm_unlink" eval="False"/>
|
|
</record>
|
|
|
|
<record id="rule_k8s_odoo_instance_admin" model="ir.rule">
|
|
<field name="name">Kubernetes Odoo Instance: Administrators can see all instances</field>
|
|
<field name="model_id" ref="model_k8s_odoo_instance"/>
|
|
<field name="groups" eval="[(4, ref('group_k8s_odoo_manager_admin'))]"/>
|
|
<field name="domain_force">[(1, '=', 1)]</field>
|
|
<field name="perm_read" eval="True"/>
|
|
<field name="perm_write" eval="True"/>
|
|
<field name="perm_create" eval="True"/>
|
|
<field name="perm_unlink" eval="True"/>
|
|
</record>
|
|
|
|
<record id="rule_k8s_odoo_instance_user" model="ir.rule">
|
|
<field name="name">Kubernetes Odoo Instance: Users can only see active instances</field>
|
|
<field name="model_id" ref="model_k8s_odoo_instance"/>
|
|
<field name="groups" eval="[(4, ref('group_k8s_odoo_manager_user'))]"/>
|
|
<field name="domain_force">[('active', '=', True)]</field>
|
|
<field name="perm_read" eval="True"/>
|
|
<field name="perm_write" eval="False"/>
|
|
<field name="perm_create" eval="False"/>
|
|
<field name="perm_unlink" eval="False"/>
|
|
</record>
|
|
|
|
<record id="rule_k8s_odoo_upgrade_admin" model="ir.rule">
|
|
<field name="name">Kubernetes Odoo Upgrade: Administrators can see all upgrades</field>
|
|
<field name="model_id" ref="model_k8s_odoo_upgrade"/>
|
|
<field name="groups" eval="[(4, ref('group_k8s_odoo_manager_admin'))]"/>
|
|
<field name="domain_force">[(1, '=', 1)]</field>
|
|
<field name="perm_read" eval="True"/>
|
|
<field name="perm_write" eval="True"/>
|
|
<field name="perm_create" eval="True"/>
|
|
<field name="perm_unlink" eval="True"/>
|
|
</record>
|
|
|
|
<record id="rule_k8s_odoo_upgrade_user" model="ir.rule">
|
|
<field name="name">Kubernetes Odoo Upgrade: Users can only see upgrades for active instances</field>
|
|
<field name="model_id" ref="model_k8s_odoo_upgrade"/>
|
|
<field name="groups" eval="[(4, ref('group_k8s_odoo_manager_user'))]"/>
|
|
<field name="domain_force">[('instance_id.active', '=', True)]</field>
|
|
<field name="perm_read" eval="True"/>
|
|
<field name="perm_write" eval="False"/>
|
|
<field name="perm_create" eval="False"/>
|
|
<field name="perm_unlink" eval="False"/>
|
|
</record>
|
|
</data>
|
|
</odoo>
|