bemade-addons/bemade_sports_clinic/security/sports_clinic_rules.xml
2023-11-06 22:26:30 -05:00

15 lines
675 B
XML

<?xml version="1.0" encoding="UTF-8" ?>
<odoo>
<data noupdate="1">
<!-- Refuse access to patient records that are not part of staff user's teams -->
<record id="restrict_team_access_to_team_players" model="ir.rule">
<field name="name">Restrict Team Staff Access to Their Players Only</field>
<field name="model_id" ref="model_sports_patient"/>
<field name="groups" eval="[(6, 0, [ref('base.group_portal')])]"/>
<field name="domain_force">
[('id', 'in',
user.partner_id.team_staff_rel_ids.team_id.patient_ids.ids)]
</field>
</record>
</data>
</odoo>