standard model acces right fixation

golem_admin/security/ir.model.access.csv

@@ -4,3 +4,8 @@ access_res_users_group_golem_manager,Access Users GOLEM Manager,base.model_res_u
 access_res_groups_group_golem_manager,Access Groups GOLEM Manager,base.model_res_groups,golem_base.group_golem_manager,1,1,0,0
 access_ir_module_category_group_golem_manager,Access IR Module Category GOLEM Manager,base.model_ir_module_category,golem_base.group_golem_manager,1,0,0,0
 access_ir_ui_view_group_golem_manager,Access IR UI View GOLEM Manager,base.model_ir_ui_view,golem_base.group_golem_manager,1,1,0,0
+access_res_company_group_golem_auditor,Access Companies GOLEM Auditor,base.model_res_company,golem_base.group_golem_auditor,1,0,0,0
+access_res_users_group_golem_auditor,Access Users GOLEM Auditor,base.model_res_users,golem_base.group_golem_auditor,1,0,0,0
+access_res_groups_group_golem_auditor,Access Groups GOLEM Auditor,base.model_res_groups,golem_base.group_golem_auditor,1,0,0,0
+access_ir_module_category_group_golem_auditor,Access IR Module Category GOLEM Auditor,base.model_ir_module_category,golem_base.group_golem_auditor,1,0,0,0
+access_ir_ui_view_group_golem_auditor,Access IR UI View GOLEM Auditor,base.model_ir_ui_view,golem_base.group_golem_auditor,1,0,0,0

golem_admin/views/golem_admin_views.xml

@@ -23,16 +23,16 @@ along with this program.  If not, see <http://www.gnu.org/licenses/>.
     <!-- Menus -->
     <menuitem id="security_menu" name="Security" sequence="400"
       web_icon="golem_admin,static/description/icon.png"
-      groups="golem_base.group_golem_manager" />
+      groups="golem_base.group_golem_manager,golem_base.group_golem_auditor" />
     <menuitem id="res_groups_menu" action="base.action_res_groups"
       parent="security_menu" sequence="10"
-      groups="golem_base.group_golem_manager" />
+      groups="golem_base.group_golem_manager,golem_base.group_golem_auditor" />
     <menuitem id="res_users_menu" action="base.action_res_users"
       parent="security_menu" sequence="5"
-      groups="golem_base.group_golem_manager" />
+      groups="golem_base.group_golem_manager,golem_base.group_golem_auditor" />
     <menuitem id="res_company_menu" action="base.action_res_company_form"
       parent="security_menu" sequence="10"
-      groups="golem_base.group_golem_manager" />
+      groups="golem_base.group_golem_manager,golem_base.group_golem_auditor" />
 
   </data>
 </odoo>

golem_base/__manifest__.py

@@ -25,7 +25,7 @@
     'application': False,
     'installable': True,
     'depends': ['document', 'report', 'membership', 'contacts', 'mail',
-                'account_voucher', 'partner_firstname',
+                'account', 'account_voucher', 'partner_firstname',
                 'partner_contact_birthdate', 'partner_contact_gender',
                 'l10n_fr', 'l10n_fr_state', 'l10n_fr_department',
                 'l10n_fr_siret',
@@ -34,6 +34,7 @@
                 'web_responsive', 'backend_theme_v10',
                 'web_widget_x2many_2d_matrix'],
     'data': ['security/golem_security.xml',
+             'security/ir.model.access.csv',
              'views/menus.xml',
              'views/yaltik_base_assets.xml']
 }

golem_base/security/ir.model.access.csv

@@ -0,0 +1,7 @@
+id,name,model_id:id,group_id:id,perm_read,perm_write,perm_create,perm_unlink
+access_account_invoice_tax_auditor,Access Account Invoice Tax Auditor,account.model_account_invoice_tax,group_golem_auditor,1,0,0,0
+access_account_invoice_line_auditor,Access Account Invoice Line Auditor,account.model_account_invoice_line,group_golem_auditor,1,0,0,0
+access_account_move_line_auditor,Access Account Move Line Auditor,account.model_account_move_line,group_golem_auditor,1,0,0,0
+access_account_journal_auditor,Access Account Journal Auditor,account.model_account_journal,group_golem_auditor,1,0,0,0
+access_account_voucher_line_auditor,Access Account Voucher Line Auditor,account_voucher.model_account_voucher_line,group_golem_auditor,1,0,0,0
+access_account_account_tag_auditor,Access Account Account Tax Auditor,account.model_account_account_tag,group_golem_auditor,1,0,0,0

golem_base/views/menus.xml

@@ -28,6 +28,20 @@ along with this program.  If not, see <http://www.gnu.org/licenses/>.
       action="membership.action_membership_products"
       parent="membership.menu_marketing_config_association" sequence="20"
       groups="golem_base.group_golem_manager" />
+    <menuitem name="Invoicing"
+      id="account.menu_finance"
+      groups="account.group_account_user,account.group_account_manager,account.group_account_invoice,group_golem_auditor"
+      web_icon="account,static/description/icon.png"
+      sequence="40"/>
+    <menuitem id="account.menu_finance_configuration"
+      name="Configuration"
+      parent="account.menu_finance" sequence="15" groups="account.group_account_invoice,group_golem_auditor"/>
+
+    <menuitem id="account.account_account_menu"
+      name="Accounting"
+      parent="account.menu_finance_configuration"
+      sequence="2"
+      groups="account.group_account_invoice,group_golem_auditor"/>
     <!-- Members Analysis for managers only -->
     <record id="membership.menu_report_membership" model="ir.ui.menu">
       <field name="groups_id"

golem_payment/security/ir.model.access.csv

@@ -10,3 +10,5 @@ access_account_voucher_auditor,Access Account Voucher Auditor,account_voucher.mo
 access_res_partner_auditor,Access Res Partner Auditor,base.model_res_partner,golem_base.group_golem_auditor,1,0,0,0
 access_product_template_auditor,Access Product Template Auditor,product.model_product_template,golem_base.group_golem_auditor,1,0,0,0
 access_account_payment_auditor,Access Account Payment Auditor,account.model_account_payment,golem_base.group_golem_auditor,1,0,0,0
+access_payment_acquirer_auditor,Access Payment Acquirer Auditor,payment.model_payment_acquirer,golem_base.group_golem_auditor,1,0,0,0
+access_payment_transaction_auditor,Access Payment transaction Auditor,payment.model_payment_transaction,golem_base.group_golem_auditor,1,0,0,0

golem_resource_report/views/golem_resource_report_menu.xml

@@ -32,7 +32,8 @@ along with this program.  If not, see <http://www.gnu.org/licenses/>.
 
     <!-- Menus -->
     <menuitem id="report_menu" name="Report"
-      parent="golem_resource.golem_resource_menu" sequence="80" />
+      parent="golem_resource.golem_resource_menu" sequence="80"
+      groups="golem_base.group_golem_user" />
     <menuitem id="reservation_resource_day_menu"
       name="Reservations per resource and day" parent="report_menu"
       action="reservation_resource_day_action" sequence="10" />