116 lines
4.6 KiB
Python
116 lines
4.6 KiB
Python
# -*- encoding: utf-8 -*-
|
|
##############################################################################
|
|
#
|
|
# OpenERP, Open Source Management Solution
|
|
# Copyright (C) 2011 Smile (<http://www.smile.fr>). All Rights Reserved
|
|
#
|
|
# This program is free software: you can redistribute it and/or modify
|
|
# it under the terms of the GNU General Public License as published by
|
|
# the Free Software Foundation, either version 3 of the License, or
|
|
# (at your option) any later version.
|
|
#
|
|
# This program is distributed in the hope that it will be useful,
|
|
# but WITHOUT ANY WARRANTY; without even the implied warranty of
|
|
# MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the
|
|
# GNU General Public License for more details.
|
|
#
|
|
# You should have received a copy of the GNU General Public License
|
|
# along with this program. If not, see <http://www.gnu.org/licenses/>.
|
|
#
|
|
##############################################################################
|
|
|
|
from openerp import api, fields, models
|
|
|
|
|
|
class IrModel(models.Model):
|
|
_inherit = 'ir.model'
|
|
|
|
@api.multi
|
|
def _get_first_level_relations(self):
|
|
field_obj = self.env['ir.model.fields']
|
|
field_recs = field_obj.search([
|
|
('ttype', 'in', ('many2one', 'one2many', 'many2many')),
|
|
('model_id', 'in', self.ids),
|
|
])
|
|
return self.search([('model', 'in', field_recs.mapped('relation'))])
|
|
|
|
@api.multi
|
|
def _get_relations(self, level=1):
|
|
"""
|
|
Return models linked to models given in params
|
|
If you don't want limit the relations level, indicate level = -1
|
|
"""
|
|
relations = self
|
|
while self and level:
|
|
self = self._get_first_level_relations() - relations
|
|
relations |= self
|
|
level -= 1
|
|
return self
|
|
|
|
|
|
class ResGroups(models.Model):
|
|
_inherit = 'res.groups'
|
|
|
|
active = fields.Boolean(default=True)
|
|
|
|
@api.multi
|
|
def _update_users(self, vals):
|
|
if vals.get('users'):
|
|
user_obj = self.env['res.users']
|
|
user_profiles = user_obj.browse()
|
|
for item in vals['users']:
|
|
user_ids = []
|
|
if item[0] == 6:
|
|
user_ids = item[2]
|
|
elif item[0] == 4:
|
|
user_ids = [item[1]]
|
|
users = user_obj.browse(user_ids)
|
|
user_profiles |= users.filtered(lambda user: user.user_profile)
|
|
user_profiles |= users.mapped('user_profile_id')
|
|
if user_profiles:
|
|
user_profiles._update_users_linked_to_profile()
|
|
|
|
@api.multi
|
|
def write(self, vals):
|
|
group_ids_to_unlink = []
|
|
group_ids_to_link = []
|
|
if vals.get('implied_ids'):
|
|
for item in vals['implied_ids']:
|
|
if item[0] == 6:
|
|
for group in self:
|
|
group_ids_to_unlink.extend(list(set(group.implied_ids.ids) - set(item[2])))
|
|
group_ids_to_link.extend(list(set(item[2]) - set(group.implied_ids.ids)))
|
|
elif item[0] == 5:
|
|
group_ids_to_unlink.extend(item[1])
|
|
elif item[0] == 4:
|
|
group_ids_to_link.append(item[1])
|
|
elif item[0] == 3:
|
|
group_ids_to_unlink.append(item[1])
|
|
res = super(ResGroups, self).write(vals)
|
|
self._update_users(vals)
|
|
if vals.get('implied_ids'):
|
|
# Update group for all users depending of this group, in order to add new implied groups to their groups
|
|
for group in self:
|
|
groups_id = [(4, subgroup_id) for subgroup_id in group_ids_to_link] + \
|
|
[(3, subgroup_id) for subgroup_id in group_ids_to_unlink]
|
|
group.with_context(active_test=False).users.write({'groups_id': groups_id})
|
|
return res
|
|
|
|
@api.multi
|
|
def button_complete_access_controls(self):
|
|
"""Create access rules for the first level relation models of access rule models not only in readonly"""
|
|
access_obj = self.env['ir.model.access']
|
|
for group in self:
|
|
models = group.model_access.filtered(lambda rule: rule.perm_write or rule.perm_create or rule.perm_unlink).mapped('model_id')
|
|
for model in models._get_relations(self._context.get('relations_level', 1)):
|
|
access_obj.create({
|
|
'name': '%s %s' % (model.model, group.name),
|
|
'model_id': model.id,
|
|
'group_id': group.id,
|
|
'perm_read': True,
|
|
'perm_write': False,
|
|
'perm_create': False,
|
|
'perm_unlink': False,
|
|
})
|
|
return True
|