Merge pull request #694 from espo-tony/10-base_import_csv_optional

[10.0][ADD] Module base_import_security_group
7 years ago · db4fdd09a1
20 changed files with 590 additions and 1 deletions
--- a/.travis.yml
+++ b/.travis.yml
@ -6,7 +6,8 @@ python:
  - "2.7"
 addons:
  postgresql: "9.2" # minimal postgresql version for the daterange method
  postgresql: "9.3" # minimal postgresql version for the base_import_security_group module
                    # more info: https://github.com/OCA/maintainer-quality-tools/issues/432
  apt:
    packages:
      - expect-dev  # provides unbuffer utility
@ -29,6 +30,13 @@ env:
 virtualenv:
  system_site_packages: true
 before_install:
 - "export PATH=$PWD/travis_phantomjs/phantomjs-2.1.1-linux-x86_64/bin:$PATH"
 - "if [ $(phantomjs --version) != '2.1.1' ]; then rm -rf $PWD/travis_phantomjs; mkdir -p $PWD/travis_phantomjs; fi"
 - "if [ $(phantomjs --version) != '2.1.1' ]; then wget https://assets.membergetmember.co/software/phantomjs-2.1.1-linux-x86_64.tar.bz2 -O $PWD/travis_phantomjs/phantomjs-2.1.1-linux-x86_64.tar.bz2; fi"
 - "if [ $(phantomjs --version) != '2.1.1' ]; then tar -xvf $PWD/travis_phantomjs/phantomjs-2.1.1-linux-x86_64.tar.bz2 -C $PWD/travis_phantomjs; fi"
 - "phantomjs --version"
 install:
  - git clone https://github.com/OCA/maintainer-quality-tools.git ${HOME}/maintainer-quality-tools
  - export PATH=${HOME}/maintainer-quality-tools/travis:${PATH}
--- a/base_import_security_group/README.rst
+++ b/base_import_security_group/README.rst
@ -0,0 +1,62 @@
 .. image:: https://img.shields.io/badge/licence-AGPL--3-blue.svg
   :target: http://www.gnu.org/licenses/agpl
   :alt: License: AGPL-3
 ===============================================
 Group-based permissions for importing CSV files 
 ===============================================
 This module makes importing data from CSV and Excel files optional for each user,
 allowing it only for those users belonging to a specific group.
 Any other user not belonging to such group will not have the "Import" button
 available anywhere. The action will even be blocked internally (to prevent
 XMLRPC access, for example).
 Usage
 =====
 To allow a user to import data from CSV and Excel files, just follow this steps:
 * Go to *Settings/Users/Users* menu.
 * Enter the user you want to allow.
 * Within the "Access Rights" tab and "Technical Settings" group, check the
  option "Allow importing CSV/Excel files".
 Bug Tracker
 ===========
 Bugs are tracked on `GitHub Issues
 <https://github.com/OCA/server-tools/issues>`_. In case of trouble, please
 check there if your issue has already been reported. If you spotted it first,
 help us smash it by providing detailed and welcomed feedback.
 Credits
 =======
 Contributors
 ------------
 * Alejandro Santana <alejandrosantana@anubia.es>
 * Antonio Esposito <a.esposito@onestein.nl>
 Do not contact contributors directly about support or help with technical issues.
 Maintainer
 ----------
 .. image:: https://odoo-community.org/logo.png
   :alt: Odoo Community Association
   :target: https://odoo-community.org
 This module is maintained by the OCA.
 OCA, or the Odoo Community Association, is a nonprofit organization whose
 mission is to support the collaborative development of Odoo features and
 promote its widespread use.
 To contribute to this module, please visit https://odoo-community.org.
 Icon
 ----
 Iconic fonts used in module icon are Font Awesome: http://fontawesome.io/
--- a/base_import_security_group/init.py
+++ b/base_import_security_group/init.py
@ -0,0 +1,6 @@
 # -*- coding: utf-8 -*-
 # Copyright 2015 Anubía, soluciones en la nube,SL (http://www.anubia.es)
 # Copyright 2017 Onestein (http://www.onestein.eu)
 # License AGPL-3.0 or later (http://www.gnu.org/licenses/agpl.html).
 from . import models
--- a/base_import_security_group/manifest.py
+++ b/base_import_security_group/manifest.py
@ -0,0 +1,26 @@
 # -*- coding: utf-8 -*-
 # Copyright 2015 Anubía, soluciones en la nube,SL (http://www.anubia.es)
 # Copyright 2017 Onestein (http://www.onestein.eu)
 # License AGPL-3.0 or later (http://www.gnu.org/licenses/agpl.html).
 {
    'name': 'Optional CSV import',
    'version': '10.0.1.0.0',
    'category': 'Server tools',
    'summary': 'Group-based permissions for importing CSV files',
    'license': 'AGPL-3',
    'author': 'Odoo Community Association (OCA), '
              'Alejandro Santana <alejandrosantana@anubia.es>, '
              'Onestein',
    'maintainer': 'Odoo Community Association (OCA)',
    'website': 'http://odoo-community.org',
    'depends': [
        'web',
        'base_import',
    ],
    'data': [
        'security/base_import_security_group_security.xml',
        'views/base_import.xml',
    ],
    'installable': True,
 }
--- a/base_import_security_group/i18n/ca.po
+++ b/base_import_security_group/i18n/ca.po
@ -0,0 +1,21 @@
 # Translation of Odoo Server.
 # This file contains the translation of the following modules:
 #	* base_import_security_group
 #
 msgid ""
 msgstr ""
 "Project-Id-Version: Odoo Server 10.0\n"
 "Report-Msgid-Bugs-To: \n"
 "POT-Creation-Date: 2015-08-06 18:37+0000\n"
 "PO-Revision-Date: 2015-08-06 18:37+0000\n"
 "Last-Translator: <>\n"
 "Language-Team: \n"
 "MIME-Version: 1.0\n"
 "Content-Type: text/plain; charset=UTF-8\n"
 "Content-Transfer-Encoding: \n"
 "Plural-Forms: \n"
 #. module: base_import_security_group
 #: model:res.groups,name:base_import_security_group.group_import_csv
 msgid "Import CSV files"
 msgstr "Importar arxius CSV"
--- a/base_import_security_group/i18n/es.po
+++ b/base_import_security_group/i18n/es.po
@ -0,0 +1,21 @@
 # Translation of Odoo Server.
 # This file contains the translation of the following modules:
 #	* base_import_security_group
 #
 msgid ""
 msgstr ""
 "Project-Id-Version: Odoo Server 10.0\n"
 "Report-Msgid-Bugs-To: \n"
 "POT-Creation-Date: 2015-08-06 18:37+0000\n"
 "PO-Revision-Date: 2015-08-06 18:37+0000\n"
 "Last-Translator: <>\n"
 "Language-Team: \n"
 "MIME-Version: 1.0\n"
 "Content-Type: text/plain; charset=UTF-8\n"
 "Content-Transfer-Encoding: \n"
 "Plural-Forms: \n"
 #. module: base_import_security_group
 #: model:res.groups,name:base_import_security_group.group_import_csv
 msgid "Import CSV files"
 msgstr "Importar archivos CSV"
--- a/base_import_security_group/i18n/fr.po
+++ b/base_import_security_group/i18n/fr.po
@ -0,0 +1,21 @@
 # Translation of Odoo Server.
 # This file contains the translation of the following modules:
 #	* base_import_security_group
 #
 msgid ""
 msgstr ""
 "Project-Id-Version: Odoo Server 10.0\n"
 "Report-Msgid-Bugs-To: \n"
 "POT-Creation-Date: 2015-08-06 18:37+0000\n"
 "PO-Revision-Date: 2015-08-06 18:37+0000\n"
 "Last-Translator: <>\n"
 "Language-Team: \n"
 "MIME-Version: 1.0\n"
 "Content-Type: text/plain; charset=UTF-8\n"
 "Content-Transfer-Encoding: \n"
 "Plural-Forms: \n"
 #. module: base_import_security_group
 #: model:res.groups,name:base_import_security_group.group_import_csv
 msgid "Import CSV files"
 msgstr "Importation de fichiers CSV"
--- a/base_import_security_group/i18n/gl.po
+++ b/base_import_security_group/i18n/gl.po
@ -0,0 +1,21 @@
 # Translation of Odoo Server.
 # This file contains the translation of the following modules:
 #	* base_import_security_group
 #
 msgid ""
 msgstr ""
 "Project-Id-Version: Odoo Server 10.0\n"
 "Report-Msgid-Bugs-To: \n"
 "POT-Creation-Date: 2015-08-06 18:37+0000\n"
 "PO-Revision-Date: 2015-08-06 18:37+0000\n"
 "Last-Translator: <>\n"
 "Language-Team: \n"
 "MIME-Version: 1.0\n"
 "Content-Type: text/plain; charset=UTF-8\n"
 "Content-Transfer-Encoding: \n"
 "Plural-Forms: \n"
 #. module: base_import_security_group
 #: model:res.groups,name:base_import_security_group.group_import_csv
 msgid "Import CSV files"
 msgstr "Importar arquivos CSV"
--- a/base_import_security_group/i18n/it.po
+++ b/base_import_security_group/i18n/it.po
@ -0,0 +1,21 @@
 # Translation of Odoo Server.
 # This file contains the translation of the following modules:
 #	* base_import_security_group
 #
 msgid ""
 msgstr ""
 "Project-Id-Version: Odoo Server 10.0\n"
 "Report-Msgid-Bugs-To: \n"
 "POT-Creation-Date: 2015-08-06 18:37+0000\n"
 "PO-Revision-Date: 2015-08-06 18:37+0000\n"
 "Last-Translator: <>\n"
 "Language-Team: \n"
 "MIME-Version: 1.0\n"
 "Content-Type: text/plain; charset=UTF-8\n"
 "Content-Transfer-Encoding: \n"
 "Plural-Forms: \n"
 #. module: base_import_security_group
 #: model:res.groups,name:base_import_security_group.group_import_csv
 msgid "Import CSV files"
 msgstr "Importazione di file CSV"
--- a/base_import_security_group/i18n/pt.po
+++ b/base_import_security_group/i18n/pt.po
@ -0,0 +1,21 @@
 # Translation of Odoo Server.
 # This file contains the translation of the following modules:
 #	* base_import_security_group
 #
 msgid ""
 msgstr ""
 "Project-Id-Version: Odoo Server 10.0\n"
 "Report-Msgid-Bugs-To: \n"
 "POT-Creation-Date: 2015-08-06 18:37+0000\n"
 "PO-Revision-Date: 2015-08-06 18:37+0000\n"
 "Last-Translator: <>\n"
 "Language-Team: \n"
 "MIME-Version: 1.0\n"
 "Content-Type: text/plain; charset=UTF-8\n"
 "Content-Transfer-Encoding: \n"
 "Plural-Forms: \n"
 #. module: base_import_security_group
 #: model:res.groups,name:base_import_security_group.group_import_csv
 msgid "Import CSV files"
 msgstr "Importar arquivos CSV"
--- a/base_import_security_group/i18n/sk.po
+++ b/base_import_security_group/i18n/sk.po
@ -0,0 +1,21 @@
 # Translation of Odoo Server.
 # This file contains the translation of the following modules:
 #	* base_import_security_group
 #
 msgid ""
 msgstr ""
 "Project-Id-Version: Odoo Server 10.0\n"
 "Report-Msgid-Bugs-To: \n"
 "POT-Creation-Date: 2015-08-06 18:37+0000\n"
 "PO-Revision-Date: 2015-08-06 18:37+0000\n"
 "Last-Translator: <>\n"
 "Language-Team: \n"
 "MIME-Version: 1.0\n"
 "Content-Type: text/plain; charset=UTF-8\n"
 "Content-Transfer-Encoding: \n"
 "Plural-Forms: \n"
 #. module: base_import_security_group
 #: model:res.groups,name:base_import_security_group.group_import_csv
 msgid "Import CSV files"
 msgstr "Importovať súbory CSV"
--- a/base_import_security_group/models/init.py
+++ b/base_import_security_group/models/init.py
@ -0,0 +1,6 @@
 # -*- coding: utf-8 -*-
 # Copyright 2015 Anubía, soluciones en la nube,SL (http://www.anubia.es)
 # Copyright 2017 Onestein (http://www.onestein.eu)
 # License AGPL-3.0 or later (http://www.gnu.org/licenses/agpl.html).
 from . import models
--- a/base_import_security_group/models/models.py
+++ b/base_import_security_group/models/models.py
@ -0,0 +1,39 @@
 # -*- coding: utf-8 -*-
 # Copyright 2015 Anubía, soluciones en la nube,SL (http://www.anubia.es)
 # Copyright 2017 Onestein (http://www.onestein.eu)
 # License AGPL-3.0 or later (http://www.gnu.org/licenses/agpl.html).
 import logging
 from odoo import api, models
 _logger = logging.getLogger(__name__)
 class Base(models.AbstractModel):
    _inherit = 'base'
    @api.model
    def load(self, fields, data):
        '''Overriding this method we only allow its execution
        if current user belongs to the group allowed for CSV data import.
        An exception is raised otherwise, and also log the import attempt.
        '''
        current_user = self.env.user
        allowed_group = 'base_import_security_group.group_import_csv'
        allowed_group_id = self.env.ref(
            allowed_group,
            raise_if_not_found=False
        )
        if not allowed_group_id or current_user.has_group(allowed_group):
            res = super(Base, self).load(fields=fields, data=data)
        else:
            msg = ('User (ID: %s) is not allowed to import data '
                   'in model %s.') % (self.env.uid, self._name)
            _logger.info(msg)
            messages = []
            info = {}
            messages.append(
                dict(info, type='error', message=msg, moreinfo=None))
            res = {'ids': None, 'messages': messages}
        return res
--- a/base_import_security_group/security/base_import_security_group_security.xml
+++ b/base_import_security_group/security/base_import_security_group_security.xml
@ -0,0 +1,11 @@
 <?xml version="1.0" encoding="utf-8"?>
 <odoo>
    <!-- GROUPS -->
    <record id="group_import_csv" model="res.groups">
        <field name="name">Import CSV/Excel files</field>
        <field name="category_id" ref="base.module_category_hidden"/>
        <field name="users" eval="[(4, ref('base.user_root'))]"/>
    </record>
 </odoo>
--- a/base_import_security_group/static/description/icon.png
+++ b/base_import_security_group/static/description/icon.png
--- a/base_import_security_group/static/description/icon.svg
+++ b/base_import_security_group/static/description/icon.svg
@ -0,0 +1,168 @@
 <?xml version="1.0" encoding="UTF-8" standalone="no"?>
 <!-- Created with Inkscape (http://www.inkscape.org/) -->
 <svg
   xmlns:dc="http://purl.org/dc/elements/1.1/"
   xmlns:cc="http://creativecommons.org/ns#"
   xmlns:rdf="http://www.w3.org/1999/02/22-rdf-syntax-ns#"
   xmlns:svg="http://www.w3.org/2000/svg"
   xmlns="http://www.w3.org/2000/svg"
   xmlns:xlink="http://www.w3.org/1999/xlink"
   xmlns:sodipodi="http://sodipodi.sourceforge.net/DTD/sodipodi-0.dtd"
   xmlns:inkscape="http://www.inkscape.org/namespaces/inkscape"
   id="svg2"
   version="1.1"
   inkscape:version="0.48.4 r9939"
   width="128"
   height="128"
   sodipodi:docname="icon.svg"
   inkscape:export-filename="icon.png"
   inkscape:export-xdpi="90"
   inkscape:export-ydpi="90">
  <metadata
     id="metadata8">
    <rdf:RDF>
      <cc:Work
         rdf:about="">
        <dc:format>image/svg+xml</dc:format>
        <dc:type
           rdf:resource="http://purl.org/dc/dcmitype/StillImage" />
        <dc:title />
      </cc:Work>
    </rdf:RDF>
  </metadata>
  <defs
     id="defs6">
    <linearGradient
       id="linearGradient3779">
      <stop
         style="stop-color:#ff6600;stop-opacity:1;"
         offset="0"
         id="stop3781" />
      <stop
         style="stop-color:#ffcc00;stop-opacity:1;"
         offset="1"
         id="stop3783" />
    </linearGradient>
    <linearGradient
       id="linearGradient3798">
      <stop
         style="stop-color:#99cc00;stop-opacity:1;"
         offset="0"
         id="stop3800" />
      <stop
         style="stop-color:#669900;stop-opacity:1;"
         offset="1"
         id="stop3802" />
    </linearGradient>
    <linearGradient
       inkscape:collect="always"
       xlink:href="#linearGradient3798"
       id="linearGradient3804"
       x1="64"
       y1="124"
       x2="64"
       y2="4"
       gradientUnits="userSpaceOnUse"
       gradientTransform="translate(-140,0)" />
    <linearGradient
       inkscape:collect="always"
       xlink:href="#linearGradient3798"
       id="linearGradient4053"
       gradientUnits="userSpaceOnUse"
       x1="64"
       y1="124"
       x2="64"
       y2="4" />
    <linearGradient
       inkscape:collect="always"
       xlink:href="#linearGradient3779"
       id="linearGradient3874"
       x1="64"
       y1="136"
       x2="64"
       y2="8"
       gradientUnits="userSpaceOnUse" />
  </defs>
  <sodipodi:namedview
     pagecolor="#ffffff"
     bordercolor="#666666"
     borderopacity="1"
     objecttolerance="10"
     gridtolerance="10"
     guidetolerance="10"
     inkscape:pageopacity="0"
     inkscape:pageshadow="2"
     inkscape:window-width="1920"
     inkscape:window-height="1025"
     id="namedview4"
     showgrid="false"
     inkscape:zoom="1.4142136"
     inkscape:cx="24.182947"
     inkscape:cy="79.115464"
     inkscape:window-x="-2"
     inkscape:window-y="-3"
     inkscape:window-maximized="1"
     inkscape:current-layer="svg2"
     inkscape:snap-bbox="false"
     inkscape:bbox-paths="true"
     inkscape:bbox-nodes="true"
     inkscape:snap-bbox-edge-midpoints="true"
     inkscape:snap-bbox-midpoints="true"
     inkscape:object-paths="true"
     inkscape:snap-midpoints="true"
     inkscape:snap-object-midpoints="true"
     inkscape:snap-center="true"
     inkscape:snap-page="false"
     inkscape:snap-smooth-nodes="true"
     inkscape:object-nodes="true"
     inkscape:snap-intersection-paths="true"
     inkscape:snap-grids="false"
     showguides="true"
     inkscape:guide-bbox="true"
     borderlayer="true"
     inkscape:snap-nodes="false"
     inkscape:snap-global="true">
    <inkscape:grid
       type="xygrid"
       id="grid2984"
       empspacing="4"
       visible="true"
       enabled="true"
       snapvisiblegridlinesonly="true"
       dotted="false" />
  </sodipodi:namedview>
  <rect
     style="fill:#ff7f2a;fill-opacity:1;stroke:none"
     id="rect3858"
     width="128"
     height="128"
     x="-128"
     y="0"
     transform="matrix(0,-1,1,0,0,0)" />
  <text
     xml:space="preserve"
     style="font-size:40px;font-style:normal;font-weight:normal;line-height:125%;letter-spacing:0px;word-spacing:0px;fill:#000000;fill-opacity:1;stroke:none;font-family:Sans"
     x="-184.20132"
     y="6.0240803"
     id="text2995"
     sodipodi:linespacing="125%"><tspan
       sodipodi:role="line"
       id="tspan2997"
       x="-184.20132"
       y="6.0240803" /></text>
  <path
     style="fill:#c87137;fill-opacity:1;stroke:none"
     d="M 48.46875 39.1875 L 0 87.65625 L 0 128 L 76.78125 128 L 102.90625 101.875 L 99.53125 98.5 L 101.9375 96.0625 L 92.71875 86.8125 L 90.28125 89.25 L 80.09375 79.0625 L 80.0625 79.125 L 78.96875 78.03125 L 68.09375 88.90625 L 69.1875 89.96875 L 64.75 94.40625 L 59.90625 89.53125 L 72.34375 77.09375 L 67.6875 72.4375 L 87.71875 52.40625 L 78.5 43.15625 L 65.46875 56.1875 L 48.46875 39.1875 z "
     id="rect3087" />
  <path
     id="path3027"
     d="m 85.85809,93.664544 q 0,-1.26855 -0.92703,-2.195567 -0.92701,-0.927017 -2.19556,-0.927017 -1.26855,0 -2.19557,0.927017 -0.92702,0.927017 -0.92702,2.195567 0,1.268548 0.92702,2.195566 0.92702,0.927017 2.19557,0.927017 1.26855,0 2.19556,-0.927017 0.92703,-0.927018 0.92703,-2.195566 z m 12.49033,0 q 0,-1.26855 -0.92702,-2.195567 -0.92702,-0.927017 -2.19556,-0.927017 -1.26856,0 -2.19557,0.927017 -0.92702,0.927017 -0.92702,2.195567 0,1.268548 0.92702,2.195566 0.92701,0.927017 2.19557,0.927017 1.26854,0 2.19556,-0.927017 0.92702,-0.927018 0.92702,-2.195566 z M 104.59359,82.7355 v 15.612919 q 0,1.951621 -1.36614,3.317751 -1.36613,1.36613 -3.31774,1.36613 H 28.09028 q -1.95161,0 -3.31774,-1.36613 -1.36613,-1.36613 -1.36613,-3.317751 V 82.7355 q 0,-1.951615 1.36613,-3.317745 1.36613,-1.36613 3.31774,-1.36613 h 20.83349 q 1.0246,2.73226 3.43972,4.488715 2.41512,1.756452 5.39134,1.756452 h 12.49033 q 2.97621,0 5.39134,-1.756452 2.41512,-1.756455 3.43972,-4.488715 h 20.83349 q 1.95161,0 3.31774,1.36613 1.36614,1.36613 1.36614,3.317745 z M 88.73671,51.119343 q -0.82943,1.951614 -2.87862,1.951614 H 73.36775 v 21.858085 q 0,1.26855 -0.92702,2.195567 -0.92702,0.927017 -2.19557,0.927017 H 57.75483 q -1.26855,0 -2.19557,-0.927017 -0.92701,-0.927017 -0.92701,-2.195567 V 53.070957 H 42.14191 q -2.04919,0 -2.87863,-1.951614 -0.82944,-1.902825 0.68306,-3.366536 L 61.80443,25.894722 Q 62.68265,24.967705 64,24.967705 q 1.31733,0 2.19556,0.927017 l 21.85809,21.858085 q 1.5125,1.463711 0.68306,3.366536 z"
     inkscape:connector-curvature="0"
     style="fill:#ffffff" />
  <path
     id="path3016"
     d="m 66.979191,59.343527 v 4.895685 q 0,0.326379 -0.244778,0.571165 -0.244797,0.244783 -0.571181,0.244783 h -4.895668 q -0.326383,0 -0.571181,-0.244783 -0.244777,-0.244786 -0.244777,-0.571165 v -4.895685 q 0,-0.32638 0.244777,-0.571163 0.244798,-0.244785 0.571181,-0.244785 h 4.895668 q 0.326384,0 0.571181,0.244785 0.244778,0.244783 0.244778,0.571163 z M 73.42517,47.104314 q 0,1.101528 -0.316172,2.060266 -0.316173,0.958739 -0.713951,1.560501 -0.397778,0.601761 -1.121941,1.213721 -0.724141,0.611962 -1.172913,0.887343 -0.448772,0.275383 -1.244329,0.724154 -0.836339,0.469171 -1.397309,1.325916 -0.56097,0.856745 -0.56097,1.366711 0,0.346777 -0.244778,0.662957 -0.244777,0.316181 -0.57116,0.316181 h -4.895689 q -0.305982,0 -0.520167,-0.377377 -0.214185,-0.377375 -0.214185,-0.76495 v -0.917942 q 0,-1.69309 1.325914,-3.192395 1.325915,-1.499303 2.917008,-2.213257 1.203525,-0.550764 1.713502,-1.142326 0.509956,-0.591562 0.509956,-1.5503 0,-0.856745 -0.948537,-1.509503 -0.948538,-0.652759 -2.192846,-0.652759 -1.325915,0 -2.203057,0.591562 -0.713971,0.509966 -2.182676,2.345849 -0.265178,0.326379 -0.632345,0.326379 -0.244797,0 -0.509976,-0.163189 L 54.903171,45.45202 q -0.265199,-0.203986 -0.316193,-0.509968 -0.05099,-0.30598 0.112198,-0.571163 3.263793,-5.426052 9.464994,-5.426052 1.631896,0 3.284194,0.632361 1.652298,0.632359 2.978212,1.69309 1.325915,1.060732 2.162254,2.600834 0.83634,1.540099 0.83634,3.233192 z"
     inkscape:connector-curvature="0"
     style="fill:#c87137" />
 </svg>
--- a/base_import_security_group/static/src/js/import.js
+++ b/base_import_security_group/static/src/js/import.js
@ -0,0 +1,30 @@
 odoo.define('web.ListImport', function (require) {
    "use strict";
    var core = require('web.core');
    var ListView = require('web.ListView');
    var Model = require('web.Model');
    ListView.prototype.defaults.import_enabled = false;
    ListView.include(/** @lends instance.web.ListView# */{
        load_list: function (data, grouped) {
            var self = this;
            var Users = new Model('res.users');
            var result = this._super.apply(this, arguments);
            Users.call('has_group', ['base_import_security_group.group_import_csv'])
                .then(function (result) {
                    var import_enabled = result;
                    self.options.import_enabled = import_enabled;
                    if (import_enabled === false) {
                        if (self.$buttons) {
                            self.$buttons.find('.o_button_import').remove();
                        }
                    }
                });
            return result;
        }
    });
 });
--- a/base_import_security_group/tests/init.py
+++ b/base_import_security_group/tests/init.py
@ -0,0 +1,5 @@
 # -*- coding: utf-8 -*-
 # Copyright 2017 Onestein (http://www.onestein.eu)
 # License AGPL-3.0 or later (http://www.gnu.org/licenses/agpl.html).
 from . import test_base_import_security_group
--- a/base_import_security_group/tests/test_base_import_security_group.py
+++ b/base_import_security_group/tests/test_base_import_security_group.py
@ -0,0 +1,71 @@
 # -*- coding: utf-8 -*-
 # Copyright 2017 Onestein (http://www.onestein.eu)
 # License AGPL-3.0 or later (http://www.gnu.org/licenses/agpl.html).
 from odoo.tests import common
 class TestImportSecurityGroup(common.HttpCase):
    def setUp(self):
        super(TestImportSecurityGroup, self).setUp()
        self.Access = self.env['ir.model.access']
        self.user_test = self.env.ref('base.user_demo')
    def has_button_import(self, falsify=False, user=None):
        """
        Verify that the button is either visible or invisible.
        After the adjacent button is loaded, allow for a second for
        the asynchronous call to finish and update the visibility """
        code = """
        window.setTimeout(function () {
            if (%s$('.o_button_import').length) {
                console.log('ok');
            } else {
                console.log('error');
            };
        }, 1000);
        """ % ('!' if falsify else '')
        action = self.env.ref('base.action_partner_category_form').id
        link = '/web#action=%s' % action
        self.phantom_js(
            link, code, "$('button.o_list_button_add').length",
            login=user.login)
    def test_01_load(self):
        """ Admin user can import data, but the demo user cannot """
        fields = (
            'id',
            'name',
            'perm_read',
            'perm_write',
            'perm_create',
            'perm_unlink',
        )
        data = [
            ('access_res_users_test', 'res.users test', '1', '0', '0', '0',),
            ('access_res_users_test2', 'res.users test2', '1', '1', '1', '1'),
        ]
        self.has_button_import(user=self.env.user)
        res = self.Access.load(fields, data)
        self.assertEqual(res['ids'], False)
        self.assertEqual(len(res['messages']), 2)
        self.assertEqual(
            res['messages'][0]['message'],
            "Missing required value for the field 'Object' (model_id)")
        self.assertEqual(
            res['messages'][1]['message'],
            "Missing required value for the field 'Object' (model_id)")
        self.has_button_import(falsify=True, user=self.user_test)
        res2 = self.Access.sudo(self.user_test).load(fields, data)
        self.assertEqual(res2['ids'], None)
        self.assertEqual(len(res2['messages']), 1)
        self.assertEqual(
            res2['messages'][0]['message'],
            'User (ID: %s) is not allowed to import data in '
            'model ir.model.access.' % self.user_test.id)
--- a/base_import_security_group/views/base_import.xml
+++ b/base_import_security_group/views/base_import.xml
@ -0,0 +1,10 @@
 <?xml version="1.0" encoding="UTF-8"?>
 <odoo>
    <template id="assets_backend" name="base_import_security_group assets" inherit_id="web.assets_backend">
        <xpath expr="." position="inside">
            <script type="text/javascript" src="/base_import_security_group/static/src/js/import.js"></script>
        </xpath>
    </template>
 </odoo>