mirror of https://github.com/muk-it/muk_base
MuK IT GmbH
6 years ago
29 changed files with 1994 additions and 0 deletions
-
619muk_security/LICENSE
-
27muk_security/__init__.py
-
54muk_security/__manifest__.py
-
9muk_security/doc/changelog.rst
-
106muk_security/doc/index.rst
-
27muk_security/models/__init__.py
-
43muk_security/models/access_groups.py
-
40muk_security/models/base.py
-
39muk_security/models/ir_model_access.py
-
39muk_security/models/ir_rule.py
-
126muk_security/models/mixins_access.py
-
275muk_security/models/mixins_access_groups.py
-
96muk_security/models/mixins_locking.py
-
43muk_security/models/res_users.py
-
20muk_security/patch/__init__.py
-
36muk_security/patch/api.py
-
3muk_security/security/ir.model.access.csv
-
45muk_security/security/security.xml
-
BINmuk_security/static/description/banner.png
-
BINmuk_security/static/description/icon.png
-
1muk_security/static/description/icon.svg
-
67muk_security/static/description/index.html
-
BINmuk_security/static/description/logo.png
-
21muk_security/tests/__init__.py
-
83muk_security/tests/test_access_groups.py
-
48muk_security/tests/test_suspend_security.py
-
20muk_security/tools/__init__.py
-
34muk_security/tools/security.py
-
73muk_security/views/access_groups.xml
@ -0,0 +1,619 @@ |
|||
GNU AFFERO GENERAL PUBLIC LICENSE |
|||
Version 3, 19 November 2007 |
|||
|
|||
Copyright (C) 2007 Free Software Foundation, Inc. <http://fsf.org/> |
|||
Everyone is permitted to copy and distribute verbatim copies |
|||
of this license document, but changing it is not allowed. |
|||
|
|||
Preamble |
|||
|
|||
The GNU Affero General Public License is a free, copyleft license for |
|||
software and other kinds of works, specifically designed to ensure |
|||
cooperation with the community in the case of network server software. |
|||
|
|||
The licenses for most software and other practical works are designed |
|||
to take away your freedom to share and change the works. By contrast, |
|||
our General Public Licenses are intended to guarantee your freedom to |
|||
share and change all versions of a program--to make sure it remains free |
|||
software for all its users. |
|||
|
|||
When we speak of free software, we are referring to freedom, not |
|||
price. Our General Public Licenses are designed to make sure that you |
|||
have the freedom to distribute copies of free software (and charge for |
|||
them if you wish), that you receive source code or can get it if you |
|||
want it, that you can change the software or use pieces of it in new |
|||
free programs, and that you know you can do these things. |
|||
|
|||
Developers that use our General Public Licenses protect your rights |
|||
with two steps: (1) assert copyright on the software, and (2) offer |
|||
you this License which gives you legal permission to copy, distribute |
|||
and/or modify the software. |
|||
|
|||
A secondary benefit of defending all users' freedom is that |
|||
improvements made in alternate versions of the program, if they |
|||
receive widespread use, become available for other developers to |
|||
incorporate. Many developers of free software are heartened and |
|||
encouraged by the resulting cooperation. However, in the case of |
|||
software used on network servers, this result may fail to come about. |
|||
The GNU General Public License permits making a modified version and |
|||
letting the public access it on a server without ever releasing its |
|||
source code to the public. |
|||
|
|||
The GNU Affero General Public License is designed specifically to |
|||
ensure that, in such cases, the modified source code becomes available |
|||
to the community. It requires the operator of a network server to |
|||
provide the source code of the modified version running there to the |
|||
users of that server. Therefore, public use of a modified version, on |
|||
a publicly accessible server, gives the public access to the source |
|||
code of the modified version. |
|||
|
|||
An older license, called the Affero General Public License and |
|||
published by Affero, was designed to accomplish similar goals. This is |
|||
a different license, not a version of the Affero GPL, but Affero has |
|||
released a new version of the Affero GPL which permits relicensing under |
|||
this license. |
|||
|
|||
The precise terms and conditions for copying, distribution and |
|||
modification follow. |
|||
|
|||
TERMS AND CONDITIONS |
|||
|
|||
0. Definitions. |
|||
|
|||
"This License" refers to version 3 of the GNU Affero General Public License. |
|||
|
|||
"Copyright" also means copyright-like laws that apply to other kinds of |
|||
works, such as semiconductor masks. |
|||
|
|||
"The Program" refers to any copyrightable work licensed under this |
|||
License. Each licensee is addressed as "you". "Licensees" and |
|||
"recipients" may be individuals or organizations. |
|||
|
|||
To "modify" a work means to copy from or adapt all or part of the work |
|||
in a fashion requiring copyright permission, other than the making of an |
|||
exact copy. The resulting work is called a "modified version" of the |
|||
earlier work or a work "based on" the earlier work. |
|||
|
|||
A "covered work" means either the unmodified Program or a work based |
|||
on the Program. |
|||
|
|||
To "propagate" a work means to do anything with it that, without |
|||
permission, would make you directly or secondarily liable for |
|||
infringement under applicable copyright law, except executing it on a |
|||
computer or modifying a private copy. Propagation includes copying, |
|||
distribution (with or without modification), making available to the |
|||
public, and in some countries other activities as well. |
|||
|
|||
To "convey" a work means any kind of propagation that enables other |
|||
parties to make or receive copies. Mere interaction with a user through |
|||
a computer network, with no transfer of a copy, is not conveying. |
|||
|
|||
An interactive user interface displays "Appropriate Legal Notices" |
|||
to the extent that it includes a convenient and prominently visible |
|||
feature that (1) displays an appropriate copyright notice, and (2) |
|||
tells the user that there is no warranty for the work (except to the |
|||
extent that warranties are provided), that licensees may convey the |
|||
work under this License, and how to view a copy of this License. If |
|||
the interface presents a list of user commands or options, such as a |
|||
menu, a prominent item in the list meets this criterion. |
|||
|
|||
1. Source Code. |
|||
|
|||
The "source code" for a work means the preferred form of the work |
|||
for making modifications to it. "Object code" means any non-source |
|||
form of a work. |
|||
|
|||
A "Standard Interface" means an interface that either is an official |
|||
standard defined by a recognized standards body, or, in the case of |
|||
interfaces specified for a particular programming language, one that |
|||
is widely used among developers working in that language. |
|||
|
|||
The "System Libraries" of an executable work include anything, other |
|||
than the work as a whole, that (a) is included in the normal form of |
|||
packaging a Major Component, but which is not part of that Major |
|||
Component, and (b) serves only to enable use of the work with that |
|||
Major Component, or to implement a Standard Interface for which an |
|||
implementation is available to the public in source code form. A |
|||
"Major Component", in this context, means a major essential component |
|||
(kernel, window system, and so on) of the specific operating system |
|||
(if any) on which the executable work runs, or a compiler used to |
|||
produce the work, or an object code interpreter used to run it. |
|||
|
|||
The "Corresponding Source" for a work in object code form means all |
|||
the source code needed to generate, install, and (for an executable |
|||
work) run the object code and to modify the work, including scripts to |
|||
control those activities. However, it does not include the work's |
|||
System Libraries, or general-purpose tools or generally available free |
|||
programs which are used unmodified in performing those activities but |
|||
which are not part of the work. For example, Corresponding Source |
|||
includes interface definition files associated with source files for |
|||
the work, and the source code for shared libraries and dynamically |
|||
linked subprograms that the work is specifically designed to require, |
|||
such as by intimate data communication or control flow between those |
|||
subprograms and other parts of the work. |
|||
|
|||
The Corresponding Source need not include anything that users |
|||
can regenerate automatically from other parts of the Corresponding |
|||
Source. |
|||
|
|||
The Corresponding Source for a work in source code form is that |
|||
same work. |
|||
|
|||
2. Basic Permissions. |
|||
|
|||
All rights granted under this License are granted for the term of |
|||
copyright on the Program, and are irrevocable provided the stated |
|||
conditions are met. This License explicitly affirms your unlimited |
|||
permission to run the unmodified Program. The output from running a |
|||
covered work is covered by this License only if the output, given its |
|||
content, constitutes a covered work. This License acknowledges your |
|||
rights of fair use or other equivalent, as provided by copyright law. |
|||
|
|||
You may make, run and propagate covered works that you do not |
|||
convey, without conditions so long as your license otherwise remains |
|||
in force. You may convey covered works to others for the sole purpose |
|||
of having them make modifications exclusively for you, or provide you |
|||
with facilities for running those works, provided that you comply with |
|||
the terms of this License in conveying all material for which you do |
|||
not control copyright. Those thus making or running the covered works |
|||
for you must do so exclusively on your behalf, under your direction |
|||
and control, on terms that prohibit them from making any copies of |
|||
your copyrighted material outside their relationship with you. |
|||
|
|||
Conveying under any other circumstances is permitted solely under |
|||
the conditions stated below. Sublicensing is not allowed; section 10 |
|||
makes it unnecessary. |
|||
|
|||
3. Protecting Users' Legal Rights From Anti-Circumvention Law. |
|||
|
|||
No covered work shall be deemed part of an effective technological |
|||
measure under any applicable law fulfilling obligations under article |
|||
11 of the WIPO copyright treaty adopted on 20 December 1996, or |
|||
similar laws prohibiting or restricting circumvention of such |
|||
measures. |
|||
|
|||
When you convey a covered work, you waive any legal power to forbid |
|||
circumvention of technological measures to the extent such circumvention |
|||
is effected by exercising rights under this License with respect to |
|||
the covered work, and you disclaim any intention to limit operation or |
|||
modification of the work as a means of enforcing, against the work's |
|||
users, your or third parties' legal rights to forbid circumvention of |
|||
technological measures. |
|||
|
|||
4. Conveying Verbatim Copies. |
|||
|
|||
You may convey verbatim copies of the Program's source code as you |
|||
receive it, in any medium, provided that you conspicuously and |
|||
appropriately publish on each copy an appropriate copyright notice; |
|||
keep intact all notices stating that this License and any |
|||
non-permissive terms added in accord with section 7 apply to the code; |
|||
keep intact all notices of the absence of any warranty; and give all |
|||
recipients a copy of this License along with the Program. |
|||
|
|||
You may charge any price or no price for each copy that you convey, |
|||
and you may offer support or warranty protection for a fee. |
|||
|
|||
5. Conveying Modified Source Versions. |
|||
|
|||
You may convey a work based on the Program, or the modifications to |
|||
produce it from the Program, in the form of source code under the |
|||
terms of section 4, provided that you also meet all of these conditions: |
|||
|
|||
a) The work must carry prominent notices stating that you modified |
|||
it, and giving a relevant date. |
|||
|
|||
b) The work must carry prominent notices stating that it is |
|||
released under this License and any conditions added under section |
|||
7. This requirement modifies the requirement in section 4 to |
|||
"keep intact all notices". |
|||
|
|||
c) You must license the entire work, as a whole, under this |
|||
License to anyone who comes into possession of a copy. This |
|||
License will therefore apply, along with any applicable section 7 |
|||
additional terms, to the whole of the work, and all its parts, |
|||
regardless of how they are packaged. This License gives no |
|||
permission to license the work in any other way, but it does not |
|||
invalidate such permission if you have separately received it. |
|||
|
|||
d) If the work has interactive user interfaces, each must display |
|||
Appropriate Legal Notices; however, if the Program has interactive |
|||
interfaces that do not display Appropriate Legal Notices, your |
|||
work need not make them do so. |
|||
|
|||
A compilation of a covered work with other separate and independent |
|||
works, which are not by their nature extensions of the covered work, |
|||
and which are not combined with it such as to form a larger program, |
|||
in or on a volume of a storage or distribution medium, is called an |
|||
"aggregate" if the compilation and its resulting copyright are not |
|||
used to limit the access or legal rights of the compilation's users |
|||
beyond what the individual works permit. Inclusion of a covered work |
|||
in an aggregate does not cause this License to apply to the other |
|||
parts of the aggregate. |
|||
|
|||
6. Conveying Non-Source Forms. |
|||
|
|||
You may convey a covered work in object code form under the terms |
|||
of sections 4 and 5, provided that you also convey the |
|||
machine-readable Corresponding Source under the terms of this License, |
|||
in one of these ways: |
|||
|
|||
a) Convey the object code in, or embodied in, a physical product |
|||
(including a physical distribution medium), accompanied by the |
|||
Corresponding Source fixed on a durable physical medium |
|||
customarily used for software interchange. |
|||
|
|||
b) Convey the object code in, or embodied in, a physical product |
|||
(including a physical distribution medium), accompanied by a |
|||
written offer, valid for at least three years and valid for as |
|||
long as you offer spare parts or customer support for that product |
|||
model, to give anyone who possesses the object code either (1) a |
|||
copy of the Corresponding Source for all the software in the |
|||
product that is covered by this License, on a durable physical |
|||
medium customarily used for software interchange, for a price no |
|||
more than your reasonable cost of physically performing this |
|||
conveying of source, or (2) access to copy the |
|||
Corresponding Source from a network server at no charge. |
|||
|
|||
c) Convey individual copies of the object code with a copy of the |
|||
written offer to provide the Corresponding Source. This |
|||
alternative is allowed only occasionally and noncommercially, and |
|||
only if you received the object code with such an offer, in accord |
|||
with subsection 6b. |
|||
|
|||
d) Convey the object code by offering access from a designated |
|||
place (gratis or for a charge), and offer equivalent access to the |
|||
Corresponding Source in the same way through the same place at no |
|||
further charge. You need not require recipients to copy the |
|||
Corresponding Source along with the object code. If the place to |
|||
copy the object code is a network server, the Corresponding Source |
|||
may be on a different server (operated by you or a third party) |
|||
that supports equivalent copying facilities, provided you maintain |
|||
clear directions next to the object code saying where to find the |
|||
Corresponding Source. Regardless of what server hosts the |
|||
Corresponding Source, you remain obligated to ensure that it is |
|||
available for as long as needed to satisfy these requirements. |
|||
|
|||
e) Convey the object code using peer-to-peer transmission, provided |
|||
you inform other peers where the object code and Corresponding |
|||
Source of the work are being offered to the general public at no |
|||
charge under subsection 6d. |
|||
|
|||
A separable portion of the object code, whose source code is excluded |
|||
from the Corresponding Source as a System Library, need not be |
|||
included in conveying the object code work. |
|||
|
|||
A "User Product" is either (1) a "consumer product", which means any |
|||
tangible personal property which is normally used for personal, family, |
|||
or household purposes, or (2) anything designed or sold for incorporation |
|||
into a dwelling. In determining whether a product is a consumer product, |
|||
doubtful cases shall be resolved in favor of coverage. For a particular |
|||
product received by a particular user, "normally used" refers to a |
|||
typical or common use of that class of product, regardless of the status |
|||
of the particular user or of the way in which the particular user |
|||
actually uses, or expects or is expected to use, the product. A product |
|||
is a consumer product regardless of whether the product has substantial |
|||
commercial, industrial or non-consumer uses, unless such uses represent |
|||
the only significant mode of use of the product. |
|||
|
|||
"Installation Information" for a User Product means any methods, |
|||
procedures, authorization keys, or other information required to install |
|||
and execute modified versions of a covered work in that User Product from |
|||
a modified version of its Corresponding Source. The information must |
|||
suffice to ensure that the continued functioning of the modified object |
|||
code is in no case prevented or interfered with solely because |
|||
modification has been made. |
|||
|
|||
If you convey an object code work under this section in, or with, or |
|||
specifically for use in, a User Product, and the conveying occurs as |
|||
part of a transaction in which the right of possession and use of the |
|||
User Product is transferred to the recipient in perpetuity or for a |
|||
fixed term (regardless of how the transaction is characterized), the |
|||
Corresponding Source conveyed under this section must be accompanied |
|||
by the Installation Information. But this requirement does not apply |
|||
if neither you nor any third party retains the ability to install |
|||
modified object code on the User Product (for example, the work has |
|||
been installed in ROM). |
|||
|
|||
The requirement to provide Installation Information does not include a |
|||
requirement to continue to provide support service, warranty, or updates |
|||
for a work that has been modified or installed by the recipient, or for |
|||
the User Product in which it has been modified or installed. Access to a |
|||
network may be denied when the modification itself materially and |
|||
adversely affects the operation of the network or violates the rules and |
|||
protocols for communication across the network. |
|||
|
|||
Corresponding Source conveyed, and Installation Information provided, |
|||
in accord with this section must be in a format that is publicly |
|||
documented (and with an implementation available to the public in |
|||
source code form), and must require no special password or key for |
|||
unpacking, reading or copying. |
|||
|
|||
7. Additional Terms. |
|||
|
|||
"Additional permissions" are terms that supplement the terms of this |
|||
License by making exceptions from one or more of its conditions. |
|||
Additional permissions that are applicable to the entire Program shall |
|||
be treated as though they were included in this License, to the extent |
|||
that they are valid under applicable law. If additional permissions |
|||
apply only to part of the Program, that part may be used separately |
|||
under those permissions, but the entire Program remains governed by |
|||
this License without regard to the additional permissions. |
|||
|
|||
When you convey a copy of a covered work, you may at your option |
|||
remove any additional permissions from that copy, or from any part of |
|||
it. (Additional permissions may be written to require their own |
|||
removal in certain cases when you modify the work.) You may place |
|||
additional permissions on material, added by you to a covered work, |
|||
for which you have or can give appropriate copyright permission. |
|||
|
|||
Notwithstanding any other provision of this License, for material you |
|||
add to a covered work, you may (if authorized by the copyright holders of |
|||
that material) supplement the terms of this License with terms: |
|||
|
|||
a) Disclaiming warranty or limiting liability differently from the |
|||
terms of sections 15 and 16 of this License; or |
|||
|
|||
b) Requiring preservation of specified reasonable legal notices or |
|||
author attributions in that material or in the Appropriate Legal |
|||
Notices displayed by works containing it; or |
|||
|
|||
c) Prohibiting misrepresentation of the origin of that material, or |
|||
requiring that modified versions of such material be marked in |
|||
reasonable ways as different from the original version; or |
|||
|
|||
d) Limiting the use for publicity purposes of names of licensors or |
|||
authors of the material; or |
|||
|
|||
e) Declining to grant rights under trademark law for use of some |
|||
trade names, trademarks, or service marks; or |
|||
|
|||
f) Requiring indemnification of licensors and authors of that |
|||
material by anyone who conveys the material (or modified versions of |
|||
it) with contractual assumptions of liability to the recipient, for |
|||
any liability that these contractual assumptions directly impose on |
|||
those licensors and authors. |
|||
|
|||
All other non-permissive additional terms are considered "further |
|||
restrictions" within the meaning of section 10. If the Program as you |
|||
received it, or any part of it, contains a notice stating that it is |
|||
governed by this License along with a term that is a further |
|||
restriction, you may remove that term. If a license document contains |
|||
a further restriction but permits relicensing or conveying under this |
|||
License, you may add to a covered work material governed by the terms |
|||
of that license document, provided that the further restriction does |
|||
not survive such relicensing or conveying. |
|||
|
|||
If you add terms to a covered work in accord with this section, you |
|||
must place, in the relevant source files, a statement of the |
|||
additional terms that apply to those files, or a notice indicating |
|||
where to find the applicable terms. |
|||
|
|||
Additional terms, permissive or non-permissive, may be stated in the |
|||
form of a separately written license, or stated as exceptions; |
|||
the above requirements apply either way. |
|||
|
|||
8. Termination. |
|||
|
|||
You may not propagate or modify a covered work except as expressly |
|||
provided under this License. Any attempt otherwise to propagate or |
|||
modify it is void, and will automatically terminate your rights under |
|||
this License (including any patent licenses granted under the third |
|||
paragraph of section 11). |
|||
|
|||
However, if you cease all violation of this License, then your |
|||
license from a particular copyright holder is reinstated (a) |
|||
provisionally, unless and until the copyright holder explicitly and |
|||
finally terminates your license, and (b) permanently, if the copyright |
|||
holder fails to notify you of the violation by some reasonable means |
|||
prior to 60 days after the cessation. |
|||
|
|||
Moreover, your license from a particular copyright holder is |
|||
reinstated permanently if the copyright holder notifies you of the |
|||
violation by some reasonable means, this is the first time you have |
|||
received notice of violation of this License (for any work) from that |
|||
copyright holder, and you cure the violation prior to 30 days after |
|||
your receipt of the notice. |
|||
|
|||
Termination of your rights under this section does not terminate the |
|||
licenses of parties who have received copies or rights from you under |
|||
this License. If your rights have been terminated and not permanently |
|||
reinstated, you do not qualify to receive new licenses for the same |
|||
material under section 10. |
|||
|
|||
9. Acceptance Not Required for Having Copies. |
|||
|
|||
You are not required to accept this License in order to receive or |
|||
run a copy of the Program. Ancillary propagation of a covered work |
|||
occurring solely as a consequence of using peer-to-peer transmission |
|||
to receive a copy likewise does not require acceptance. However, |
|||
nothing other than this License grants you permission to propagate or |
|||
modify any covered work. These actions infringe copyright if you do |
|||
not accept this License. Therefore, by modifying or propagating a |
|||
covered work, you indicate your acceptance of this License to do so. |
|||
|
|||
10. Automatic Licensing of Downstream Recipients. |
|||
|
|||
Each time you convey a covered work, the recipient automatically |
|||
receives a license from the original licensors, to run, modify and |
|||
propagate that work, subject to this License. You are not responsible |
|||
for enforcing compliance by third parties with this License. |
|||
|
|||
An "entity transaction" is a transaction transferring control of an |
|||
organization, or substantially all assets of one, or subdividing an |
|||
organization, or merging organizations. If propagation of a covered |
|||
work results from an entity transaction, each party to that |
|||
transaction who receives a copy of the work also receives whatever |
|||
licenses to the work the party's predecessor in interest had or could |
|||
give under the previous paragraph, plus a right to possession of the |
|||
Corresponding Source of the work from the predecessor in interest, if |
|||
the predecessor has it or can get it with reasonable efforts. |
|||
|
|||
You may not impose any further restrictions on the exercise of the |
|||
rights granted or affirmed under this License. For example, you may |
|||
not impose a license fee, royalty, or other charge for exercise of |
|||
rights granted under this License, and you may not initiate litigation |
|||
(including a cross-claim or counterclaim in a lawsuit) alleging that |
|||
any patent claim is infringed by making, using, selling, offering for |
|||
sale, or importing the Program or any portion of it. |
|||
|
|||
11. Patents. |
|||
|
|||
A "contributor" is a copyright holder who authorizes use under this |
|||
License of the Program or a work on which the Program is based. The |
|||
work thus licensed is called the contributor's "contributor version". |
|||
|
|||
A contributor's "essential patent claims" are all patent claims |
|||
owned or controlled by the contributor, whether already acquired or |
|||
hereafter acquired, that would be infringed by some manner, permitted |
|||
by this License, of making, using, or selling its contributor version, |
|||
but do not include claims that would be infringed only as a |
|||
consequence of further modification of the contributor version. For |
|||
purposes of this definition, "control" includes the right to grant |
|||
patent sublicenses in a manner consistent with the requirements of |
|||
this License. |
|||
|
|||
Each contributor grants you a non-exclusive, worldwide, royalty-free |
|||
patent license under the contributor's essential patent claims, to |
|||
make, use, sell, offer for sale, import and otherwise run, modify and |
|||
propagate the contents of its contributor version. |
|||
|
|||
In the following three paragraphs, a "patent license" is any express |
|||
agreement or commitment, however denominated, not to enforce a patent |
|||
(such as an express permission to practice a patent or covenant not to |
|||
sue for patent infringement). To "grant" such a patent license to a |
|||
party means to make such an agreement or commitment not to enforce a |
|||
patent against the party. |
|||
|
|||
If you convey a covered work, knowingly relying on a patent license, |
|||
and the Corresponding Source of the work is not available for anyone |
|||
to copy, free of charge and under the terms of this License, through a |
|||
publicly available network server or other readily accessible means, |
|||
then you must either (1) cause the Corresponding Source to be so |
|||
available, or (2) arrange to deprive yourself of the benefit of the |
|||
patent license for this particular work, or (3) arrange, in a manner |
|||
consistent with the requirements of this License, to extend the patent |
|||
license to downstream recipients. "Knowingly relying" means you have |
|||
actual knowledge that, but for the patent license, your conveying the |
|||
covered work in a country, or your recipient's use of the covered work |
|||
in a country, would infringe one or more identifiable patents in that |
|||
country that you have reason to believe are valid. |
|||
|
|||
If, pursuant to or in connection with a single transaction or |
|||
arrangement, you convey, or propagate by procuring conveyance of, a |
|||
covered work, and grant a patent license to some of the parties |
|||
receiving the covered work authorizing them to use, propagate, modify |
|||
or convey a specific copy of the covered work, then the patent license |
|||
you grant is automatically extended to all recipients of the covered |
|||
work and works based on it. |
|||
|
|||
A patent license is "discriminatory" if it does not include within |
|||
the scope of its coverage, prohibits the exercise of, or is |
|||
conditioned on the non-exercise of one or more of the rights that are |
|||
specifically granted under this License. You may not convey a covered |
|||
work if you are a party to an arrangement with a third party that is |
|||
in the business of distributing software, under which you make payment |
|||
to the third party based on the extent of your activity of conveying |
|||
the work, and under which the third party grants, to any of the |
|||
parties who would receive the covered work from you, a discriminatory |
|||
patent license (a) in connection with copies of the covered work |
|||
conveyed by you (or copies made from those copies), or (b) primarily |
|||
for and in connection with specific products or compilations that |
|||
contain the covered work, unless you entered into that arrangement, |
|||
or that patent license was granted, prior to 28 March 2007. |
|||
|
|||
Nothing in this License shall be construed as excluding or limiting |
|||
any implied license or other defenses to infringement that may |
|||
otherwise be available to you under applicable patent law. |
|||
|
|||
12. No Surrender of Others' Freedom. |
|||
|
|||
If conditions are imposed on you (whether by court order, agreement or |
|||
otherwise) that contradict the conditions of this License, they do not |
|||
excuse you from the conditions of this License. If you cannot convey a |
|||
covered work so as to satisfy simultaneously your obligations under this |
|||
License and any other pertinent obligations, then as a consequence you may |
|||
not convey it at all. For example, if you agree to terms that obligate you |
|||
to collect a royalty for further conveying from those to whom you convey |
|||
the Program, the only way you could satisfy both those terms and this |
|||
License would be to refrain entirely from conveying the Program. |
|||
|
|||
13. Remote Network Interaction; Use with the GNU General Public License. |
|||
|
|||
Notwithstanding any other provision of this License, if you modify the |
|||
Program, your modified version must prominently offer all users |
|||
interacting with it remotely through a computer network (if your version |
|||
supports such interaction) an opportunity to receive the Corresponding |
|||
Source of your version by providing access to the Corresponding Source |
|||
from a network server at no charge, through some standard or customary |
|||
means of facilitating copying of software. This Corresponding Source |
|||
shall include the Corresponding Source for any work covered by version 3 |
|||
of the GNU General Public License that is incorporated pursuant to the |
|||
following paragraph. |
|||
|
|||
Notwithstanding any other provision of this License, you have |
|||
permission to link or combine any covered work with a work licensed |
|||
under version 3 of the GNU General Public License into a single |
|||
combined work, and to convey the resulting work. The terms of this |
|||
License will continue to apply to the part which is the covered work, |
|||
but the work with which it is combined will remain governed by version |
|||
3 of the GNU General Public License. |
|||
|
|||
14. Revised Versions of this License. |
|||
|
|||
The Free Software Foundation may publish revised and/or new versions of |
|||
the GNU Affero General Public License from time to time. Such new versions |
|||
will be similar in spirit to the present version, but may differ in detail to |
|||
address new problems or concerns. |
|||
|
|||
Each version is given a distinguishing version number. If the |
|||
Program specifies that a certain numbered version of the GNU Affero General |
|||
Public License "or any later version" applies to it, you have the |
|||
option of following the terms and conditions either of that numbered |
|||
version or of any later version published by the Free Software |
|||
Foundation. If the Program does not specify a version number of the |
|||
GNU Affero General Public License, you may choose any version ever published |
|||
by the Free Software Foundation. |
|||
|
|||
If the Program specifies that a proxy can decide which future |
|||
versions of the GNU Affero General Public License can be used, that proxy's |
|||
public statement of acceptance of a version permanently authorizes you |
|||
to choose that version for the Program. |
|||
|
|||
Later license versions may give you additional or different |
|||
permissions. However, no additional obligations are imposed on any |
|||
author or copyright holder as a result of your choosing to follow a |
|||
later version. |
|||
|
|||
15. Disclaimer of Warranty. |
|||
|
|||
THERE IS NO WARRANTY FOR THE PROGRAM, TO THE EXTENT PERMITTED BY |
|||
APPLICABLE LAW. EXCEPT WHEN OTHERWISE STATED IN WRITING THE COPYRIGHT |
|||
HOLDERS AND/OR OTHER PARTIES PROVIDE THE PROGRAM "AS IS" WITHOUT WARRANTY |
|||
OF ANY KIND, EITHER EXPRESSED OR IMPLIED, INCLUDING, BUT NOT LIMITED TO, |
|||
THE IMPLIED WARRANTIES OF MERCHANTABILITY AND FITNESS FOR A PARTICULAR |
|||
PURPOSE. THE ENTIRE RISK AS TO THE QUALITY AND PERFORMANCE OF THE PROGRAM |
|||
IS WITH YOU. SHOULD THE PROGRAM PROVE DEFECTIVE, YOU ASSUME THE COST OF |
|||
ALL NECESSARY SERVICING, REPAIR OR CORRECTION. |
|||
|
|||
16. Limitation of Liability. |
|||
|
|||
IN NO EVENT UNLESS REQUIRED BY APPLICABLE LAW OR AGREED TO IN WRITING |
|||
WILL ANY COPYRIGHT HOLDER, OR ANY OTHER PARTY WHO MODIFIES AND/OR CONVEYS |
|||
THE PROGRAM AS PERMITTED ABOVE, BE LIABLE TO YOU FOR DAMAGES, INCLUDING ANY |
|||
GENERAL, SPECIAL, INCIDENTAL OR CONSEQUENTIAL DAMAGES ARISING OUT OF THE |
|||
USE OR INABILITY TO USE THE PROGRAM (INCLUDING BUT NOT LIMITED TO LOSS OF |
|||
DATA OR DATA BEING RENDERED INACCURATE OR LOSSES SUSTAINED BY YOU OR THIRD |
|||
PARTIES OR A FAILURE OF THE PROGRAM TO OPERATE WITH ANY OTHER PROGRAMS), |
|||
EVEN IF SUCH HOLDER OR OTHER PARTY HAS BEEN ADVISED OF THE POSSIBILITY OF |
|||
SUCH DAMAGES. |
|||
|
|||
17. Interpretation of Sections 15 and 16. |
|||
|
|||
If the disclaimer of warranty and limitation of liability provided |
|||
above cannot be given local legal effect according to their terms, |
|||
reviewing courts shall apply local law that most closely approximates |
|||
an absolute waiver of all civil liability in connection with the |
|||
Program, unless a warranty or assumption of liability accompanies a |
|||
copy of the Program in return for a fee. |
|||
|
|||
END OF TERMS AND CONDITIONS |
|||
@ -0,0 +1,27 @@ |
|||
################################################################################### |
|||
# |
|||
# Copyright (C) 2017 MuK IT GmbH |
|||
# |
|||
# This program is free software: you can redistribute it and/or modify |
|||
# it under the terms of the GNU Affero General Public License as |
|||
# published by the Free Software Foundation, either version 3 of the |
|||
# License, or (at your option) any later version. |
|||
# |
|||
# This program is distributed in the hope that it will be useful, |
|||
# but WITHOUT ANY WARRANTY; without even the implied warranty of |
|||
# MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the |
|||
# GNU Affero General Public License for more details. |
|||
# |
|||
# You should have received a copy of the GNU Affero General Public License |
|||
# along with this program. If not, see <http://www.gnu.org/licenses/>. |
|||
# |
|||
################################################################################### |
|||
|
|||
from . import models |
|||
|
|||
#---------------------------------------------------------- |
|||
# Patch System on Load |
|||
#---------------------------------------------------------- |
|||
|
|||
def _patch_system(): |
|||
from . import patch |
|||
@ -0,0 +1,54 @@ |
|||
################################################################################### |
|||
# |
|||
# Copyright (C) 2017 MuK IT GmbH |
|||
# |
|||
# This program is free software: you can redistribute it and/or modify |
|||
# it under the terms of the GNU Affero General Public License as |
|||
# published by the Free Software Foundation, either version 3 of the |
|||
# License, or (at your option) any later version. |
|||
# |
|||
# This program is distributed in the hope that it will be useful, |
|||
# but WITHOUT ANY WARRANTY; without even the implied warranty of |
|||
# MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the |
|||
# GNU Affero General Public License for more details. |
|||
# |
|||
# You should have received a copy of the GNU Affero General Public License |
|||
# along with this program. If not, see <http://www.gnu.org/licenses/>. |
|||
# |
|||
################################################################################### |
|||
|
|||
{ |
|||
"name": "MuK Security", |
|||
"summary": """Security Features""", |
|||
"version": "12.0.1.1.2", |
|||
"category": "Extra Tools", |
|||
"license": "AGPL-3", |
|||
"website": "http://www.mukit.at", |
|||
"live_test_url": "https://demo.mukit.at/web/login", |
|||
"author": "MuK IT", |
|||
"contributors": [ |
|||
"Mathias Markl <mathias.markl@mukit.at>", |
|||
], |
|||
"depends": [ |
|||
"muk_utils", |
|||
], |
|||
"data": [ |
|||
"security/security.xml", |
|||
"security/ir.model.access.csv", |
|||
"views/access_groups.xml", |
|||
], |
|||
"qweb": [ |
|||
"static/src/xml/*.xml", |
|||
], |
|||
"images": [ |
|||
'static/description/banner.png' |
|||
], |
|||
"external_dependencies": { |
|||
"python": [], |
|||
"bin": [], |
|||
}, |
|||
"auto_install": True, |
|||
"application": False, |
|||
"installable": True, |
|||
"post_load": "_patch_system", |
|||
} |
|||
@ -0,0 +1,9 @@ |
|||
`1.1.0` |
|||
------- |
|||
|
|||
- Updated dependencies |
|||
|
|||
`1.0.0` |
|||
------- |
|||
|
|||
- Init version |
|||
@ -0,0 +1,106 @@ |
|||
============ |
|||
MuK Security |
|||
============ |
|||
|
|||
Technical module to provide some utility and security features that can be used |
|||
in other applications. This module has no direct effect on the running system. |
|||
|
|||
Installation |
|||
============ |
|||
|
|||
To install this module, you need to: |
|||
|
|||
Download the module and add it to your Odoo addons folder. Afterward, log on to |
|||
your Odoo server and go to the Apps menu. Trigger the debug mode and update the |
|||
list by clicking on the "Update Apps List" link. Now install the module by |
|||
clicking on the install button. |
|||
|
|||
Another way to install this module is via the package management for Python |
|||
(`PyPI <https://pypi.org/project/pip/>`_). |
|||
|
|||
To install our modules using the package manager make sure |
|||
`odoo-autodiscover <https://pypi.org/project/odoo-autodiscover/>`_ is installed |
|||
correctly. Then open a console and install the module by entering the following |
|||
command: |
|||
|
|||
``pip install --extra-index-url https://nexus.mukit.at/repository/odoo/simple <module>`` |
|||
|
|||
The module name consists of the Odoo version and the module name, where |
|||
underscores are replaced by a dash. |
|||
|
|||
**Module:** |
|||
|
|||
``odoo<version>-addon-<module_name>`` |
|||
|
|||
**Example:** |
|||
|
|||
``sudo -H pip3 install --extra-index-url https://nexus.mukit.at/repository/odoo/simple odoo11-addon-muk-utils`` |
|||
|
|||
Once the installation has been successfully completed, the app is already in the |
|||
correct folder. Log on to your Odoo server and go to the Apps menu. Trigger the |
|||
debug mode and update the list by clicking on the "Update Apps List" link. Now |
|||
install the module by clicking on the install button. |
|||
|
|||
The biggest advantage of this variant is that you can now also update the app |
|||
using the "pip" command. To do this, enter the following command in your console: |
|||
|
|||
``pip install --upgrade --extra-index-url https://nexus.mukit.at/repository/odoo/simple <module>`` |
|||
|
|||
When the process is finished, restart your server and update the application in |
|||
Odoo. The steps are the same as for the installation only the button has changed |
|||
from "Install" to "Upgrade". |
|||
|
|||
You can also view available Apps directly in our `repository <https://nexus.mukit.at/#browse/browse:odoo>`_ |
|||
and find a more detailed installation guide on our `website <https://mukit.at/page/open-source>`_. |
|||
|
|||
For modules licensed under OPL-1, you will receive access data when you purchase |
|||
the module. If the modules were not purchased directly from |
|||
`MuK IT <https://www.mukit.at/>`_ please contact our support (support@mukit.at) |
|||
with a confirmation of purchase to receive the corresponding access data. |
|||
|
|||
Upgrade |
|||
============ |
|||
|
|||
To upgrade this module, you need to: |
|||
|
|||
Download the module and add it to your Odoo addons folder. Restart the server |
|||
and log on to your Odoo server. Select the Apps menu and upgrade the module by |
|||
clicking on the upgrade button. |
|||
|
|||
If you installed the module using the "pip" command, you can also update the |
|||
module in the same way. Just type the following command into the console: |
|||
|
|||
``pip install --upgrade --extra-index-url https://nexus.mukit.at/repository/odoo/simple <module>`` |
|||
|
|||
When the process is finished, restart your server and update the application in |
|||
Odoo, just like you would normally. |
|||
|
|||
Configuration |
|||
============= |
|||
|
|||
No additional configuration is needed to use this module. |
|||
|
|||
Usage |
|||
============= |
|||
|
|||
This module has no direct visible effect on the system. It provide security features. |
|||
|
|||
Credits |
|||
======= |
|||
|
|||
Contributors |
|||
------------ |
|||
|
|||
* Mathias Markl <mathias.markl@mukit.at> |
|||
|
|||
Author & Maintainer |
|||
------------------- |
|||
|
|||
This module is maintained by the `MuK IT GmbH <https://www.mukit.at/>`_. |
|||
|
|||
MuK IT is an Austrian company specialized in customizing and extending Odoo. |
|||
We develop custom solutions for your individual needs to help you focus on |
|||
your strength and expertise to grow your business. |
|||
|
|||
If you want to get in touch please contact us via mail |
|||
(sale@mukit.at) or visit our website (https://mukit.at). |
|||
@ -0,0 +1,27 @@ |
|||
################################################################################### |
|||
# |
|||
# Copyright (C) 2018 MuK IT GmbH |
|||
# |
|||
# This program is free software: you can redistribute it and/or modify |
|||
# it under the terms of the GNU Affero General Public License as |
|||
# published by the Free Software Foundation, either version 3 of the |
|||
# License, or (at your option) any later version. |
|||
# |
|||
# This program is distributed in the hope that it will be useful, |
|||
# but WITHOUT ANY WARRANTY; without even the implied warranty of |
|||
# MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the |
|||
# GNU Affero General Public License for more details. |
|||
# |
|||
# You should have received a copy of the GNU Affero General Public License |
|||
# along with this program. If not, see <http://www.gnu.org/licenses/>. |
|||
# |
|||
################################################################################### |
|||
|
|||
from . import base |
|||
from . import mixins_locking |
|||
from . import mixins_access |
|||
from . import mixins_access_groups |
|||
from . import access_groups |
|||
from . import ir_model_access |
|||
from . import res_users |
|||
from . import ir_rule |
|||
@ -0,0 +1,43 @@ |
|||
################################################################################### |
|||
# |
|||
# Copyright (C) 2017 MuK IT GmbH |
|||
# |
|||
# This program is free software: you can redistribute it and/or modify |
|||
# it under the terms of the GNU Affero General Public License as |
|||
# published by the Free Software Foundation, either version 3 of the |
|||
# License, or (at your option) any later version. |
|||
# |
|||
# This program is distributed in the hope that it will be useful, |
|||
# but WITHOUT ANY WARRANTY; without even the implied warranty of |
|||
# MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the |
|||
# GNU Affero General Public License for more details. |
|||
# |
|||
# You should have received a copy of the GNU Affero General Public License |
|||
# along with this program. If not, see <http://www.gnu.org/licenses/>. |
|||
# |
|||
################################################################################### |
|||
|
|||
from odoo import models, fields, api |
|||
|
|||
class AccessGroups(models.Model): |
|||
|
|||
_name = 'muk_security.access_groups' |
|||
_description = "Record Access Groups" |
|||
_inherit = 'muk_utils.mixins.groups' |
|||
|
|||
#---------------------------------------------------------- |
|||
# Database |
|||
#---------------------------------------------------------- |
|||
|
|||
perm_read = fields.Boolean( |
|||
string='Read Access') |
|||
|
|||
perm_create = fields.Boolean( |
|||
string='Create Access') |
|||
|
|||
perm_write = fields.Boolean( |
|||
string='Write Access') |
|||
|
|||
perm_unlink = fields.Boolean( |
|||
string='Unlink Access') |
|||
|
|||
@ -0,0 +1,40 @@ |
|||
################################################################################### |
|||
# |
|||
# Copyright (C) 2018 MuK IT GmbH |
|||
# |
|||
# This program is free software: you can redistribute it and/or modify |
|||
# it under the terms of the GNU Affero General Public License as |
|||
# published by the Free Software Foundation, either version 3 of the |
|||
# License, or (at your option) any later version. |
|||
# |
|||
# This program is distributed in the hope that it will be useful, |
|||
# but WITHOUT ANY WARRANTY; without even the implied warranty of |
|||
# MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the |
|||
# GNU Affero General Public License for more details. |
|||
# |
|||
# You should have received a copy of the GNU Affero General Public License |
|||
# along with this program. If not, see <http://www.gnu.org/licenses/>. |
|||
# |
|||
################################################################################### |
|||
|
|||
import logging |
|||
|
|||
from odoo import api, models, fields |
|||
|
|||
from odoo.addons.muk_security.tools.security import NoSecurityUid |
|||
|
|||
_logger = logging.getLogger(__name__) |
|||
|
|||
class Base(models.AbstractModel): |
|||
|
|||
_inherit = 'base' |
|||
|
|||
@api.model |
|||
def suspend_security(self, user=None): |
|||
return self.sudo(user=NoSecurityUid(user or self.env.uid)) |
|||
|
|||
@api.model |
|||
def check_field_access_rights(self, operation, fields): |
|||
if isinstance(self.env.uid, NoSecurityUid): |
|||
return fields or list(self._fields) |
|||
return super(Base, self).check_field_access_rights(operation, fields) |
|||
@ -0,0 +1,39 @@ |
|||
################################################################################### |
|||
# |
|||
# Copyright (C) 2017 MuK IT GmbH |
|||
# |
|||
# This program is free software: you can redistribute it and/or modify |
|||
# it under the terms of the GNU Affero General Public License as |
|||
# published by the Free Software Foundation, either version 3 of the |
|||
# License, or (at your option) any later version. |
|||
# |
|||
# This program is distributed in the hope that it will be useful, |
|||
# but WITHOUT ANY WARRANTY; without even the implied warranty of |
|||
# MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the |
|||
# GNU Affero General Public License for more details. |
|||
# |
|||
# You should have received a copy of the GNU Affero General Public License |
|||
# along with this program. If not, see <http://www.gnu.org/licenses/>. |
|||
# |
|||
################################################################################### |
|||
|
|||
import logging |
|||
|
|||
from odoo import api, fields, models |
|||
from odoo import tools, _ |
|||
from odoo.exceptions import ValidationError |
|||
|
|||
from odoo.addons.muk_security.tools.security import NoSecurityUid |
|||
|
|||
_logger = logging.getLogger(__name__) |
|||
|
|||
class IrModelAccess(models.Model): |
|||
|
|||
_inherit = 'ir.model.access' |
|||
|
|||
@api.model |
|||
@tools.ormcache_context('self._uid', 'model', 'mode', 'raise_exception', keys=('lang',)) |
|||
def check(self, model, mode='read', raise_exception=True): |
|||
if isinstance(self.env.uid, NoSecurityUid): |
|||
return True |
|||
return super(IrModelAccess, self).check(model, mode=mode, raise_exception=raise_exception) |
|||
@ -0,0 +1,39 @@ |
|||
################################################################################### |
|||
# |
|||
# Copyright (C) 2017 MuK IT GmbH |
|||
# |
|||
# This program is free software: you can redistribute it and/or modify |
|||
# it under the terms of the GNU Affero General Public License as |
|||
# published by the Free Software Foundation, either version 3 of the |
|||
# License, or (at your option) any later version. |
|||
# |
|||
# This program is distributed in the hope that it will be useful, |
|||
# but WITHOUT ANY WARRANTY; without even the implied warranty of |
|||
# MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the |
|||
# GNU Affero General Public License for more details. |
|||
# |
|||
# You should have received a copy of the GNU Affero General Public License |
|||
# along with this program. If not, see <http://www.gnu.org/licenses/>. |
|||
# |
|||
################################################################################### |
|||
|
|||
import logging |
|||
|
|||
from odoo import api, fields, models |
|||
from odoo import tools, _ |
|||
from odoo.exceptions import ValidationError |
|||
|
|||
from odoo.addons.muk_security.tools.security import NoSecurityUid |
|||
|
|||
_logger = logging.getLogger(__name__) |
|||
|
|||
class IrRule(models.Model): |
|||
|
|||
_inherit = 'ir.rule' |
|||
|
|||
@api.model |
|||
@tools.ormcache('self._uid', 'model_name', 'mode') |
|||
def _compute_domain(self, model_name, mode="read"): |
|||
if isinstance(self.env.uid, NoSecurityUid): |
|||
return None |
|||
return super(IrRule, self)._compute_domain(model_name, mode=mode) |
|||
@ -0,0 +1,126 @@ |
|||
################################################################################### |
|||
# |
|||
# Copyright (C) 2017 MuK IT GmbH |
|||
# |
|||
# This program is free software: you can redistribute it and/or modify |
|||
# it under the terms of the GNU Affero General Public License as |
|||
# published by the Free Software Foundation, either version 3 of the |
|||
# License, or (at your option) any later version. |
|||
# |
|||
# This program is distributed in the hope that it will be useful, |
|||
# but WITHOUT ANY WARRANTY; without even the implied warranty of |
|||
# MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the |
|||
# GNU Affero General Public License for more details. |
|||
# |
|||
# You should have received a copy of the GNU Affero General Public License |
|||
# along with this program. If not, see <http://www.gnu.org/licenses/>. |
|||
# |
|||
################################################################################### |
|||
|
|||
import logging |
|||
|
|||
from odoo import _ |
|||
from odoo import models, api, fields |
|||
from odoo.exceptions import AccessError |
|||
|
|||
_logger = logging.getLogger(__name__) |
|||
|
|||
class AccessModel(models.AbstractModel): |
|||
|
|||
_name = 'muk_security.mixins.access' |
|||
_description = 'Access Mixin' |
|||
|
|||
#---------------------------------------------------------- |
|||
# Database |
|||
#---------------------------------------------------------- |
|||
|
|||
permission_read = fields.Boolean( |
|||
compute='_compute_permissions_read', |
|||
search='_search_permission_read', |
|||
string="Read Access") |
|||
|
|||
permission_create = fields.Boolean( |
|||
compute='_compute_permissions_create', |
|||
search='_search_permission_create', |
|||
string="Create Access") |
|||
|
|||
permission_write = fields.Boolean( |
|||
compute='_compute_permissions_write', |
|||
search='_search_permission_write', |
|||
string="Write Access") |
|||
|
|||
permission_unlink = fields.Boolean( |
|||
compute='_compute_permissions_unlink', |
|||
search='_search_permission_unlink', |
|||
string="Delete Access") |
|||
|
|||
#---------------------------------------------------------- |
|||
# Function |
|||
#---------------------------------------------------------- |
|||
|
|||
@api.multi |
|||
def check_access(self, operation, raise_exception=False): |
|||
try: |
|||
access_right = self.check_access_rights(operation, raise_exception) |
|||
access_rule = self.check_access_rule(operation) is None |
|||
return access_right and access_rule |
|||
except AccessError: |
|||
if raise_exception: |
|||
raise |
|||
return False |
|||
|
|||
#---------------------------------------------------------- |
|||
# Search |
|||
#---------------------------------------------------------- |
|||
|
|||
@api.model |
|||
def _search_permission_read(self, operator, operand): |
|||
records = self.search([]).filtered(lambda r: r.check_access('read') == True) |
|||
if operator == '=' and operand: |
|||
return [('id', 'in', records.mapped('id'))] |
|||
return [('id', 'not in', records.mapped('id'))] |
|||
|
|||
@api.model |
|||
def _search_permission_create(self, operator, operand): |
|||
records = self.search([]).filtered(lambda r: r.check_access('create') == True) |
|||
if operator == '=' and operand: |
|||
return [('id', 'in', records.mapped('id'))] |
|||
return [('id', 'not in', records.mapped('id'))] |
|||
|
|||
@api.model |
|||
def _search_permission_write(self, operator, operand): |
|||
records = self.search([]).filtered(lambda r: r.check_access('write') == True) |
|||
if operator == '=' and operand: |
|||
return [('id', 'in', records.mapped('id'))] |
|||
return [('id', 'not in', records.mapped('id'))] |
|||
|
|||
@api.model |
|||
def _search_permission_unlink(self, operator, operand): |
|||
records = self.search([]).filtered(lambda r: r.check_access('unlink') == True) |
|||
if operator == '=' and operand: |
|||
return [('id', 'in', records.mapped('id'))] |
|||
return [('id', 'not in', records.mapped('id'))] |
|||
|
|||
#---------------------------------------------------------- |
|||
# Read, View |
|||
#---------------------------------------------------------- |
|||
|
|||
@api.multi |
|||
def _compute_permissions_read(self): |
|||
for record in self: |
|||
record.update({'permission_read': record.check_access('read')}) |
|||
|
|||
@api.multi |
|||
def _compute_permissions_create(self): |
|||
for record in self: |
|||
record.update({'permission_create': record.check_access('create')}) |
|||
|
|||
@api.multi |
|||
def _compute_permissions_write(self): |
|||
for record in self: |
|||
record.update({'permission_write': record.check_access('write')}) |
|||
|
|||
@api.multi |
|||
def _compute_permissions_unlink(self): |
|||
for record in self: |
|||
record.update({'permission_unlink': record.check_access('unlink')}) |
|||
@ -0,0 +1,275 @@ |
|||
################################################################################### |
|||
# |
|||
# Copyright (C) 2017 MuK IT GmbH |
|||
# |
|||
# This program is free software: you can redistribute it and/or modify |
|||
# it under the terms of the GNU Affero General Public License as |
|||
# published by the Free Software Foundation, either version 3 of the |
|||
# License, or (at your option) any later version. |
|||
# |
|||
# This program is distributed in the hope that it will be useful, |
|||
# but WITHOUT ANY WARRANTY; without even the implied warranty of |
|||
# MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the |
|||
# GNU Affero General Public License for more details. |
|||
# |
|||
# You should have received a copy of the GNU Affero General Public License |
|||
# along with this program. If not, see <http://www.gnu.org/licenses/>. |
|||
# |
|||
################################################################################### |
|||
|
|||
import logging |
|||
|
|||
from odoo import _, SUPERUSER_ID |
|||
from odoo import models, api, fields |
|||
from odoo.exceptions import AccessError |
|||
|
|||
from odoo.addons.muk_security.tools.security import NoSecurityUid |
|||
|
|||
_logger = logging.getLogger(__name__) |
|||
|
|||
class BaseModelAccessGroups(models.AbstractModel): |
|||
|
|||
_name = 'muk_security.mixins.access_groups' |
|||
_description = "MuK Access Groups Model" |
|||
_inherit = 'muk_security.mixins.access' |
|||
|
|||
# Set it to True to enforced security even if no group has been set |
|||
_strict_security = False |
|||
|
|||
# If set the group fields are restricted by the access group |
|||
_field_groups = None |
|||
|
|||
# If set the suspend fields are restricted by the access group |
|||
_suspend_groups = None |
|||
|
|||
#---------------------------------------------------------- |
|||
# Datebase |
|||
#---------------------------------------------------------- |
|||
|
|||
@api.model |
|||
def _add_magic_fields(self): |
|||
super(BaseModelAccessGroups, self)._add_magic_fields() |
|||
def add(name, field): |
|||
if name not in self._fields: |
|||
self._add_field(name, field) |
|||
model = self._name.split(".")[-1] |
|||
add('suspend_security_read', fields.Boolean( |
|||
_module=self._module, |
|||
string="Suspend Security for Read", |
|||
automatic=True, |
|||
default=False, |
|||
groups=self._suspend_groups)) |
|||
add('suspend_security_create', fields.Boolean( |
|||
_module=self._module, |
|||
string="Suspend Security for Create", |
|||
automatic=True, |
|||
default=False, |
|||
groups=self._suspend_groups)) |
|||
add('suspend_security_write', fields.Boolean( |
|||
_module=self._module, |
|||
string="Suspend Security for Write", |
|||
automatic=True, |
|||
default=False, |
|||
groups=self._suspend_groups)) |
|||
add('suspend_security_unlink', fields.Boolean( |
|||
_module=self._module, |
|||
string="Suspend Security for Unlink", |
|||
automatic=True, |
|||
default=False, |
|||
groups=self._suspend_groups)) |
|||
add('groups', fields.Many2many( |
|||
_module=self._module, |
|||
comodel_name='muk_security.groups', |
|||
relation='muk_groups_%s_rel' % model, |
|||
column1='aid', |
|||
column2='gid', |
|||
string="Groups", |
|||
automatic=True, |
|||
groups=self._field_groups)) |
|||
add('complete_groups', fields.Many2many( |
|||
_module=self._module, |
|||
comodel_name='muk_security.groups', |
|||
relation='muk_groups_complete_%s_rel' % model, |
|||
column1='aid', |
|||
column2='gid', |
|||
string="Complete Groups", |
|||
compute='_compute_groups', |
|||
store=True, |
|||
automatic=True, |
|||
groups=self._field_groups)) |
|||
|
|||
#---------------------------------------------------------- |
|||
# Function |
|||
#---------------------------------------------------------- |
|||
|
|||
@api.model |
|||
def _get_no_access_ids(self): |
|||
model = self._name.split(".")[-1] |
|||
if not self._strict_security: |
|||
sql = ''' |
|||
SELECT id |
|||
FROM %s a |
|||
WHERE NOT EXISTS ( |
|||
SELECT * |
|||
FROM muk_groups_complete_%s_rel r |
|||
WHERE r.aid = a.id |
|||
); |
|||
''' % (self._table, model) |
|||
self.env.cr.execute(sql) |
|||
fetch = self.env.cr.fetchall() |
|||
return len(fetch) > 0 and list(map(lambda x: x[0], fetch)) or [] |
|||
else: |
|||
return [] |
|||
|
|||
@api.model |
|||
def _get_suspended_access_ids(self, operation): |
|||
model = self._name.split(".")[-1] |
|||
sql = ''' |
|||
SELECT id |
|||
FROM %s a |
|||
WHERE a.suspend_security_%s = true |
|||
''' % (self._table, operation) |
|||
self.env.cr.execute(sql) |
|||
fetch = self.env.cr.fetchall() |
|||
return len(fetch) > 0 and list(map(lambda x: x[0], fetch)) or [] |
|||
|
|||
@api.model |
|||
def _get_access_ids(self): |
|||
model = self._name.split(".")[-1] |
|||
sql = ''' |
|||
SELECT r.aid |
|||
FROM muk_groups_complete_%s_rel r |
|||
JOIN muk_security_groups g ON r.gid = g.id |
|||
JOIN muk_security_groups_users_rel u ON r.gid = u.gid |
|||
WHERE u.uid = %s AND g.perm_read = true |
|||
''' % (model, self.env.user.id) |
|||
self.env.cr.execute(sql) |
|||
fetch = self.env.cr.fetchall() |
|||
access_ids = len(fetch) > 0 and list(map(lambda x: x[0], fetch)) or [] |
|||
return access_ids |
|||
|
|||
@api.model |
|||
def _get_ids_without_security(self, operation): |
|||
no_access_ids = self._get_no_access_ids() |
|||
suspended_access_ids = self._get_suspended_access_ids(operation) |
|||
return list(set(no_access_ids).union(suspended_access_ids)) |
|||
|
|||
@api.model |
|||
def _get_complete_access_ids(self, operation): |
|||
access_ids = self._get_access_ids() |
|||
no_access_ids = self._get_no_access_ids() |
|||
suspended_access_ids = self._get_suspended_access_ids(operation) |
|||
return list(set(access_ids).union(no_access_ids, suspended_access_ids)) |
|||
|
|||
@api.multi |
|||
def _eval_access_skip(self, operation): |
|||
if isinstance(self.env.uid, NoSecurityUid): |
|||
return True |
|||
return False |
|||
|
|||
@api.multi |
|||
def check_access_groups(self, operation): |
|||
if self.env.user.id == SUPERUSER_ID or self._eval_access_skip(operation): |
|||
return None |
|||
model = self._name.split(".")[-1] |
|||
filter_ids = self._get_ids_without_security(operation) |
|||
for record in self.filtered(lambda rec: rec.id not in filter_ids): |
|||
sql = ''' |
|||
SELECT perm_%s |
|||
FROM muk_groups_complete_%s_rel r |
|||
JOIN muk_security_groups g ON g.id = r.gid |
|||
JOIN muk_security_groups_users_rel u ON u.gid = g.id |
|||
WHERE r.aid = %s AND u.uid = %s |
|||
''' % (operation, model, record.id, self.env.user.id) |
|||
self.env.cr.execute(sql) |
|||
fetch = self.env.cr.fetchall() |
|||
if not any(list(map(lambda x: x[0], fetch))): |
|||
raise AccessError(_("This operation is forbidden!")) |
|||
|
|||
@api.multi |
|||
def check_access(self, operation, raise_exception=False): |
|||
res = super(BaseModelAccessGroups, self).check_access(operation, raise_exception) |
|||
try: |
|||
access_groups = self.check_access_groups(operation) == None |
|||
access = res and access_groups |
|||
if not access and raise_exception: |
|||
raise AccessError(_("This operation is forbidden!")) |
|||
return access |
|||
except AccessError: |
|||
if raise_exception: |
|||
raise AccessError(_("This operation is forbidden!")) |
|||
return False |
|||
|
|||
#---------------------------------------------------------- |
|||
# Read |
|||
#---------------------------------------------------------- |
|||
|
|||
@api.multi |
|||
def _after_read(self, result, *largs, **kwargs): |
|||
result = super(BaseModelAccessGroups, self)._after_read(result) |
|||
if self.env.user.id == SUPERUSER_ID or self._eval_access_skip("read"): |
|||
return result |
|||
access_ids = self._get_complete_access_ids("read") |
|||
result = [result] if not isinstance(result, list) else result |
|||
if len(access_ids) > 0: |
|||
access_result = [] |
|||
for record in result: |
|||
if record['id'] in access_ids: |
|||
access_result.append(record) |
|||
return access_result |
|||
return [] |
|||
|
|||
@api.model |
|||
def _after_search(self, result, *largs, **kwargs): |
|||
result = super(BaseModelAccessGroups, self)._after_search(result) |
|||
if self.env.user.id == SUPERUSER_ID or self._eval_access_skip("read"): |
|||
return result |
|||
access_ids = self._get_complete_access_ids("read") |
|||
if len(access_ids) > 0: |
|||
access_result = self.env[self._name] |
|||
if isinstance(result, int): |
|||
if result in access_ids: |
|||
return result |
|||
else: |
|||
for record in result: |
|||
if record.id in access_ids: |
|||
access_result += record |
|||
return access_result |
|||
return self.env[self._name] |
|||
|
|||
@api.model |
|||
def _after_name_search(self, result, *largs, **kwargs): |
|||
result = super(BaseModelAccessGroups, self)._after_name_search(result) |
|||
if self.env.user.id == SUPERUSER_ID or self._eval_access_skip("read"): |
|||
return result |
|||
access_ids = self._get_complete_access_ids("read") |
|||
if len(access_ids) > 0: |
|||
access_result = [] |
|||
for tuple in result: |
|||
if tuple[0] in access_ids: |
|||
access_result.append(tuple) |
|||
return access_result |
|||
return [] |
|||
|
|||
#---------------------------------------------------------- |
|||
# Read, View |
|||
#---------------------------------------------------------- |
|||
|
|||
@api.depends('groups') |
|||
def _compute_groups(self): |
|||
for record in self: |
|||
record.complete_groups = record.groups |
|||
|
|||
#---------------------------------------------------------- |
|||
# Create, Update, Delete |
|||
#---------------------------------------------------------- |
|||
|
|||
@api.multi |
|||
def _before_write(self, vals, *largs, **kwargs): |
|||
self.check_access_groups('write') |
|||
return super(BaseModelAccessGroups, self)._before_write(vals, *largs, **kwargs) |
|||
|
|||
@api.multi |
|||
def _before_unlink(self, *largs, **kwargs): |
|||
self.check_access_groups('unlink') |
|||
return super(BaseModelAccessGroups, self)._before_unlink(*largs, **kwargs) |
|||
@ -0,0 +1,96 @@ |
|||
################################################################################### |
|||
# |
|||
# Copyright (C) 2017 MuK IT GmbH |
|||
# |
|||
# This program is free software: you can redistribute it and/or modify |
|||
# it under the terms of the GNU Affero General Public License as |
|||
# published by the Free Software Foundation, either version 3 of the |
|||
# License, or (at your option) any later version. |
|||
# |
|||
# This program is distributed in the hope that it will be useful, |
|||
# but WITHOUT ANY WARRANTY; without even the implied warranty of |
|||
# MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the |
|||
# GNU Affero General Public License for more details. |
|||
# |
|||
# You should have received a copy of the GNU Affero General Public License |
|||
# along with this program. If not, see <http://www.gnu.org/licenses/>. |
|||
# |
|||
################################################################################### |
|||
|
|||
import os |
|||
import hashlib |
|||
import logging |
|||
import itertools |
|||
|
|||
from odoo import _, SUPERUSER_ID |
|||
from odoo import models, api, fields |
|||
from odoo.exceptions import AccessError |
|||
|
|||
_logger = logging.getLogger(__name__) |
|||
|
|||
class LockingModel(models.AbstractModel): |
|||
|
|||
_name = 'muk_security.mixins.locking' |
|||
_description = 'Locking Mixin' |
|||
|
|||
#---------------------------------------------------------- |
|||
# Database |
|||
#---------------------------------------------------------- |
|||
|
|||
locked_by = fields.Many2one( |
|||
comodel_name='res.users', |
|||
string="Locked by") |
|||
|
|||
is_locked = fields.Boolean( |
|||
compute='_compute_locked', |
|||
string="Locked") |
|||
|
|||
is_lock_editor = fields.Boolean( |
|||
compute='_compute_locked', |
|||
string="Editor") |
|||
|
|||
#---------------------------------------------------------- |
|||
# Locking |
|||
#---------------------------------------------------------- |
|||
|
|||
@api.multi |
|||
def lock(self): |
|||
self.write({'locked_by': self.env.uid}) |
|||
|
|||
@api.multi |
|||
def unlock(self): |
|||
self.write({'locked_by': None}) |
|||
|
|||
@api.multi |
|||
def check_lock(self, *largs, **kwargs): |
|||
for record in self: |
|||
if record.locked_by.exists() and not record.locked_by.id in (self.env.uid, SUPERUSER_ID): |
|||
raise AccessError(_("The record (%s [%s]) is locked, by an other user.") % (record._description, record.id)) |
|||
|
|||
#---------------------------------------------------------- |
|||
# Read, View |
|||
#---------------------------------------------------------- |
|||
|
|||
@api.depends('locked_by') |
|||
def _compute_locked(self): |
|||
for record in self: |
|||
if record.locked_by.exists(): |
|||
record.update({'is_locked': True, 'is_lock_editor': record.locked_by.id == record.env.uid}) |
|||
else: |
|||
record.update({'is_locked': False, 'is_lock_editor': False}) |
|||
|
|||
#---------------------------------------------------------- |
|||
# Create, Update, Delete |
|||
#---------------------------------------------------------- |
|||
|
|||
@api.multi |
|||
def write(self, vals): |
|||
self.check_lock() |
|||
return super(BaseModelLocking, self).write(vals) |
|||
|
|||
|
|||
@api.multi |
|||
def unlink(self): |
|||
self.check_lock() |
|||
return super(BaseModelLocking, self).unlink() |
|||
|
|||
@ -0,0 +1,43 @@ |
|||
################################################################################### |
|||
# |
|||
# Copyright (C) 2017 MuK IT GmbH |
|||
# |
|||
# This program is free software: you can redistribute it and/or modify |
|||
# it under the terms of the GNU Affero General Public License as |
|||
# published by the Free Software Foundation, either version 3 of the |
|||
# License, or (at your option) any later version. |
|||
# |
|||
# This program is distributed in the hope that it will be useful, |
|||
# but WITHOUT ANY WARRANTY; without even the implied warranty of |
|||
# MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the |
|||
# GNU Affero General Public License for more details. |
|||
# |
|||
# You should have received a copy of the GNU Affero General Public License |
|||
# along with this program. If not, see <http://www.gnu.org/licenses/>. |
|||
# |
|||
################################################################################### |
|||
|
|||
import logging |
|||
|
|||
from odoo import api, fields, models |
|||
from odoo import tools, _ |
|||
from odoo.exceptions import ValidationError |
|||
|
|||
from odoo.addons.muk_security.tools.security import NoSecurityUid |
|||
|
|||
_logger = logging.getLogger(__name__) |
|||
|
|||
class AccessUser(models.Model): |
|||
|
|||
_inherit = 'res.users' |
|||
|
|||
#---------------------------------------------------------- |
|||
# Functions |
|||
#---------------------------------------------------------- |
|||
|
|||
@classmethod |
|||
def _browse(cls, ids, env, prefetch=None): |
|||
return super(AccessUser, cls)._browse([ |
|||
id if not isinstance(id, NoSecurityUid) |
|||
else super(NoSecurityUid, id).__int__() |
|||
for id in ids], env, prefetch=prefetch) |
|||
@ -0,0 +1,20 @@ |
|||
################################################################################### |
|||
# |
|||
# Copyright (C) 2018 MuK IT GmbH |
|||
# |
|||
# This program is free software: you can redistribute it and/or modify |
|||
# it under the terms of the GNU Affero General Public License as |
|||
# published by the Free Software Foundation, either version 3 of the |
|||
# License, or (at your option) any later version. |
|||
# |
|||
# This program is distributed in the hope that it will be useful, |
|||
# but WITHOUT ANY WARRANTY; without even the implied warranty of |
|||
# MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the |
|||
# GNU Affero General Public License for more details. |
|||
# |
|||
# You should have received a copy of the GNU Affero General Public License |
|||
# along with this program. If not, see <http://www.gnu.org/licenses/>. |
|||
# |
|||
################################################################################### |
|||
|
|||
from . import api |
|||
@ -0,0 +1,36 @@ |
|||
################################################################################### |
|||
# |
|||
# Copyright (C) 2018 MuK IT GmbH |
|||
# |
|||
# This program is free software: you can redistribute it and/or modify |
|||
# it under the terms of the GNU Affero General Public License as |
|||
# published by the Free Software Foundation, either version 3 of the |
|||
# License, or (at your option) any later version. |
|||
# |
|||
# This program is distributed in the hope that it will be useful, |
|||
# but WITHOUT ANY WARRANTY; without even the implied warranty of |
|||
# MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the |
|||
# GNU Affero General Public License for more details. |
|||
# |
|||
# You should have received a copy of the GNU Affero General Public License |
|||
# along with this program. If not, see <http://www.gnu.org/licenses/>. |
|||
# |
|||
################################################################################### |
|||
|
|||
import logging |
|||
|
|||
from odoo import models, api, SUPERUSER_ID |
|||
|
|||
from odoo.addons.muk_utils.tools import patch |
|||
from odoo.addons.muk_security.tools import security |
|||
|
|||
_logger = logging.getLogger(__name__) |
|||
|
|||
@api.model |
|||
@patch.monkey_patch(api.Environment) |
|||
def __call__(self, cr=None, user=None, context=None): |
|||
env = __call__.super(self, cr, user, context) |
|||
if user and isinstance(user, security.NoSecurityUid): |
|||
env.uid = user |
|||
return env |
|||
return env |
|||
@ -0,0 +1,3 @@ |
|||
id,name,model_id/id,group_id/id,perm_read,perm_write,perm_create,perm_unlink |
|||
|
|||
access_security_access_groups_user,access_security_access_groups_user,model_muk_security_access_groups,base.group_user,1,1,1 |
|||
@ -0,0 +1,45 @@ |
|||
<?xml version="1.0" encoding="UTF-8"?> |
|||
|
|||
<!-- |
|||
Copyright (C) 2017 MuK IT GmbH |
|||
|
|||
This program is free software: you can redistribute it and/or modify |
|||
it under the terms of the GNU Affero General Public License as |
|||
published by the Free Software Foundation, either version 3 of the |
|||
License, or (at your option) any later version. |
|||
|
|||
This program is distributed in the hope that it will be useful, |
|||
but WITHOUT ANY WARRANTY; without even the implied warranty of |
|||
MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the |
|||
GNU Affero General Public License for more details. |
|||
|
|||
You should have received a copy of the GNU Affero General Public License |
|||
along with this program. If not, see <http://www.gnu.org/licenses/>. |
|||
--> |
|||
|
|||
<odoo> |
|||
|
|||
<record id="rule_security_groups_user" model="ir.rule"> |
|||
<field name="name">User can only edit and delete their own groups.</field> |
|||
<field name="model_id" ref="model_muk_security_access_groups"/> |
|||
<field name="groups" eval="[(4, ref('base.group_user'))]"/> |
|||
<field name="perm_read" eval="0"/> |
|||
<field name="perm_create" eval="0"/> |
|||
<field name="perm_write" eval="1"/> |
|||
<field name="perm_unlink" eval="1" /> |
|||
<field name="domain_force">[('create_uid','=',user.id)]</field> |
|||
</record> |
|||
|
|||
<record id="rule_security_groups_manager" model="ir.rule"> |
|||
<field name="name">Admins can edit and delete all groups.</field> |
|||
<field name="model_id" ref="model_muk_security_access_groups"/> |
|||
<field name="groups" eval="[(4, ref('base.group_erp_manager'))]"/> |
|||
<field name="perm_read" eval="0"/> |
|||
<field name="perm_create" eval="0"/> |
|||
<field name="perm_write" eval="1"/> |
|||
<field name="perm_unlink" eval="1" /> |
|||
<field name="domain_force">[(1 ,'=', 1)]</field> |
|||
</record> |
|||
|
|||
</odoo> |
|||
|
|||
|
After Width: 880 | Height: 440 | Size: 40 KiB |
|
After Width: 250 | Height: 250 | Size: 9.0 KiB |
@ -0,0 +1 @@ |
|||
<?xml version="1.0" standalone="no"?><!-- Generator: Gravit.io --><svg xmlns="http://www.w3.org/2000/svg" xmlns:xlink="http://www.w3.org/1999/xlink" style="isolation:isolate" viewBox="0 0 250 250" width="250" height="250"><defs><clipPath id="_clipPath_3i7MpoDR4VDbpDPMXofxOgHGfdyMFk54"><rect width="250" height="250"/></clipPath></defs><g clip-path="url(#_clipPath_3i7MpoDR4VDbpDPMXofxOgHGfdyMFk54)"><rect width="250" height="250" style="fill:rgb(0,0,0)" fill-opacity="0"/><defs><filter id="zXYOgPw6ZkEtc592Q4cHUwwVTqb7NS9Z" x="-200%" y="-200%" width="400%" height="400%" filterUnits="objectBoundingBox" color-interpolation-filters="sRGB"><feOffset xmlns="http://www.w3.org/2000/svg" in="SourceGraphic" dx="0" dy="3"/><feGaussianBlur xmlns="http://www.w3.org/2000/svg" stdDeviation="2.146804531419514" result="pf_100_offsetBlur"/><feComposite xmlns="http://www.w3.org/2000/svg" in="SourceGraphic" in2="pf_100_offsetBlur" result="pf_100_inverse" operator="out"/><feFlood xmlns="http://www.w3.org/2000/svg" flood-color="#FFFFFF" flood-opacity="0.5" result="pf_100_color"/><feComposite xmlns="http://www.w3.org/2000/svg" in="pf_100_color" in2="pf_100_inverse" operator="in" result="pf_100_shadow"/><feComposite xmlns="http://www.w3.org/2000/svg" in="pf_100_shadow" in2="SourceGraphic" operator="over" result="_out_9QikyfyvmbLqL6TQmTeLGtQUwhfbo5Xj"/><feOffset xmlns="http://www.w3.org/2000/svg" in="_out_9QikyfyvmbLqL6TQmTeLGtQUwhfbo5Xj" dx="0" dy="-3"/><feGaussianBlur xmlns="http://www.w3.org/2000/svg" stdDeviation="2.146804531419514" result="pf_101_offsetBlur"/><feComposite xmlns="http://www.w3.org/2000/svg" in="_out_9QikyfyvmbLqL6TQmTeLGtQUwhfbo5Xj" in2="pf_101_offsetBlur" result="pf_101_inverse" operator="out"/><feFlood xmlns="http://www.w3.org/2000/svg" flood-color="#000000" flood-opacity="0.5" result="pf_101_color"/><feComposite xmlns="http://www.w3.org/2000/svg" in="pf_101_color" in2="pf_101_inverse" operator="in" result="pf_101_shadow"/><feComposite xmlns="http://www.w3.org/2000/svg" in="pf_101_shadow" in2="_out_9QikyfyvmbLqL6TQmTeLGtQUwhfbo5Xj" operator="over" result="_out_ZlenbM59Nxs0pJE1uAKGnYSDAIS1hnDX"/><feMerge><feMergeNode in="_out_ZlenbM59Nxs0pJE1uAKGnYSDAIS1hnDX"/></feMerge></filter></defs><g filter="url(#zXYOgPw6ZkEtc592Q4cHUwwVTqb7NS9Z)"><path d="M 15 0 L 235 0 C 243.279 0 250 6.721 250 15 L 250 235 C 250 243.279 243.279 250 235 250 L 15 250 C 6.721 250 0 243.279 0 235 L 0 15 C 0 6.721 6.721 0 15 0 Z" style="stroke:none;fill:#243742;stroke-miterlimit:10;"/></g><defs><filter id="kPJ4MSpmSusop79ZW6eDUCPXxNQVLyNp" x="-200%" y="-200%" width="400%" height="400%" filterUnits="objectBoundingBox" color-interpolation-filters="sRGB"><feGaussianBlur xmlns="http://www.w3.org/2000/svg" in="SourceGraphic" stdDeviation="2.146804531419514"/><feOffset xmlns="http://www.w3.org/2000/svg" dx="-5" dy="5" result="pf_100_offsetBlur"/><feFlood xmlns="http://www.w3.org/2000/svg" flood-color="#000000" flood-opacity="0.65"/><feComposite xmlns="http://www.w3.org/2000/svg" in2="pf_100_offsetBlur" operator="in" result="pf_100_dropShadow"/><feBlend xmlns="http://www.w3.org/2000/svg" in="SourceGraphic" in2="pf_100_dropShadow" mode="normal"/></filter></defs><g filter="url(#kPJ4MSpmSusop79ZW6eDUCPXxNQVLyNp)"><path d=" M 177.25 115.5 L 170.125 115.5 L 170.125 94.125 C 170.125 69.247 149.878 49 125 49 C 100.122 49 79.875 69.247 79.875 94.125 L 79.875 115.5 L 72.75 115.5 C 64.883 115.5 58.5 121.883 58.5 129.75 L 58.5 186.75 C 58.5 194.617 64.883 201 72.75 201 L 177.25 201 C 185.117 201 191.5 194.617 191.5 186.75 L 191.5 129.75 C 191.5 121.883 185.117 115.5 177.25 115.5 Z M 146.375 115.5 L 103.625 115.5 L 103.625 94.125 C 103.625 82.339 113.214 72.75 125 72.75 C 136.786 72.75 146.375 82.339 146.375 94.125 L 146.375 115.5 Z " id="lock" fill="rgb(255,255,255)"/></g></g></svg> |
|||
@ -0,0 +1,67 @@ |
|||
<section class="oe_container"> |
|||
<div class="oe_row oe_spaced"> |
|||
<h2 class="oe_slogan">MuK Security</h2> |
|||
<h3 class="oe_slogan">Utility Features</h3> |
|||
<h4 class="oe_slogan" style="font-size: 23px;">MuK IT GmbH - |
|||
www.mukit.at</h4> |
|||
</div> |
|||
</section> |
|||
|
|||
<section class="oe_container"> |
|||
<div class="oe_row oe_spaced"> |
|||
<div style="max-width: 84%; margin: 16px 8%;"> |
|||
<h3 class="oe_slogan">Overview</h3> |
|||
<p class="oe_mt32">Technical module to provide some utility and |
|||
security features. The module is mainly used as a dependency by |
|||
other modules and has no direct visible effect on the system.</p> |
|||
</div> |
|||
</div> |
|||
</section> |
|||
|
|||
<section class="oe_container oe_dark" |
|||
style="margin-bottom: 20px; border-top: 5px solid #797979; border-bottom: 5px solid #797979;"> |
|||
<h3 class="oe_slogan" style="margin-bottom: 10px;">Demo</h3> |
|||
<div class="row" style="margin: auto; max-width: 250px;"> |
|||
<div class="col-6 col-xs-6"> |
|||
<h5 class="oe_slogan" style="font-size: 20px; margin: 2px;">User:</h5> |
|||
</div> |
|||
<div class="col-6 col-xs-6"> |
|||
<h5 class="oe_slogan" style="font-size: 20px; margin: 2px;">apps</h5> |
|||
</div> |
|||
<div class="col-6 col-xs-6"> |
|||
<h5 class="oe_slogan" style="font-size: 20px; margin: 2px;">Password:</h5> |
|||
</div> |
|||
<div class="col-6 col-xs-6"> |
|||
<h5 class="oe_slogan" style="font-size: 20px; margin: 2px;">demo</h5> |
|||
</div> |
|||
</div> |
|||
<div class="oe_slogan" style="margin-top: 5px;"> |
|||
<a class="btn btn-primary btn-lg mt8" |
|||
href="https://demo.mukit.at/web/login" |
|||
style="position: relative; overflow: hidden;"> |
|||
<i class="fa fa-video-camera"></i> Live Preview |
|||
</a> |
|||
</div> |
|||
</section> |
|||
|
|||
<section class="oe_container oe_dark"> |
|||
<h3 class="oe_slogan">Help and Support</h3> |
|||
<h5 class="oe_slogan" style="font-size: 20px;">Feel free to |
|||
contact us, if you need any help with your Odoo integration or |
|||
addiontal features.</h5> |
|||
<div class="oe_slogan"> |
|||
<a class="btn btn-primary btn-lg mt8" href="https://mukit.at"> |
|||
<i class="fa fa-globe"></i> Website |
|||
</a> |
|||
<a class="btn btn-primary btn-lg mt8" href="https://mukit.at/page/contactus"> |
|||
<i class="fa fa-phone"></i> Contact |
|||
</a> |
|||
<a class="btn btn-primary btn-lg mt8" href="https://github.com/muk-it"> |
|||
<i class="fa fa-github"></i> Issues |
|||
</a> |
|||
<a class="btn btn-primary btn-lg mt8" href="mailto:sale@mukit.at"> |
|||
<i class="fa fa-envelope"></i> Request a Feature |
|||
</a> |
|||
</div> |
|||
<img src="logo.png" style="width: 200px; margin-bottom: 20px; display: block;" class="mx-auto center-block"> |
|||
</section> |
|||
|
After Width: 500 | Height: 500 | Size: 37 KiB |
@ -0,0 +1,21 @@ |
|||
################################################################################### |
|||
# |
|||
# Copyright (C) 2018 MuK IT GmbH |
|||
# |
|||
# This program is free software: you can redistribute it and/or modify |
|||
# it under the terms of the GNU Affero General Public License as |
|||
# published by the Free Software Foundation, either version 3 of the |
|||
# License, or (at your option) any later version. |
|||
# |
|||
# This program is distributed in the hope that it will be useful, |
|||
# but WITHOUT ANY WARRANTY; without even the implied warranty of |
|||
# MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the |
|||
# GNU Affero General Public License for more details. |
|||
# |
|||
# You should have received a copy of the GNU Affero General Public License |
|||
# along with this program. If not, see <http://www.gnu.org/licenses/>. |
|||
# |
|||
################################################################################### |
|||
|
|||
from . import test_access_groups |
|||
from . import test_suspend_security |
|||
@ -0,0 +1,83 @@ |
|||
################################################################################### |
|||
# |
|||
# Copyright (C) 2017 MuK IT GmbH |
|||
# |
|||
# This program is free software: you can redistribute it and/or modify |
|||
# it under the terms of the GNU Affero General Public License as |
|||
# published by the Free Software Foundation, either version 3 of the |
|||
# License, or (at your option) any later version. |
|||
# |
|||
# This program is distributed in the hope that it will be useful, |
|||
# but WITHOUT ANY WARRANTY; without even the implied warranty of |
|||
# MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the |
|||
# GNU Affero General Public License for more details. |
|||
# |
|||
# You should have received a copy of the GNU Affero General Public License |
|||
# along with this program. If not, see <http://www.gnu.org/licenses/>. |
|||
# |
|||
################################################################################### |
|||
|
|||
import os |
|||
import base64 |
|||
import logging |
|||
|
|||
from odoo import exceptions |
|||
from odoo.tests import common |
|||
|
|||
_path = os.path.dirname(os.path.dirname(__file__)) |
|||
_logger = logging.getLogger(__name__) |
|||
|
|||
class AccessGroupsTestCase(common.TransactionCase): |
|||
|
|||
def setUp(self): |
|||
super(AccessGroupsTestCase, self).setUp() |
|||
self.user_id = self.ref('base.user_demo') |
|||
self.group_id = self.ref('base.group_system') |
|||
self.groups = self.env['muk_security.access_groups'] |
|||
self.group01 = self.groups.create({ |
|||
'name': 'Group 01', |
|||
'explicit_users': [(6, 0, [self.user_id])]}) |
|||
self.group02 = self.groups.create({ |
|||
'name': 'Group 02', |
|||
'groups': [(6, 0, [self.group_id])]}) |
|||
self.user = self.env['res.users'].browse(self.user_id) |
|||
self.group = self.env['res.groups'].browse(self.group_id) |
|||
|
|||
def tearDown(self): |
|||
super(AccessGroupsTestCase, self).tearDown() |
|||
|
|||
def test_access_groups_users(self): |
|||
count = len(self.group02.users) |
|||
self.group02.write({'explicit_users': [(6, 0, [self.user_id])]}) |
|||
self.assertTrue(len(self.group02.users) > count) |
|||
|
|||
def test_access_groups_groups(self): |
|||
count = len(self.group01.users) |
|||
self.group01.write({'groups': [(6, 0, [self.group_id])]}) |
|||
self.assertTrue(len(self.group01.users) > count) |
|||
|
|||
def test_access_groups_groups_group(self): |
|||
count = len(self.group02.users) |
|||
self.group.write({'users': [(4, self.user_id)]}) |
|||
self.assertTrue(len(self.group02.users) > count) |
|||
|
|||
def test_access_groups_groups_user(self): |
|||
count = len(self.group02.users) |
|||
self.user.write({'groups_id':[(4, self.group_id)]}) |
|||
self.assertTrue(len(self.group02.users) > count) |
|||
|
|||
def test_access_groups_parent(self): |
|||
count = len(self.group02.users) |
|||
self.group02.write({'parent_group': self.group01.id}) |
|||
self.assertTrue(len(self.group02.users) > count) |
|||
|
|||
def test_access_groups_parent_multi(self): |
|||
group01 = self.groups.create({'name': 'MGroup 01'}) |
|||
group02 = self.groups.create({'name': 'MGroup 02', 'parent_group': group01.id}) |
|||
group03 = self.groups.create({'name': 'MGroup 03', 'parent_group': group02.id}) |
|||
init_count = len(group03.users) |
|||
group02.write({'explicit_users': [(6, 0, [self.user_id])]}) |
|||
self.assertTrue(len(group03.users) > init_count) |
|||
updated_count = len(group03.users) |
|||
group01.write({'groups': [(6, 0, [self.group_id])]}) |
|||
self.assertTrue(len(group03.users) > updated_count) |
|||
@ -0,0 +1,48 @@ |
|||
################################################################################### |
|||
# |
|||
# Copyright (C) 2017 MuK IT GmbH |
|||
# |
|||
# This program is free software: you can redistribute it and/or modify |
|||
# it under the terms of the GNU Affero General Public License as |
|||
# published by the Free Software Foundation, either version 3 of the |
|||
# License, or (at your option) any later version. |
|||
# |
|||
# This program is distributed in the hope that it will be useful, |
|||
# but WITHOUT ANY WARRANTY; without even the implied warranty of |
|||
# MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the |
|||
# GNU Affero General Public License for more details. |
|||
# |
|||
# You should have received a copy of the GNU Affero General Public License |
|||
# along with this program. If not, see <http://www.gnu.org/licenses/>. |
|||
# |
|||
################################################################################### |
|||
|
|||
import os |
|||
import base64 |
|||
import logging |
|||
|
|||
from odoo import exceptions |
|||
from odoo.tests import common |
|||
|
|||
_path = os.path.dirname(os.path.dirname(__file__)) |
|||
_logger = logging.getLogger(__name__) |
|||
|
|||
class SuspendSecurityTestCase(common.TransactionCase): |
|||
|
|||
def setUp(self): |
|||
super(SuspendSecurityTestCase, self).setUp() |
|||
|
|||
def tearDown(self): |
|||
super(SuspendSecurityTestCase, self).tearDown() |
|||
|
|||
def test_suspend_security(self): |
|||
user_id = self.env.ref('base.user_demo').id |
|||
tester = self.env.ref('base.user_root').sudo(user_id) |
|||
with self.assertRaises(exceptions.AccessError): |
|||
tester.write({'login': 'test'}) |
|||
tester.suspend_security().write({'login': 'test'}) |
|||
self.assertEqual(tester.login, 'test') |
|||
self.assertEqual(tester.write_uid.id, user_id) |
|||
|
|||
def test_normalize(self): |
|||
self.env['res.users'].browse(self.env['res.users'].suspend_security().env.uid) |
|||
@ -0,0 +1,20 @@ |
|||
################################################################################### |
|||
# |
|||
# Copyright (C) 2018 MuK IT GmbH |
|||
# |
|||
# This program is free software: you can redistribute it and/or modify |
|||
# it under the terms of the GNU Affero General Public License as |
|||
# published by the Free Software Foundation, either version 3 of the |
|||
# License, or (at your option) any later version. |
|||
# |
|||
# This program is distributed in the hope that it will be useful, |
|||
# but WITHOUT ANY WARRANTY; without even the implied warranty of |
|||
# MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the |
|||
# GNU Affero General Public License for more details. |
|||
# |
|||
# You should have received a copy of the GNU Affero General Public License |
|||
# along with this program. If not, see <http://www.gnu.org/licenses/>. |
|||
# |
|||
################################################################################### |
|||
|
|||
from . import security |
|||
@ -0,0 +1,34 @@ |
|||
################################################################################### |
|||
# |
|||
# Copyright (C) 2018 MuK IT GmbH |
|||
# |
|||
# This program is free software: you can redistribute it and/or modify |
|||
# it under the terms of the GNU Affero General Public License as |
|||
# published by the Free Software Foundation, either version 3 of the |
|||
# License, or (at your option) any later version. |
|||
# |
|||
# This program is distributed in the hope that it will be useful, |
|||
# but WITHOUT ANY WARRANTY; without even the implied warranty of |
|||
# MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the |
|||
# GNU Affero General Public License for more details. |
|||
# |
|||
# You should have received a copy of the GNU Affero General Public License |
|||
# along with this program. If not, see <http://www.gnu.org/licenses/>. |
|||
# |
|||
################################################################################### |
|||
|
|||
class NoSecurityUid(int): |
|||
|
|||
def __int__(self): |
|||
return self |
|||
|
|||
def __eq__(self, other): |
|||
if isinstance(other, int): |
|||
return False |
|||
return super(NoSecurityUid, self).__int__() == other |
|||
|
|||
def __iter__(self): |
|||
yield super(NoSecurityUid, self).__int__() |
|||
|
|||
def __hash__(self): |
|||
return super(NoSecurityUid, self).__hash__() |
|||
@ -0,0 +1,73 @@ |
|||
<?xml version="1.0" encoding="UTF-8"?> |
|||
|
|||
<!-- |
|||
Copyright (C) 2017 MuK IT GmbH |
|||
|
|||
This program is free software: you can redistribute it and/or modify |
|||
it under the terms of the GNU Affero General Public License as |
|||
published by the Free Software Foundation, either version 3 of the |
|||
License, or (at your option) any later version. |
|||
|
|||
This program is distributed in the hope that it will be useful, |
|||
but WITHOUT ANY WARRANTY; without even the implied warranty of |
|||
MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the |
|||
GNU Affero General Public License for more details. |
|||
|
|||
You should have received a copy of the GNU Affero General Public License |
|||
along with this program. If not, see <http://www.gnu.org/licenses/>. |
|||
--> |
|||
|
|||
<odoo> |
|||
|
|||
<record id="view_security_access_groups_tree" model="ir.ui.view"> |
|||
<field name="name">muk_security_access_groups.tree</field> |
|||
<field name="model">muk_security.access_groups</field> |
|||
<field name="mode">primary</field> |
|||
<field name="inherit_id" ref="muk_utils.view_mixins_groups_tree"/> |
|||
<field name="arch" type="xml"> |
|||
<xpath expr="//field[@name='name']" position="after"> |
|||
<field name="perm_read" /> |
|||
<field name="perm_create" /> |
|||
<field name="perm_write" /> |
|||
<field name="perm_unlink" /> |
|||
</xpath> |
|||
</field> |
|||
</record> |
|||
|
|||
<record id="view_security_access_groups_form" model="ir.ui.view"> |
|||
<field name="name">muk_security_access_groups.form</field> |
|||
<field name="model">muk_security.access_groups</field> |
|||
<field name="mode">primary</field> |
|||
<field name="inherit_id" ref="muk_utils.view_mixins_groups_form"/> |
|||
<field name="arch" type="xml"> |
|||
<xpath expr="//group[@name='group']" position="after"> |
|||
<group string="Settings"> |
|||
<group> |
|||
<field name="perm_create" /> |
|||
<field name="perm_read" /> |
|||
</group> |
|||
<group> |
|||
<field name="perm_write" /> |
|||
<field name="perm_unlink" /> |
|||
</group> |
|||
</group> |
|||
</xpath> |
|||
<xpath expr="//page[@name='childs']//field[@name='name']" position="after"> |
|||
<field name="perm_read" /> |
|||
<field name="perm_create" /> |
|||
<field name="perm_write" /> |
|||
<field name="perm_unlink" /> |
|||
</xpath> |
|||
</field> |
|||
</record> |
|||
|
|||
<record id="action_security_access_groups" model="ir.actions.act_window"> |
|||
<field name="name">Access Groups</field> |
|||
<field name="res_model">muk_security.access_groups</field> |
|||
<field name="view_mode">tree,form</field> |
|||
</record> |
|||
|
|||
<menuitem id="menu_security_access_groups" name="Access Groups" |
|||
parent="base.menu_security" action="action_security_access_groups" /> |
|||
|
|||
</odoo> |
|||
Write
Preview
Loading…
Cancel
Save
Reference in new issue