mirror of https://github.com/muk-it/muk_base
MuK IT GmbH
6 years ago
29 changed files with 1994 additions and 0 deletions
-
619muk_security/LICENSE
-
27muk_security/__init__.py
-
54muk_security/__manifest__.py
-
9muk_security/doc/changelog.rst
-
106muk_security/doc/index.rst
-
27muk_security/models/__init__.py
-
43muk_security/models/access_groups.py
-
40muk_security/models/base.py
-
39muk_security/models/ir_model_access.py
-
39muk_security/models/ir_rule.py
-
126muk_security/models/mixins_access.py
-
275muk_security/models/mixins_access_groups.py
-
96muk_security/models/mixins_locking.py
-
43muk_security/models/res_users.py
-
20muk_security/patch/__init__.py
-
36muk_security/patch/api.py
-
3muk_security/security/ir.model.access.csv
-
45muk_security/security/security.xml
-
BINmuk_security/static/description/banner.png
-
BINmuk_security/static/description/icon.png
-
1muk_security/static/description/icon.svg
-
67muk_security/static/description/index.html
-
BINmuk_security/static/description/logo.png
-
21muk_security/tests/__init__.py
-
83muk_security/tests/test_access_groups.py
-
48muk_security/tests/test_suspend_security.py
-
20muk_security/tools/__init__.py
-
34muk_security/tools/security.py
-
73muk_security/views/access_groups.xml
@ -0,0 +1,619 @@ |
|||||
|
GNU AFFERO GENERAL PUBLIC LICENSE |
||||
|
Version 3, 19 November 2007 |
||||
|
|
||||
|
Copyright (C) 2007 Free Software Foundation, Inc. <http://fsf.org/> |
||||
|
Everyone is permitted to copy and distribute verbatim copies |
||||
|
of this license document, but changing it is not allowed. |
||||
|
|
||||
|
Preamble |
||||
|
|
||||
|
The GNU Affero General Public License is a free, copyleft license for |
||||
|
software and other kinds of works, specifically designed to ensure |
||||
|
cooperation with the community in the case of network server software. |
||||
|
|
||||
|
The licenses for most software and other practical works are designed |
||||
|
to take away your freedom to share and change the works. By contrast, |
||||
|
our General Public Licenses are intended to guarantee your freedom to |
||||
|
share and change all versions of a program--to make sure it remains free |
||||
|
software for all its users. |
||||
|
|
||||
|
When we speak of free software, we are referring to freedom, not |
||||
|
price. Our General Public Licenses are designed to make sure that you |
||||
|
have the freedom to distribute copies of free software (and charge for |
||||
|
them if you wish), that you receive source code or can get it if you |
||||
|
want it, that you can change the software or use pieces of it in new |
||||
|
free programs, and that you know you can do these things. |
||||
|
|
||||
|
Developers that use our General Public Licenses protect your rights |
||||
|
with two steps: (1) assert copyright on the software, and (2) offer |
||||
|
you this License which gives you legal permission to copy, distribute |
||||
|
and/or modify the software. |
||||
|
|
||||
|
A secondary benefit of defending all users' freedom is that |
||||
|
improvements made in alternate versions of the program, if they |
||||
|
receive widespread use, become available for other developers to |
||||
|
incorporate. Many developers of free software are heartened and |
||||
|
encouraged by the resulting cooperation. However, in the case of |
||||
|
software used on network servers, this result may fail to come about. |
||||
|
The GNU General Public License permits making a modified version and |
||||
|
letting the public access it on a server without ever releasing its |
||||
|
source code to the public. |
||||
|
|
||||
|
The GNU Affero General Public License is designed specifically to |
||||
|
ensure that, in such cases, the modified source code becomes available |
||||
|
to the community. It requires the operator of a network server to |
||||
|
provide the source code of the modified version running there to the |
||||
|
users of that server. Therefore, public use of a modified version, on |
||||
|
a publicly accessible server, gives the public access to the source |
||||
|
code of the modified version. |
||||
|
|
||||
|
An older license, called the Affero General Public License and |
||||
|
published by Affero, was designed to accomplish similar goals. This is |
||||
|
a different license, not a version of the Affero GPL, but Affero has |
||||
|
released a new version of the Affero GPL which permits relicensing under |
||||
|
this license. |
||||
|
|
||||
|
The precise terms and conditions for copying, distribution and |
||||
|
modification follow. |
||||
|
|
||||
|
TERMS AND CONDITIONS |
||||
|
|
||||
|
0. Definitions. |
||||
|
|
||||
|
"This License" refers to version 3 of the GNU Affero General Public License. |
||||
|
|
||||
|
"Copyright" also means copyright-like laws that apply to other kinds of |
||||
|
works, such as semiconductor masks. |
||||
|
|
||||
|
"The Program" refers to any copyrightable work licensed under this |
||||
|
License. Each licensee is addressed as "you". "Licensees" and |
||||
|
"recipients" may be individuals or organizations. |
||||
|
|
||||
|
To "modify" a work means to copy from or adapt all or part of the work |
||||
|
in a fashion requiring copyright permission, other than the making of an |
||||
|
exact copy. The resulting work is called a "modified version" of the |
||||
|
earlier work or a work "based on" the earlier work. |
||||
|
|
||||
|
A "covered work" means either the unmodified Program or a work based |
||||
|
on the Program. |
||||
|
|
||||
|
To "propagate" a work means to do anything with it that, without |
||||
|
permission, would make you directly or secondarily liable for |
||||
|
infringement under applicable copyright law, except executing it on a |
||||
|
computer or modifying a private copy. Propagation includes copying, |
||||
|
distribution (with or without modification), making available to the |
||||
|
public, and in some countries other activities as well. |
||||
|
|
||||
|
To "convey" a work means any kind of propagation that enables other |
||||
|
parties to make or receive copies. Mere interaction with a user through |
||||
|
a computer network, with no transfer of a copy, is not conveying. |
||||
|
|
||||
|
An interactive user interface displays "Appropriate Legal Notices" |
||||
|
to the extent that it includes a convenient and prominently visible |
||||
|
feature that (1) displays an appropriate copyright notice, and (2) |
||||
|
tells the user that there is no warranty for the work (except to the |
||||
|
extent that warranties are provided), that licensees may convey the |
||||
|
work under this License, and how to view a copy of this License. If |
||||
|
the interface presents a list of user commands or options, such as a |
||||
|
menu, a prominent item in the list meets this criterion. |
||||
|
|
||||
|
1. Source Code. |
||||
|
|
||||
|
The "source code" for a work means the preferred form of the work |
||||
|
for making modifications to it. "Object code" means any non-source |
||||
|
form of a work. |
||||
|
|
||||
|
A "Standard Interface" means an interface that either is an official |
||||
|
standard defined by a recognized standards body, or, in the case of |
||||
|
interfaces specified for a particular programming language, one that |
||||
|
is widely used among developers working in that language. |
||||
|
|
||||
|
The "System Libraries" of an executable work include anything, other |
||||
|
than the work as a whole, that (a) is included in the normal form of |
||||
|
packaging a Major Component, but which is not part of that Major |
||||
|
Component, and (b) serves only to enable use of the work with that |
||||
|
Major Component, or to implement a Standard Interface for which an |
||||
|
implementation is available to the public in source code form. A |
||||
|
"Major Component", in this context, means a major essential component |
||||
|
(kernel, window system, and so on) of the specific operating system |
||||
|
(if any) on which the executable work runs, or a compiler used to |
||||
|
produce the work, or an object code interpreter used to run it. |
||||
|
|
||||
|
The "Corresponding Source" for a work in object code form means all |
||||
|
the source code needed to generate, install, and (for an executable |
||||
|
work) run the object code and to modify the work, including scripts to |
||||
|
control those activities. However, it does not include the work's |
||||
|
System Libraries, or general-purpose tools or generally available free |
||||
|
programs which are used unmodified in performing those activities but |
||||
|
which are not part of the work. For example, Corresponding Source |
||||
|
includes interface definition files associated with source files for |
||||
|
the work, and the source code for shared libraries and dynamically |
||||
|
linked subprograms that the work is specifically designed to require, |
||||
|
such as by intimate data communication or control flow between those |
||||
|
subprograms and other parts of the work. |
||||
|
|
||||
|
The Corresponding Source need not include anything that users |
||||
|
can regenerate automatically from other parts of the Corresponding |
||||
|
Source. |
||||
|
|
||||
|
The Corresponding Source for a work in source code form is that |
||||
|
same work. |
||||
|
|
||||
|
2. Basic Permissions. |
||||
|
|
||||
|
All rights granted under this License are granted for the term of |
||||
|
copyright on the Program, and are irrevocable provided the stated |
||||
|
conditions are met. This License explicitly affirms your unlimited |
||||
|
permission to run the unmodified Program. The output from running a |
||||
|
covered work is covered by this License only if the output, given its |
||||
|
content, constitutes a covered work. This License acknowledges your |
||||
|
rights of fair use or other equivalent, as provided by copyright law. |
||||
|
|
||||
|
You may make, run and propagate covered works that you do not |
||||
|
convey, without conditions so long as your license otherwise remains |
||||
|
in force. You may convey covered works to others for the sole purpose |
||||
|
of having them make modifications exclusively for you, or provide you |
||||
|
with facilities for running those works, provided that you comply with |
||||
|
the terms of this License in conveying all material for which you do |
||||
|
not control copyright. Those thus making or running the covered works |
||||
|
for you must do so exclusively on your behalf, under your direction |
||||
|
and control, on terms that prohibit them from making any copies of |
||||
|
your copyrighted material outside their relationship with you. |
||||
|
|
||||
|
Conveying under any other circumstances is permitted solely under |
||||
|
the conditions stated below. Sublicensing is not allowed; section 10 |
||||
|
makes it unnecessary. |
||||
|
|
||||
|
3. Protecting Users' Legal Rights From Anti-Circumvention Law. |
||||
|
|
||||
|
No covered work shall be deemed part of an effective technological |
||||
|
measure under any applicable law fulfilling obligations under article |
||||
|
11 of the WIPO copyright treaty adopted on 20 December 1996, or |
||||
|
similar laws prohibiting or restricting circumvention of such |
||||
|
measures. |
||||
|
|
||||
|
When you convey a covered work, you waive any legal power to forbid |
||||
|
circumvention of technological measures to the extent such circumvention |
||||
|
is effected by exercising rights under this License with respect to |
||||
|
the covered work, and you disclaim any intention to limit operation or |
||||
|
modification of the work as a means of enforcing, against the work's |
||||
|
users, your or third parties' legal rights to forbid circumvention of |
||||
|
technological measures. |
||||
|
|
||||
|
4. Conveying Verbatim Copies. |
||||
|
|
||||
|
You may convey verbatim copies of the Program's source code as you |
||||
|
receive it, in any medium, provided that you conspicuously and |
||||
|
appropriately publish on each copy an appropriate copyright notice; |
||||
|
keep intact all notices stating that this License and any |
||||
|
non-permissive terms added in accord with section 7 apply to the code; |
||||
|
keep intact all notices of the absence of any warranty; and give all |
||||
|
recipients a copy of this License along with the Program. |
||||
|
|
||||
|
You may charge any price or no price for each copy that you convey, |
||||
|
and you may offer support or warranty protection for a fee. |
||||
|
|
||||
|
5. Conveying Modified Source Versions. |
||||
|
|
||||
|
You may convey a work based on the Program, or the modifications to |
||||
|
produce it from the Program, in the form of source code under the |
||||
|
terms of section 4, provided that you also meet all of these conditions: |
||||
|
|
||||
|
a) The work must carry prominent notices stating that you modified |
||||
|
it, and giving a relevant date. |
||||
|
|
||||
|
b) The work must carry prominent notices stating that it is |
||||
|
released under this License and any conditions added under section |
||||
|
7. This requirement modifies the requirement in section 4 to |
||||
|
"keep intact all notices". |
||||
|
|
||||
|
c) You must license the entire work, as a whole, under this |
||||
|
License to anyone who comes into possession of a copy. This |
||||
|
License will therefore apply, along with any applicable section 7 |
||||
|
additional terms, to the whole of the work, and all its parts, |
||||
|
regardless of how they are packaged. This License gives no |
||||
|
permission to license the work in any other way, but it does not |
||||
|
invalidate such permission if you have separately received it. |
||||
|
|
||||
|
d) If the work has interactive user interfaces, each must display |
||||
|
Appropriate Legal Notices; however, if the Program has interactive |
||||
|
interfaces that do not display Appropriate Legal Notices, your |
||||
|
work need not make them do so. |
||||
|
|
||||
|
A compilation of a covered work with other separate and independent |
||||
|
works, which are not by their nature extensions of the covered work, |
||||
|
and which are not combined with it such as to form a larger program, |
||||
|
in or on a volume of a storage or distribution medium, is called an |
||||
|
"aggregate" if the compilation and its resulting copyright are not |
||||
|
used to limit the access or legal rights of the compilation's users |
||||
|
beyond what the individual works permit. Inclusion of a covered work |
||||
|
in an aggregate does not cause this License to apply to the other |
||||
|
parts of the aggregate. |
||||
|
|
||||
|
6. Conveying Non-Source Forms. |
||||
|
|
||||
|
You may convey a covered work in object code form under the terms |
||||
|
of sections 4 and 5, provided that you also convey the |
||||
|
machine-readable Corresponding Source under the terms of this License, |
||||
|
in one of these ways: |
||||
|
|
||||
|
a) Convey the object code in, or embodied in, a physical product |
||||
|
(including a physical distribution medium), accompanied by the |
||||
|
Corresponding Source fixed on a durable physical medium |
||||
|
customarily used for software interchange. |
||||
|
|
||||
|
b) Convey the object code in, or embodied in, a physical product |
||||
|
(including a physical distribution medium), accompanied by a |
||||
|
written offer, valid for at least three years and valid for as |
||||
|
long as you offer spare parts or customer support for that product |
||||
|
model, to give anyone who possesses the object code either (1) a |
||||
|
copy of the Corresponding Source for all the software in the |
||||
|
product that is covered by this License, on a durable physical |
||||
|
medium customarily used for software interchange, for a price no |
||||
|
more than your reasonable cost of physically performing this |
||||
|
conveying of source, or (2) access to copy the |
||||
|
Corresponding Source from a network server at no charge. |
||||
|
|
||||
|
c) Convey individual copies of the object code with a copy of the |
||||
|
written offer to provide the Corresponding Source. This |
||||
|
alternative is allowed only occasionally and noncommercially, and |
||||
|
only if you received the object code with such an offer, in accord |
||||
|
with subsection 6b. |
||||
|
|
||||
|
d) Convey the object code by offering access from a designated |
||||
|
place (gratis or for a charge), and offer equivalent access to the |
||||
|
Corresponding Source in the same way through the same place at no |
||||
|
further charge. You need not require recipients to copy the |
||||
|
Corresponding Source along with the object code. If the place to |
||||
|
copy the object code is a network server, the Corresponding Source |
||||
|
may be on a different server (operated by you or a third party) |
||||
|
that supports equivalent copying facilities, provided you maintain |
||||
|
clear directions next to the object code saying where to find the |
||||
|
Corresponding Source. Regardless of what server hosts the |
||||
|
Corresponding Source, you remain obligated to ensure that it is |
||||
|
available for as long as needed to satisfy these requirements. |
||||
|
|
||||
|
e) Convey the object code using peer-to-peer transmission, provided |
||||
|
you inform other peers where the object code and Corresponding |
||||
|
Source of the work are being offered to the general public at no |
||||
|
charge under subsection 6d. |
||||
|
|
||||
|
A separable portion of the object code, whose source code is excluded |
||||
|
from the Corresponding Source as a System Library, need not be |
||||
|
included in conveying the object code work. |
||||
|
|
||||
|
A "User Product" is either (1) a "consumer product", which means any |
||||
|
tangible personal property which is normally used for personal, family, |
||||
|
or household purposes, or (2) anything designed or sold for incorporation |
||||
|
into a dwelling. In determining whether a product is a consumer product, |
||||
|
doubtful cases shall be resolved in favor of coverage. For a particular |
||||
|
product received by a particular user, "normally used" refers to a |
||||
|
typical or common use of that class of product, regardless of the status |
||||
|
of the particular user or of the way in which the particular user |
||||
|
actually uses, or expects or is expected to use, the product. A product |
||||
|
is a consumer product regardless of whether the product has substantial |
||||
|
commercial, industrial or non-consumer uses, unless such uses represent |
||||
|
the only significant mode of use of the product. |
||||
|
|
||||
|
"Installation Information" for a User Product means any methods, |
||||
|
procedures, authorization keys, or other information required to install |
||||
|
and execute modified versions of a covered work in that User Product from |
||||
|
a modified version of its Corresponding Source. The information must |
||||
|
suffice to ensure that the continued functioning of the modified object |
||||
|
code is in no case prevented or interfered with solely because |
||||
|
modification has been made. |
||||
|
|
||||
|
If you convey an object code work under this section in, or with, or |
||||
|
specifically for use in, a User Product, and the conveying occurs as |
||||
|
part of a transaction in which the right of possession and use of the |
||||
|
User Product is transferred to the recipient in perpetuity or for a |
||||
|
fixed term (regardless of how the transaction is characterized), the |
||||
|
Corresponding Source conveyed under this section must be accompanied |
||||
|
by the Installation Information. But this requirement does not apply |
||||
|
if neither you nor any third party retains the ability to install |
||||
|
modified object code on the User Product (for example, the work has |
||||
|
been installed in ROM). |
||||
|
|
||||
|
The requirement to provide Installation Information does not include a |
||||
|
requirement to continue to provide support service, warranty, or updates |
||||
|
for a work that has been modified or installed by the recipient, or for |
||||
|
the User Product in which it has been modified or installed. Access to a |
||||
|
network may be denied when the modification itself materially and |
||||
|
adversely affects the operation of the network or violates the rules and |
||||
|
protocols for communication across the network. |
||||
|
|
||||
|
Corresponding Source conveyed, and Installation Information provided, |
||||
|
in accord with this section must be in a format that is publicly |
||||
|
documented (and with an implementation available to the public in |
||||
|
source code form), and must require no special password or key for |
||||
|
unpacking, reading or copying. |
||||
|
|
||||
|
7. Additional Terms. |
||||
|
|
||||
|
"Additional permissions" are terms that supplement the terms of this |
||||
|
License by making exceptions from one or more of its conditions. |
||||
|
Additional permissions that are applicable to the entire Program shall |
||||
|
be treated as though they were included in this License, to the extent |
||||
|
that they are valid under applicable law. If additional permissions |
||||
|
apply only to part of the Program, that part may be used separately |
||||
|
under those permissions, but the entire Program remains governed by |
||||
|
this License without regard to the additional permissions. |
||||
|
|
||||
|
When you convey a copy of a covered work, you may at your option |
||||
|
remove any additional permissions from that copy, or from any part of |
||||
|
it. (Additional permissions may be written to require their own |
||||
|
removal in certain cases when you modify the work.) You may place |
||||
|
additional permissions on material, added by you to a covered work, |
||||
|
for which you have or can give appropriate copyright permission. |
||||
|
|
||||
|
Notwithstanding any other provision of this License, for material you |
||||
|
add to a covered work, you may (if authorized by the copyright holders of |
||||
|
that material) supplement the terms of this License with terms: |
||||
|
|
||||
|
a) Disclaiming warranty or limiting liability differently from the |
||||
|
terms of sections 15 and 16 of this License; or |
||||
|
|
||||
|
b) Requiring preservation of specified reasonable legal notices or |
||||
|
author attributions in that material or in the Appropriate Legal |
||||
|
Notices displayed by works containing it; or |
||||
|
|
||||
|
c) Prohibiting misrepresentation of the origin of that material, or |
||||
|
requiring that modified versions of such material be marked in |
||||
|
reasonable ways as different from the original version; or |
||||
|
|
||||
|
d) Limiting the use for publicity purposes of names of licensors or |
||||
|
authors of the material; or |
||||
|
|
||||
|
e) Declining to grant rights under trademark law for use of some |
||||
|
trade names, trademarks, or service marks; or |
||||
|
|
||||
|
f) Requiring indemnification of licensors and authors of that |
||||
|
material by anyone who conveys the material (or modified versions of |
||||
|
it) with contractual assumptions of liability to the recipient, for |
||||
|
any liability that these contractual assumptions directly impose on |
||||
|
those licensors and authors. |
||||
|
|
||||
|
All other non-permissive additional terms are considered "further |
||||
|
restrictions" within the meaning of section 10. If the Program as you |
||||
|
received it, or any part of it, contains a notice stating that it is |
||||
|
governed by this License along with a term that is a further |
||||
|
restriction, you may remove that term. If a license document contains |
||||
|
a further restriction but permits relicensing or conveying under this |
||||
|
License, you may add to a covered work material governed by the terms |
||||
|
of that license document, provided that the further restriction does |
||||
|
not survive such relicensing or conveying. |
||||
|
|
||||
|
If you add terms to a covered work in accord with this section, you |
||||
|
must place, in the relevant source files, a statement of the |
||||
|
additional terms that apply to those files, or a notice indicating |
||||
|
where to find the applicable terms. |
||||
|
|
||||
|
Additional terms, permissive or non-permissive, may be stated in the |
||||
|
form of a separately written license, or stated as exceptions; |
||||
|
the above requirements apply either way. |
||||
|
|
||||
|
8. Termination. |
||||
|
|
||||
|
You may not propagate or modify a covered work except as expressly |
||||
|
provided under this License. Any attempt otherwise to propagate or |
||||
|
modify it is void, and will automatically terminate your rights under |
||||
|
this License (including any patent licenses granted under the third |
||||
|
paragraph of section 11). |
||||
|
|
||||
|
However, if you cease all violation of this License, then your |
||||
|
license from a particular copyright holder is reinstated (a) |
||||
|
provisionally, unless and until the copyright holder explicitly and |
||||
|
finally terminates your license, and (b) permanently, if the copyright |
||||
|
holder fails to notify you of the violation by some reasonable means |
||||
|
prior to 60 days after the cessation. |
||||
|
|
||||
|
Moreover, your license from a particular copyright holder is |
||||
|
reinstated permanently if the copyright holder notifies you of the |
||||
|
violation by some reasonable means, this is the first time you have |
||||
|
received notice of violation of this License (for any work) from that |
||||
|
copyright holder, and you cure the violation prior to 30 days after |
||||
|
your receipt of the notice. |
||||
|
|
||||
|
Termination of your rights under this section does not terminate the |
||||
|
licenses of parties who have received copies or rights from you under |
||||
|
this License. If your rights have been terminated and not permanently |
||||
|
reinstated, you do not qualify to receive new licenses for the same |
||||
|
material under section 10. |
||||
|
|
||||
|
9. Acceptance Not Required for Having Copies. |
||||
|
|
||||
|
You are not required to accept this License in order to receive or |
||||
|
run a copy of the Program. Ancillary propagation of a covered work |
||||
|
occurring solely as a consequence of using peer-to-peer transmission |
||||
|
to receive a copy likewise does not require acceptance. However, |
||||
|
nothing other than this License grants you permission to propagate or |
||||
|
modify any covered work. These actions infringe copyright if you do |
||||
|
not accept this License. Therefore, by modifying or propagating a |
||||
|
covered work, you indicate your acceptance of this License to do so. |
||||
|
|
||||
|
10. Automatic Licensing of Downstream Recipients. |
||||
|
|
||||
|
Each time you convey a covered work, the recipient automatically |
||||
|
receives a license from the original licensors, to run, modify and |
||||
|
propagate that work, subject to this License. You are not responsible |
||||
|
for enforcing compliance by third parties with this License. |
||||
|
|
||||
|
An "entity transaction" is a transaction transferring control of an |
||||
|
organization, or substantially all assets of one, or subdividing an |
||||
|
organization, or merging organizations. If propagation of a covered |
||||
|
work results from an entity transaction, each party to that |
||||
|
transaction who receives a copy of the work also receives whatever |
||||
|
licenses to the work the party's predecessor in interest had or could |
||||
|
give under the previous paragraph, plus a right to possession of the |
||||
|
Corresponding Source of the work from the predecessor in interest, if |
||||
|
the predecessor has it or can get it with reasonable efforts. |
||||
|
|
||||
|
You may not impose any further restrictions on the exercise of the |
||||
|
rights granted or affirmed under this License. For example, you may |
||||
|
not impose a license fee, royalty, or other charge for exercise of |
||||
|
rights granted under this License, and you may not initiate litigation |
||||
|
(including a cross-claim or counterclaim in a lawsuit) alleging that |
||||
|
any patent claim is infringed by making, using, selling, offering for |
||||
|
sale, or importing the Program or any portion of it. |
||||
|
|
||||
|
11. Patents. |
||||
|
|
||||
|
A "contributor" is a copyright holder who authorizes use under this |
||||
|
License of the Program or a work on which the Program is based. The |
||||
|
work thus licensed is called the contributor's "contributor version". |
||||
|
|
||||
|
A contributor's "essential patent claims" are all patent claims |
||||
|
owned or controlled by the contributor, whether already acquired or |
||||
|
hereafter acquired, that would be infringed by some manner, permitted |
||||
|
by this License, of making, using, or selling its contributor version, |
||||
|
but do not include claims that would be infringed only as a |
||||
|
consequence of further modification of the contributor version. For |
||||
|
purposes of this definition, "control" includes the right to grant |
||||
|
patent sublicenses in a manner consistent with the requirements of |
||||
|
this License. |
||||
|
|
||||
|
Each contributor grants you a non-exclusive, worldwide, royalty-free |
||||
|
patent license under the contributor's essential patent claims, to |
||||
|
make, use, sell, offer for sale, import and otherwise run, modify and |
||||
|
propagate the contents of its contributor version. |
||||
|
|
||||
|
In the following three paragraphs, a "patent license" is any express |
||||
|
agreement or commitment, however denominated, not to enforce a patent |
||||
|
(such as an express permission to practice a patent or covenant not to |
||||
|
sue for patent infringement). To "grant" such a patent license to a |
||||
|
party means to make such an agreement or commitment not to enforce a |
||||
|
patent against the party. |
||||
|
|
||||
|
If you convey a covered work, knowingly relying on a patent license, |
||||
|
and the Corresponding Source of the work is not available for anyone |
||||
|
to copy, free of charge and under the terms of this License, through a |
||||
|
publicly available network server or other readily accessible means, |
||||
|
then you must either (1) cause the Corresponding Source to be so |
||||
|
available, or (2) arrange to deprive yourself of the benefit of the |
||||
|
patent license for this particular work, or (3) arrange, in a manner |
||||
|
consistent with the requirements of this License, to extend the patent |
||||
|
license to downstream recipients. "Knowingly relying" means you have |
||||
|
actual knowledge that, but for the patent license, your conveying the |
||||
|
covered work in a country, or your recipient's use of the covered work |
||||
|
in a country, would infringe one or more identifiable patents in that |
||||
|
country that you have reason to believe are valid. |
||||
|
|
||||
|
If, pursuant to or in connection with a single transaction or |
||||
|
arrangement, you convey, or propagate by procuring conveyance of, a |
||||
|
covered work, and grant a patent license to some of the parties |
||||
|
receiving the covered work authorizing them to use, propagate, modify |
||||
|
or convey a specific copy of the covered work, then the patent license |
||||
|
you grant is automatically extended to all recipients of the covered |
||||
|
work and works based on it. |
||||
|
|
||||
|
A patent license is "discriminatory" if it does not include within |
||||
|
the scope of its coverage, prohibits the exercise of, or is |
||||
|
conditioned on the non-exercise of one or more of the rights that are |
||||
|
specifically granted under this License. You may not convey a covered |
||||
|
work if you are a party to an arrangement with a third party that is |
||||
|
in the business of distributing software, under which you make payment |
||||
|
to the third party based on the extent of your activity of conveying |
||||
|
the work, and under which the third party grants, to any of the |
||||
|
parties who would receive the covered work from you, a discriminatory |
||||
|
patent license (a) in connection with copies of the covered work |
||||
|
conveyed by you (or copies made from those copies), or (b) primarily |
||||
|
for and in connection with specific products or compilations that |
||||
|
contain the covered work, unless you entered into that arrangement, |
||||
|
or that patent license was granted, prior to 28 March 2007. |
||||
|
|
||||
|
Nothing in this License shall be construed as excluding or limiting |
||||
|
any implied license or other defenses to infringement that may |
||||
|
otherwise be available to you under applicable patent law. |
||||
|
|
||||
|
12. No Surrender of Others' Freedom. |
||||
|
|
||||
|
If conditions are imposed on you (whether by court order, agreement or |
||||
|
otherwise) that contradict the conditions of this License, they do not |
||||
|
excuse you from the conditions of this License. If you cannot convey a |
||||
|
covered work so as to satisfy simultaneously your obligations under this |
||||
|
License and any other pertinent obligations, then as a consequence you may |
||||
|
not convey it at all. For example, if you agree to terms that obligate you |
||||
|
to collect a royalty for further conveying from those to whom you convey |
||||
|
the Program, the only way you could satisfy both those terms and this |
||||
|
License would be to refrain entirely from conveying the Program. |
||||
|
|
||||
|
13. Remote Network Interaction; Use with the GNU General Public License. |
||||
|
|
||||
|
Notwithstanding any other provision of this License, if you modify the |
||||
|
Program, your modified version must prominently offer all users |
||||
|
interacting with it remotely through a computer network (if your version |
||||
|
supports such interaction) an opportunity to receive the Corresponding |
||||
|
Source of your version by providing access to the Corresponding Source |
||||
|
from a network server at no charge, through some standard or customary |
||||
|
means of facilitating copying of software. This Corresponding Source |
||||
|
shall include the Corresponding Source for any work covered by version 3 |
||||
|
of the GNU General Public License that is incorporated pursuant to the |
||||
|
following paragraph. |
||||
|
|
||||
|
Notwithstanding any other provision of this License, you have |
||||
|
permission to link or combine any covered work with a work licensed |
||||
|
under version 3 of the GNU General Public License into a single |
||||
|
combined work, and to convey the resulting work. The terms of this |
||||
|
License will continue to apply to the part which is the covered work, |
||||
|
but the work with which it is combined will remain governed by version |
||||
|
3 of the GNU General Public License. |
||||
|
|
||||
|
14. Revised Versions of this License. |
||||
|
|
||||
|
The Free Software Foundation may publish revised and/or new versions of |
||||
|
the GNU Affero General Public License from time to time. Such new versions |
||||
|
will be similar in spirit to the present version, but may differ in detail to |
||||
|
address new problems or concerns. |
||||
|
|
||||
|
Each version is given a distinguishing version number. If the |
||||
|
Program specifies that a certain numbered version of the GNU Affero General |
||||
|
Public License "or any later version" applies to it, you have the |
||||
|
option of following the terms and conditions either of that numbered |
||||
|
version or of any later version published by the Free Software |
||||
|
Foundation. If the Program does not specify a version number of the |
||||
|
GNU Affero General Public License, you may choose any version ever published |
||||
|
by the Free Software Foundation. |
||||
|
|
||||
|
If the Program specifies that a proxy can decide which future |
||||
|
versions of the GNU Affero General Public License can be used, that proxy's |
||||
|
public statement of acceptance of a version permanently authorizes you |
||||
|
to choose that version for the Program. |
||||
|
|
||||
|
Later license versions may give you additional or different |
||||
|
permissions. However, no additional obligations are imposed on any |
||||
|
author or copyright holder as a result of your choosing to follow a |
||||
|
later version. |
||||
|
|
||||
|
15. Disclaimer of Warranty. |
||||
|
|
||||
|
THERE IS NO WARRANTY FOR THE PROGRAM, TO THE EXTENT PERMITTED BY |
||||
|
APPLICABLE LAW. EXCEPT WHEN OTHERWISE STATED IN WRITING THE COPYRIGHT |
||||
|
HOLDERS AND/OR OTHER PARTIES PROVIDE THE PROGRAM "AS IS" WITHOUT WARRANTY |
||||
|
OF ANY KIND, EITHER EXPRESSED OR IMPLIED, INCLUDING, BUT NOT LIMITED TO, |
||||
|
THE IMPLIED WARRANTIES OF MERCHANTABILITY AND FITNESS FOR A PARTICULAR |
||||
|
PURPOSE. THE ENTIRE RISK AS TO THE QUALITY AND PERFORMANCE OF THE PROGRAM |
||||
|
IS WITH YOU. SHOULD THE PROGRAM PROVE DEFECTIVE, YOU ASSUME THE COST OF |
||||
|
ALL NECESSARY SERVICING, REPAIR OR CORRECTION. |
||||
|
|
||||
|
16. Limitation of Liability. |
||||
|
|
||||
|
IN NO EVENT UNLESS REQUIRED BY APPLICABLE LAW OR AGREED TO IN WRITING |
||||
|
WILL ANY COPYRIGHT HOLDER, OR ANY OTHER PARTY WHO MODIFIES AND/OR CONVEYS |
||||
|
THE PROGRAM AS PERMITTED ABOVE, BE LIABLE TO YOU FOR DAMAGES, INCLUDING ANY |
||||
|
GENERAL, SPECIAL, INCIDENTAL OR CONSEQUENTIAL DAMAGES ARISING OUT OF THE |
||||
|
USE OR INABILITY TO USE THE PROGRAM (INCLUDING BUT NOT LIMITED TO LOSS OF |
||||
|
DATA OR DATA BEING RENDERED INACCURATE OR LOSSES SUSTAINED BY YOU OR THIRD |
||||
|
PARTIES OR A FAILURE OF THE PROGRAM TO OPERATE WITH ANY OTHER PROGRAMS), |
||||
|
EVEN IF SUCH HOLDER OR OTHER PARTY HAS BEEN ADVISED OF THE POSSIBILITY OF |
||||
|
SUCH DAMAGES. |
||||
|
|
||||
|
17. Interpretation of Sections 15 and 16. |
||||
|
|
||||
|
If the disclaimer of warranty and limitation of liability provided |
||||
|
above cannot be given local legal effect according to their terms, |
||||
|
reviewing courts shall apply local law that most closely approximates |
||||
|
an absolute waiver of all civil liability in connection with the |
||||
|
Program, unless a warranty or assumption of liability accompanies a |
||||
|
copy of the Program in return for a fee. |
||||
|
|
||||
|
END OF TERMS AND CONDITIONS |
||||
@ -0,0 +1,27 @@ |
|||||
|
################################################################################### |
||||
|
# |
||||
|
# Copyright (C) 2017 MuK IT GmbH |
||||
|
# |
||||
|
# This program is free software: you can redistribute it and/or modify |
||||
|
# it under the terms of the GNU Affero General Public License as |
||||
|
# published by the Free Software Foundation, either version 3 of the |
||||
|
# License, or (at your option) any later version. |
||||
|
# |
||||
|
# This program is distributed in the hope that it will be useful, |
||||
|
# but WITHOUT ANY WARRANTY; without even the implied warranty of |
||||
|
# MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the |
||||
|
# GNU Affero General Public License for more details. |
||||
|
# |
||||
|
# You should have received a copy of the GNU Affero General Public License |
||||
|
# along with this program. If not, see <http://www.gnu.org/licenses/>. |
||||
|
# |
||||
|
################################################################################### |
||||
|
|
||||
|
from . import models |
||||
|
|
||||
|
#---------------------------------------------------------- |
||||
|
# Patch System on Load |
||||
|
#---------------------------------------------------------- |
||||
|
|
||||
|
def _patch_system(): |
||||
|
from . import patch |
||||
@ -0,0 +1,54 @@ |
|||||
|
################################################################################### |
||||
|
# |
||||
|
# Copyright (C) 2017 MuK IT GmbH |
||||
|
# |
||||
|
# This program is free software: you can redistribute it and/or modify |
||||
|
# it under the terms of the GNU Affero General Public License as |
||||
|
# published by the Free Software Foundation, either version 3 of the |
||||
|
# License, or (at your option) any later version. |
||||
|
# |
||||
|
# This program is distributed in the hope that it will be useful, |
||||
|
# but WITHOUT ANY WARRANTY; without even the implied warranty of |
||||
|
# MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the |
||||
|
# GNU Affero General Public License for more details. |
||||
|
# |
||||
|
# You should have received a copy of the GNU Affero General Public License |
||||
|
# along with this program. If not, see <http://www.gnu.org/licenses/>. |
||||
|
# |
||||
|
################################################################################### |
||||
|
|
||||
|
{ |
||||
|
"name": "MuK Security", |
||||
|
"summary": """Security Features""", |
||||
|
"version": "12.0.1.1.2", |
||||
|
"category": "Extra Tools", |
||||
|
"license": "AGPL-3", |
||||
|
"website": "http://www.mukit.at", |
||||
|
"live_test_url": "https://demo.mukit.at/web/login", |
||||
|
"author": "MuK IT", |
||||
|
"contributors": [ |
||||
|
"Mathias Markl <mathias.markl@mukit.at>", |
||||
|
], |
||||
|
"depends": [ |
||||
|
"muk_utils", |
||||
|
], |
||||
|
"data": [ |
||||
|
"security/security.xml", |
||||
|
"security/ir.model.access.csv", |
||||
|
"views/access_groups.xml", |
||||
|
], |
||||
|
"qweb": [ |
||||
|
"static/src/xml/*.xml", |
||||
|
], |
||||
|
"images": [ |
||||
|
'static/description/banner.png' |
||||
|
], |
||||
|
"external_dependencies": { |
||||
|
"python": [], |
||||
|
"bin": [], |
||||
|
}, |
||||
|
"auto_install": True, |
||||
|
"application": False, |
||||
|
"installable": True, |
||||
|
"post_load": "_patch_system", |
||||
|
} |
||||
@ -0,0 +1,9 @@ |
|||||
|
`1.1.0` |
||||
|
------- |
||||
|
|
||||
|
- Updated dependencies |
||||
|
|
||||
|
`1.0.0` |
||||
|
------- |
||||
|
|
||||
|
- Init version |
||||
@ -0,0 +1,106 @@ |
|||||
|
============ |
||||
|
MuK Security |
||||
|
============ |
||||
|
|
||||
|
Technical module to provide some utility and security features that can be used |
||||
|
in other applications. This module has no direct effect on the running system. |
||||
|
|
||||
|
Installation |
||||
|
============ |
||||
|
|
||||
|
To install this module, you need to: |
||||
|
|
||||
|
Download the module and add it to your Odoo addons folder. Afterward, log on to |
||||
|
your Odoo server and go to the Apps menu. Trigger the debug mode and update the |
||||
|
list by clicking on the "Update Apps List" link. Now install the module by |
||||
|
clicking on the install button. |
||||
|
|
||||
|
Another way to install this module is via the package management for Python |
||||
|
(`PyPI <https://pypi.org/project/pip/>`_). |
||||
|
|
||||
|
To install our modules using the package manager make sure |
||||
|
`odoo-autodiscover <https://pypi.org/project/odoo-autodiscover/>`_ is installed |
||||
|
correctly. Then open a console and install the module by entering the following |
||||
|
command: |
||||
|
|
||||
|
``pip install --extra-index-url https://nexus.mukit.at/repository/odoo/simple <module>`` |
||||
|
|
||||
|
The module name consists of the Odoo version and the module name, where |
||||
|
underscores are replaced by a dash. |
||||
|
|
||||
|
**Module:** |
||||
|
|
||||
|
``odoo<version>-addon-<module_name>`` |
||||
|
|
||||
|
**Example:** |
||||
|
|
||||
|
``sudo -H pip3 install --extra-index-url https://nexus.mukit.at/repository/odoo/simple odoo11-addon-muk-utils`` |
||||
|
|
||||
|
Once the installation has been successfully completed, the app is already in the |
||||
|
correct folder. Log on to your Odoo server and go to the Apps menu. Trigger the |
||||
|
debug mode and update the list by clicking on the "Update Apps List" link. Now |
||||
|
install the module by clicking on the install button. |
||||
|
|
||||
|
The biggest advantage of this variant is that you can now also update the app |
||||
|
using the "pip" command. To do this, enter the following command in your console: |
||||
|
|
||||
|
``pip install --upgrade --extra-index-url https://nexus.mukit.at/repository/odoo/simple <module>`` |
||||
|
|
||||
|
When the process is finished, restart your server and update the application in |
||||
|
Odoo. The steps are the same as for the installation only the button has changed |
||||
|
from "Install" to "Upgrade". |
||||
|
|
||||
|
You can also view available Apps directly in our `repository <https://nexus.mukit.at/#browse/browse:odoo>`_ |
||||
|
and find a more detailed installation guide on our `website <https://mukit.at/page/open-source>`_. |
||||
|
|
||||
|
For modules licensed under OPL-1, you will receive access data when you purchase |
||||
|
the module. If the modules were not purchased directly from |
||||
|
`MuK IT <https://www.mukit.at/>`_ please contact our support (support@mukit.at) |
||||
|
with a confirmation of purchase to receive the corresponding access data. |
||||
|
|
||||
|
Upgrade |
||||
|
============ |
||||
|
|
||||
|
To upgrade this module, you need to: |
||||
|
|
||||
|
Download the module and add it to your Odoo addons folder. Restart the server |
||||
|
and log on to your Odoo server. Select the Apps menu and upgrade the module by |
||||
|
clicking on the upgrade button. |
||||
|
|
||||
|
If you installed the module using the "pip" command, you can also update the |
||||
|
module in the same way. Just type the following command into the console: |
||||
|
|
||||
|
``pip install --upgrade --extra-index-url https://nexus.mukit.at/repository/odoo/simple <module>`` |
||||
|
|
||||
|
When the process is finished, restart your server and update the application in |
||||
|
Odoo, just like you would normally. |
||||
|
|
||||
|
Configuration |
||||
|
============= |
||||
|
|
||||
|
No additional configuration is needed to use this module. |
||||
|
|
||||
|
Usage |
||||
|
============= |
||||
|
|
||||
|
This module has no direct visible effect on the system. It provide security features. |
||||
|
|
||||
|
Credits |
||||
|
======= |
||||
|
|
||||
|
Contributors |
||||
|
------------ |
||||
|
|
||||
|
* Mathias Markl <mathias.markl@mukit.at> |
||||
|
|
||||
|
Author & Maintainer |
||||
|
------------------- |
||||
|
|
||||
|
This module is maintained by the `MuK IT GmbH <https://www.mukit.at/>`_. |
||||
|
|
||||
|
MuK IT is an Austrian company specialized in customizing and extending Odoo. |
||||
|
We develop custom solutions for your individual needs to help you focus on |
||||
|
your strength and expertise to grow your business. |
||||
|
|
||||
|
If you want to get in touch please contact us via mail |
||||
|
(sale@mukit.at) or visit our website (https://mukit.at). |
||||
@ -0,0 +1,27 @@ |
|||||
|
################################################################################### |
||||
|
# |
||||
|
# Copyright (C) 2018 MuK IT GmbH |
||||
|
# |
||||
|
# This program is free software: you can redistribute it and/or modify |
||||
|
# it under the terms of the GNU Affero General Public License as |
||||
|
# published by the Free Software Foundation, either version 3 of the |
||||
|
# License, or (at your option) any later version. |
||||
|
# |
||||
|
# This program is distributed in the hope that it will be useful, |
||||
|
# but WITHOUT ANY WARRANTY; without even the implied warranty of |
||||
|
# MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the |
||||
|
# GNU Affero General Public License for more details. |
||||
|
# |
||||
|
# You should have received a copy of the GNU Affero General Public License |
||||
|
# along with this program. If not, see <http://www.gnu.org/licenses/>. |
||||
|
# |
||||
|
################################################################################### |
||||
|
|
||||
|
from . import base |
||||
|
from . import mixins_locking |
||||
|
from . import mixins_access |
||||
|
from . import mixins_access_groups |
||||
|
from . import access_groups |
||||
|
from . import ir_model_access |
||||
|
from . import res_users |
||||
|
from . import ir_rule |
||||
@ -0,0 +1,43 @@ |
|||||
|
################################################################################### |
||||
|
# |
||||
|
# Copyright (C) 2017 MuK IT GmbH |
||||
|
# |
||||
|
# This program is free software: you can redistribute it and/or modify |
||||
|
# it under the terms of the GNU Affero General Public License as |
||||
|
# published by the Free Software Foundation, either version 3 of the |
||||
|
# License, or (at your option) any later version. |
||||
|
# |
||||
|
# This program is distributed in the hope that it will be useful, |
||||
|
# but WITHOUT ANY WARRANTY; without even the implied warranty of |
||||
|
# MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the |
||||
|
# GNU Affero General Public License for more details. |
||||
|
# |
||||
|
# You should have received a copy of the GNU Affero General Public License |
||||
|
# along with this program. If not, see <http://www.gnu.org/licenses/>. |
||||
|
# |
||||
|
################################################################################### |
||||
|
|
||||
|
from odoo import models, fields, api |
||||
|
|
||||
|
class AccessGroups(models.Model): |
||||
|
|
||||
|
_name = 'muk_security.access_groups' |
||||
|
_description = "Record Access Groups" |
||||
|
_inherit = 'muk_utils.mixins.groups' |
||||
|
|
||||
|
#---------------------------------------------------------- |
||||
|
# Database |
||||
|
#---------------------------------------------------------- |
||||
|
|
||||
|
perm_read = fields.Boolean( |
||||
|
string='Read Access') |
||||
|
|
||||
|
perm_create = fields.Boolean( |
||||
|
string='Create Access') |
||||
|
|
||||
|
perm_write = fields.Boolean( |
||||
|
string='Write Access') |
||||
|
|
||||
|
perm_unlink = fields.Boolean( |
||||
|
string='Unlink Access') |
||||
|
|
||||
@ -0,0 +1,40 @@ |
|||||
|
################################################################################### |
||||
|
# |
||||
|
# Copyright (C) 2018 MuK IT GmbH |
||||
|
# |
||||
|
# This program is free software: you can redistribute it and/or modify |
||||
|
# it under the terms of the GNU Affero General Public License as |
||||
|
# published by the Free Software Foundation, either version 3 of the |
||||
|
# License, or (at your option) any later version. |
||||
|
# |
||||
|
# This program is distributed in the hope that it will be useful, |
||||
|
# but WITHOUT ANY WARRANTY; without even the implied warranty of |
||||
|
# MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the |
||||
|
# GNU Affero General Public License for more details. |
||||
|
# |
||||
|
# You should have received a copy of the GNU Affero General Public License |
||||
|
# along with this program. If not, see <http://www.gnu.org/licenses/>. |
||||
|
# |
||||
|
################################################################################### |
||||
|
|
||||
|
import logging |
||||
|
|
||||
|
from odoo import api, models, fields |
||||
|
|
||||
|
from odoo.addons.muk_security.tools.security import NoSecurityUid |
||||
|
|
||||
|
_logger = logging.getLogger(__name__) |
||||
|
|
||||
|
class Base(models.AbstractModel): |
||||
|
|
||||
|
_inherit = 'base' |
||||
|
|
||||
|
@api.model |
||||
|
def suspend_security(self, user=None): |
||||
|
return self.sudo(user=NoSecurityUid(user or self.env.uid)) |
||||
|
|
||||
|
@api.model |
||||
|
def check_field_access_rights(self, operation, fields): |
||||
|
if isinstance(self.env.uid, NoSecurityUid): |
||||
|
return fields or list(self._fields) |
||||
|
return super(Base, self).check_field_access_rights(operation, fields) |
||||
@ -0,0 +1,39 @@ |
|||||
|
################################################################################### |
||||
|
# |
||||
|
# Copyright (C) 2017 MuK IT GmbH |
||||
|
# |
||||
|
# This program is free software: you can redistribute it and/or modify |
||||
|
# it under the terms of the GNU Affero General Public License as |
||||
|
# published by the Free Software Foundation, either version 3 of the |
||||
|
# License, or (at your option) any later version. |
||||
|
# |
||||
|
# This program is distributed in the hope that it will be useful, |
||||
|
# but WITHOUT ANY WARRANTY; without even the implied warranty of |
||||
|
# MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the |
||||
|
# GNU Affero General Public License for more details. |
||||
|
# |
||||
|
# You should have received a copy of the GNU Affero General Public License |
||||
|
# along with this program. If not, see <http://www.gnu.org/licenses/>. |
||||
|
# |
||||
|
################################################################################### |
||||
|
|
||||
|
import logging |
||||
|
|
||||
|
from odoo import api, fields, models |
||||
|
from odoo import tools, _ |
||||
|
from odoo.exceptions import ValidationError |
||||
|
|
||||
|
from odoo.addons.muk_security.tools.security import NoSecurityUid |
||||
|
|
||||
|
_logger = logging.getLogger(__name__) |
||||
|
|
||||
|
class IrModelAccess(models.Model): |
||||
|
|
||||
|
_inherit = 'ir.model.access' |
||||
|
|
||||
|
@api.model |
||||
|
@tools.ormcache_context('self._uid', 'model', 'mode', 'raise_exception', keys=('lang',)) |
||||
|
def check(self, model, mode='read', raise_exception=True): |
||||
|
if isinstance(self.env.uid, NoSecurityUid): |
||||
|
return True |
||||
|
return super(IrModelAccess, self).check(model, mode=mode, raise_exception=raise_exception) |
||||
@ -0,0 +1,39 @@ |
|||||
|
################################################################################### |
||||
|
# |
||||
|
# Copyright (C) 2017 MuK IT GmbH |
||||
|
# |
||||
|
# This program is free software: you can redistribute it and/or modify |
||||
|
# it under the terms of the GNU Affero General Public License as |
||||
|
# published by the Free Software Foundation, either version 3 of the |
||||
|
# License, or (at your option) any later version. |
||||
|
# |
||||
|
# This program is distributed in the hope that it will be useful, |
||||
|
# but WITHOUT ANY WARRANTY; without even the implied warranty of |
||||
|
# MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the |
||||
|
# GNU Affero General Public License for more details. |
||||
|
# |
||||
|
# You should have received a copy of the GNU Affero General Public License |
||||
|
# along with this program. If not, see <http://www.gnu.org/licenses/>. |
||||
|
# |
||||
|
################################################################################### |
||||
|
|
||||
|
import logging |
||||
|
|
||||
|
from odoo import api, fields, models |
||||
|
from odoo import tools, _ |
||||
|
from odoo.exceptions import ValidationError |
||||
|
|
||||
|
from odoo.addons.muk_security.tools.security import NoSecurityUid |
||||
|
|
||||
|
_logger = logging.getLogger(__name__) |
||||
|
|
||||
|
class IrRule(models.Model): |
||||
|
|
||||
|
_inherit = 'ir.rule' |
||||
|
|
||||
|
@api.model |
||||
|
@tools.ormcache('self._uid', 'model_name', 'mode') |
||||
|
def _compute_domain(self, model_name, mode="read"): |
||||
|
if isinstance(self.env.uid, NoSecurityUid): |
||||
|
return None |
||||
|
return super(IrRule, self)._compute_domain(model_name, mode=mode) |
||||
@ -0,0 +1,126 @@ |
|||||
|
################################################################################### |
||||
|
# |
||||
|
# Copyright (C) 2017 MuK IT GmbH |
||||
|
# |
||||
|
# This program is free software: you can redistribute it and/or modify |
||||
|
# it under the terms of the GNU Affero General Public License as |
||||
|
# published by the Free Software Foundation, either version 3 of the |
||||
|
# License, or (at your option) any later version. |
||||
|
# |
||||
|
# This program is distributed in the hope that it will be useful, |
||||
|
# but WITHOUT ANY WARRANTY; without even the implied warranty of |
||||
|
# MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the |
||||
|
# GNU Affero General Public License for more details. |
||||
|
# |
||||
|
# You should have received a copy of the GNU Affero General Public License |
||||
|
# along with this program. If not, see <http://www.gnu.org/licenses/>. |
||||
|
# |
||||
|
################################################################################### |
||||
|
|
||||
|
import logging |
||||
|
|
||||
|
from odoo import _ |
||||
|
from odoo import models, api, fields |
||||
|
from odoo.exceptions import AccessError |
||||
|
|
||||
|
_logger = logging.getLogger(__name__) |
||||
|
|
||||
|
class AccessModel(models.AbstractModel): |
||||
|
|
||||
|
_name = 'muk_security.mixins.access' |
||||
|
_description = 'Access Mixin' |
||||
|
|
||||
|
#---------------------------------------------------------- |
||||
|
# Database |
||||
|
#---------------------------------------------------------- |
||||
|
|
||||
|
permission_read = fields.Boolean( |
||||
|
compute='_compute_permissions_read', |
||||
|
search='_search_permission_read', |
||||
|
string="Read Access") |
||||
|
|
||||
|
permission_create = fields.Boolean( |
||||
|
compute='_compute_permissions_create', |
||||
|
search='_search_permission_create', |
||||
|
string="Create Access") |
||||
|
|
||||
|
permission_write = fields.Boolean( |
||||
|
compute='_compute_permissions_write', |
||||
|
search='_search_permission_write', |
||||
|
string="Write Access") |
||||
|
|
||||
|
permission_unlink = fields.Boolean( |
||||
|
compute='_compute_permissions_unlink', |
||||
|
search='_search_permission_unlink', |
||||
|
string="Delete Access") |
||||
|
|
||||
|
#---------------------------------------------------------- |
||||
|
# Function |
||||
|
#---------------------------------------------------------- |
||||
|
|
||||
|
@api.multi |
||||
|
def check_access(self, operation, raise_exception=False): |
||||
|
try: |
||||
|
access_right = self.check_access_rights(operation, raise_exception) |
||||
|
access_rule = self.check_access_rule(operation) is None |
||||
|
return access_right and access_rule |
||||
|
except AccessError: |
||||
|
if raise_exception: |
||||
|
raise |
||||
|
return False |
||||
|
|
||||
|
#---------------------------------------------------------- |
||||
|
# Search |
||||
|
#---------------------------------------------------------- |
||||
|
|
||||
|
@api.model |
||||
|
def _search_permission_read(self, operator, operand): |
||||
|
records = self.search([]).filtered(lambda r: r.check_access('read') == True) |
||||
|
if operator == '=' and operand: |
||||
|
return [('id', 'in', records.mapped('id'))] |
||||
|
return [('id', 'not in', records.mapped('id'))] |
||||
|
|
||||
|
@api.model |
||||
|
def _search_permission_create(self, operator, operand): |
||||
|
records = self.search([]).filtered(lambda r: r.check_access('create') == True) |
||||
|
if operator == '=' and operand: |
||||
|
return [('id', 'in', records.mapped('id'))] |
||||
|
return [('id', 'not in', records.mapped('id'))] |
||||
|
|
||||
|
@api.model |
||||
|
def _search_permission_write(self, operator, operand): |
||||
|
records = self.search([]).filtered(lambda r: r.check_access('write') == True) |
||||
|
if operator == '=' and operand: |
||||
|
return [('id', 'in', records.mapped('id'))] |
||||
|
return [('id', 'not in', records.mapped('id'))] |
||||
|
|
||||
|
@api.model |
||||
|
def _search_permission_unlink(self, operator, operand): |
||||
|
records = self.search([]).filtered(lambda r: r.check_access('unlink') == True) |
||||
|
if operator == '=' and operand: |
||||
|
return [('id', 'in', records.mapped('id'))] |
||||
|
return [('id', 'not in', records.mapped('id'))] |
||||
|
|
||||
|
#---------------------------------------------------------- |
||||
|
# Read, View |
||||
|
#---------------------------------------------------------- |
||||
|
|
||||
|
@api.multi |
||||
|
def _compute_permissions_read(self): |
||||
|
for record in self: |
||||
|
record.update({'permission_read': record.check_access('read')}) |
||||
|
|
||||
|
@api.multi |
||||
|
def _compute_permissions_create(self): |
||||
|
for record in self: |
||||
|
record.update({'permission_create': record.check_access('create')}) |
||||
|
|
||||
|
@api.multi |
||||
|
def _compute_permissions_write(self): |
||||
|
for record in self: |
||||
|
record.update({'permission_write': record.check_access('write')}) |
||||
|
|
||||
|
@api.multi |
||||
|
def _compute_permissions_unlink(self): |
||||
|
for record in self: |
||||
|
record.update({'permission_unlink': record.check_access('unlink')}) |
||||
@ -0,0 +1,275 @@ |
|||||
|
################################################################################### |
||||
|
# |
||||
|
# Copyright (C) 2017 MuK IT GmbH |
||||
|
# |
||||
|
# This program is free software: you can redistribute it and/or modify |
||||
|
# it under the terms of the GNU Affero General Public License as |
||||
|
# published by the Free Software Foundation, either version 3 of the |
||||
|
# License, or (at your option) any later version. |
||||
|
# |
||||
|
# This program is distributed in the hope that it will be useful, |
||||
|
# but WITHOUT ANY WARRANTY; without even the implied warranty of |
||||
|
# MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the |
||||
|
# GNU Affero General Public License for more details. |
||||
|
# |
||||
|
# You should have received a copy of the GNU Affero General Public License |
||||
|
# along with this program. If not, see <http://www.gnu.org/licenses/>. |
||||
|
# |
||||
|
################################################################################### |
||||
|
|
||||
|
import logging |
||||
|
|
||||
|
from odoo import _, SUPERUSER_ID |
||||
|
from odoo import models, api, fields |
||||
|
from odoo.exceptions import AccessError |
||||
|
|
||||
|
from odoo.addons.muk_security.tools.security import NoSecurityUid |
||||
|
|
||||
|
_logger = logging.getLogger(__name__) |
||||
|
|
||||
|
class BaseModelAccessGroups(models.AbstractModel): |
||||
|
|
||||
|
_name = 'muk_security.mixins.access_groups' |
||||
|
_description = "MuK Access Groups Model" |
||||
|
_inherit = 'muk_security.mixins.access' |
||||
|
|
||||
|
# Set it to True to enforced security even if no group has been set |
||||
|
_strict_security = False |
||||
|
|
||||
|
# If set the group fields are restricted by the access group |
||||
|
_field_groups = None |
||||
|
|
||||
|
# If set the suspend fields are restricted by the access group |
||||
|
_suspend_groups = None |
||||
|
|
||||
|
#---------------------------------------------------------- |
||||
|
# Datebase |
||||
|
#---------------------------------------------------------- |
||||
|
|
||||
|
@api.model |
||||
|
def _add_magic_fields(self): |
||||
|
super(BaseModelAccessGroups, self)._add_magic_fields() |
||||
|
def add(name, field): |
||||
|
if name not in self._fields: |
||||
|
self._add_field(name, field) |
||||
|
model = self._name.split(".")[-1] |
||||
|
add('suspend_security_read', fields.Boolean( |
||||
|
_module=self._module, |
||||
|
string="Suspend Security for Read", |
||||
|
automatic=True, |
||||
|
default=False, |
||||
|
groups=self._suspend_groups)) |
||||
|
add('suspend_security_create', fields.Boolean( |
||||
|
_module=self._module, |
||||
|
string="Suspend Security for Create", |
||||
|
automatic=True, |
||||
|
default=False, |
||||
|
groups=self._suspend_groups)) |
||||
|
add('suspend_security_write', fields.Boolean( |
||||
|
_module=self._module, |
||||
|
string="Suspend Security for Write", |
||||
|
automatic=True, |
||||
|
default=False, |
||||
|
groups=self._suspend_groups)) |
||||
|
add('suspend_security_unlink', fields.Boolean( |
||||
|
_module=self._module, |
||||
|
string="Suspend Security for Unlink", |
||||
|
automatic=True, |
||||
|
default=False, |
||||
|
groups=self._suspend_groups)) |
||||
|
add('groups', fields.Many2many( |
||||
|
_module=self._module, |
||||
|
comodel_name='muk_security.groups', |
||||
|
relation='muk_groups_%s_rel' % model, |
||||
|
column1='aid', |
||||
|
column2='gid', |
||||
|
string="Groups", |
||||
|
automatic=True, |
||||
|
groups=self._field_groups)) |
||||
|
add('complete_groups', fields.Many2many( |
||||
|
_module=self._module, |
||||
|
comodel_name='muk_security.groups', |
||||
|
relation='muk_groups_complete_%s_rel' % model, |
||||
|
column1='aid', |
||||
|
column2='gid', |
||||
|
string="Complete Groups", |
||||
|
compute='_compute_groups', |
||||
|
store=True, |
||||
|
automatic=True, |
||||
|
groups=self._field_groups)) |
||||
|
|
||||
|
#---------------------------------------------------------- |
||||
|
# Function |
||||
|
#---------------------------------------------------------- |
||||
|
|
||||
|
@api.model |
||||
|
def _get_no_access_ids(self): |
||||
|
model = self._name.split(".")[-1] |
||||
|
if not self._strict_security: |
||||
|
sql = ''' |
||||
|
SELECT id |
||||
|
FROM %s a |
||||
|
WHERE NOT EXISTS ( |
||||
|
SELECT * |
||||
|
FROM muk_groups_complete_%s_rel r |
||||
|
WHERE r.aid = a.id |
||||
|
); |
||||
|
''' % (self._table, model) |
||||
|
self.env.cr.execute(sql) |
||||
|
fetch = self.env.cr.fetchall() |
||||
|
return len(fetch) > 0 and list(map(lambda x: x[0], fetch)) or [] |
||||
|
else: |
||||
|
return [] |
||||
|
|
||||
|
@api.model |
||||
|
def _get_suspended_access_ids(self, operation): |
||||
|
model = self._name.split(".")[-1] |
||||
|
sql = ''' |
||||
|
SELECT id |
||||
|
FROM %s a |
||||
|
WHERE a.suspend_security_%s = true |
||||
|
''' % (self._table, operation) |
||||
|
self.env.cr.execute(sql) |
||||
|
fetch = self.env.cr.fetchall() |
||||
|
return len(fetch) > 0 and list(map(lambda x: x[0], fetch)) or [] |
||||
|
|
||||
|
@api.model |
||||
|
def _get_access_ids(self): |
||||
|
model = self._name.split(".")[-1] |
||||
|
sql = ''' |
||||
|
SELECT r.aid |
||||
|
FROM muk_groups_complete_%s_rel r |
||||
|
JOIN muk_security_groups g ON r.gid = g.id |
||||
|
JOIN muk_security_groups_users_rel u ON r.gid = u.gid |
||||
|
WHERE u.uid = %s AND g.perm_read = true |
||||
|
''' % (model, self.env.user.id) |
||||
|
self.env.cr.execute(sql) |
||||
|
fetch = self.env.cr.fetchall() |
||||
|
access_ids = len(fetch) > 0 and list(map(lambda x: x[0], fetch)) or [] |
||||
|
return access_ids |
||||
|
|
||||
|
@api.model |
||||
|
def _get_ids_without_security(self, operation): |
||||
|
no_access_ids = self._get_no_access_ids() |
||||
|
suspended_access_ids = self._get_suspended_access_ids(operation) |
||||
|
return list(set(no_access_ids).union(suspended_access_ids)) |
||||
|
|
||||
|
@api.model |
||||
|
def _get_complete_access_ids(self, operation): |
||||
|
access_ids = self._get_access_ids() |
||||
|
no_access_ids = self._get_no_access_ids() |
||||
|
suspended_access_ids = self._get_suspended_access_ids(operation) |
||||
|
return list(set(access_ids).union(no_access_ids, suspended_access_ids)) |
||||
|
|
||||
|
@api.multi |
||||
|
def _eval_access_skip(self, operation): |
||||
|
if isinstance(self.env.uid, NoSecurityUid): |
||||
|
return True |
||||
|
return False |
||||
|
|
||||
|
@api.multi |
||||
|
def check_access_groups(self, operation): |
||||
|
if self.env.user.id == SUPERUSER_ID or self._eval_access_skip(operation): |
||||
|
return None |
||||
|
model = self._name.split(".")[-1] |
||||
|
filter_ids = self._get_ids_without_security(operation) |
||||
|
for record in self.filtered(lambda rec: rec.id not in filter_ids): |
||||
|
sql = ''' |
||||
|
SELECT perm_%s |
||||
|
FROM muk_groups_complete_%s_rel r |
||||
|
JOIN muk_security_groups g ON g.id = r.gid |
||||
|
JOIN muk_security_groups_users_rel u ON u.gid = g.id |
||||
|
WHERE r.aid = %s AND u.uid = %s |
||||
|
''' % (operation, model, record.id, self.env.user.id) |
||||
|
self.env.cr.execute(sql) |
||||
|
fetch = self.env.cr.fetchall() |
||||
|
if not any(list(map(lambda x: x[0], fetch))): |
||||
|
raise AccessError(_("This operation is forbidden!")) |
||||
|
|
||||
|
@api.multi |
||||
|
def check_access(self, operation, raise_exception=False): |
||||
|
res = super(BaseModelAccessGroups, self).check_access(operation, raise_exception) |
||||
|
try: |
||||
|
access_groups = self.check_access_groups(operation) == None |
||||
|
access = res and access_groups |
||||
|
if not access and raise_exception: |
||||
|
raise AccessError(_("This operation is forbidden!")) |
||||
|
return access |
||||
|
except AccessError: |
||||
|
if raise_exception: |
||||
|
raise AccessError(_("This operation is forbidden!")) |
||||
|
return False |
||||
|
|
||||
|
#---------------------------------------------------------- |
||||
|
# Read |
||||
|
#---------------------------------------------------------- |
||||
|
|
||||
|
@api.multi |
||||
|
def _after_read(self, result, *largs, **kwargs): |
||||
|
result = super(BaseModelAccessGroups, self)._after_read(result) |
||||
|
if self.env.user.id == SUPERUSER_ID or self._eval_access_skip("read"): |
||||
|
return result |
||||
|
access_ids = self._get_complete_access_ids("read") |
||||
|
result = [result] if not isinstance(result, list) else result |
||||
|
if len(access_ids) > 0: |
||||
|
access_result = [] |
||||
|
for record in result: |
||||
|
if record['id'] in access_ids: |
||||
|
access_result.append(record) |
||||
|
return access_result |
||||
|
return [] |
||||
|
|
||||
|
@api.model |
||||
|
def _after_search(self, result, *largs, **kwargs): |
||||
|
result = super(BaseModelAccessGroups, self)._after_search(result) |
||||
|
if self.env.user.id == SUPERUSER_ID or self._eval_access_skip("read"): |
||||
|
return result |
||||
|
access_ids = self._get_complete_access_ids("read") |
||||
|
if len(access_ids) > 0: |
||||
|
access_result = self.env[self._name] |
||||
|
if isinstance(result, int): |
||||
|
if result in access_ids: |
||||
|
return result |
||||
|
else: |
||||
|
for record in result: |
||||
|
if record.id in access_ids: |
||||
|
access_result += record |
||||
|
return access_result |
||||
|
return self.env[self._name] |
||||
|
|
||||
|
@api.model |
||||
|
def _after_name_search(self, result, *largs, **kwargs): |
||||
|
result = super(BaseModelAccessGroups, self)._after_name_search(result) |
||||
|
if self.env.user.id == SUPERUSER_ID or self._eval_access_skip("read"): |
||||
|
return result |
||||
|
access_ids = self._get_complete_access_ids("read") |
||||
|
if len(access_ids) > 0: |
||||
|
access_result = [] |
||||
|
for tuple in result: |
||||
|
if tuple[0] in access_ids: |
||||
|
access_result.append(tuple) |
||||
|
return access_result |
||||
|
return [] |
||||
|
|
||||
|
#---------------------------------------------------------- |
||||
|
# Read, View |
||||
|
#---------------------------------------------------------- |
||||
|
|
||||
|
@api.depends('groups') |
||||
|
def _compute_groups(self): |
||||
|
for record in self: |
||||
|
record.complete_groups = record.groups |
||||
|
|
||||
|
#---------------------------------------------------------- |
||||
|
# Create, Update, Delete |
||||
|
#---------------------------------------------------------- |
||||
|
|
||||
|
@api.multi |
||||
|
def _before_write(self, vals, *largs, **kwargs): |
||||
|
self.check_access_groups('write') |
||||
|
return super(BaseModelAccessGroups, self)._before_write(vals, *largs, **kwargs) |
||||
|
|
||||
|
@api.multi |
||||
|
def _before_unlink(self, *largs, **kwargs): |
||||
|
self.check_access_groups('unlink') |
||||
|
return super(BaseModelAccessGroups, self)._before_unlink(*largs, **kwargs) |
||||
@ -0,0 +1,96 @@ |
|||||
|
################################################################################### |
||||
|
# |
||||
|
# Copyright (C) 2017 MuK IT GmbH |
||||
|
# |
||||
|
# This program is free software: you can redistribute it and/or modify |
||||
|
# it under the terms of the GNU Affero General Public License as |
||||
|
# published by the Free Software Foundation, either version 3 of the |
||||
|
# License, or (at your option) any later version. |
||||
|
# |
||||
|
# This program is distributed in the hope that it will be useful, |
||||
|
# but WITHOUT ANY WARRANTY; without even the implied warranty of |
||||
|
# MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the |
||||
|
# GNU Affero General Public License for more details. |
||||
|
# |
||||
|
# You should have received a copy of the GNU Affero General Public License |
||||
|
# along with this program. If not, see <http://www.gnu.org/licenses/>. |
||||
|
# |
||||
|
################################################################################### |
||||
|
|
||||
|
import os |
||||
|
import hashlib |
||||
|
import logging |
||||
|
import itertools |
||||
|
|
||||
|
from odoo import _, SUPERUSER_ID |
||||
|
from odoo import models, api, fields |
||||
|
from odoo.exceptions import AccessError |
||||
|
|
||||
|
_logger = logging.getLogger(__name__) |
||||
|
|
||||
|
class LockingModel(models.AbstractModel): |
||||
|
|
||||
|
_name = 'muk_security.mixins.locking' |
||||
|
_description = 'Locking Mixin' |
||||
|
|
||||
|
#---------------------------------------------------------- |
||||
|
# Database |
||||
|
#---------------------------------------------------------- |
||||
|
|
||||
|
locked_by = fields.Many2one( |
||||
|
comodel_name='res.users', |
||||
|
string="Locked by") |
||||
|
|
||||
|
is_locked = fields.Boolean( |
||||
|
compute='_compute_locked', |
||||
|
string="Locked") |
||||
|
|
||||
|
is_lock_editor = fields.Boolean( |
||||
|
compute='_compute_locked', |
||||
|
string="Editor") |
||||
|
|
||||
|
#---------------------------------------------------------- |
||||
|
# Locking |
||||
|
#---------------------------------------------------------- |
||||
|
|
||||
|
@api.multi |
||||
|
def lock(self): |
||||
|
self.write({'locked_by': self.env.uid}) |
||||
|
|
||||
|
@api.multi |
||||
|
def unlock(self): |
||||
|
self.write({'locked_by': None}) |
||||
|
|
||||
|
@api.multi |
||||
|
def check_lock(self, *largs, **kwargs): |
||||
|
for record in self: |
||||
|
if record.locked_by.exists() and not record.locked_by.id in (self.env.uid, SUPERUSER_ID): |
||||
|
raise AccessError(_("The record (%s [%s]) is locked, by an other user.") % (record._description, record.id)) |
||||
|
|
||||
|
#---------------------------------------------------------- |
||||
|
# Read, View |
||||
|
#---------------------------------------------------------- |
||||
|
|
||||
|
@api.depends('locked_by') |
||||
|
def _compute_locked(self): |
||||
|
for record in self: |
||||
|
if record.locked_by.exists(): |
||||
|
record.update({'is_locked': True, 'is_lock_editor': record.locked_by.id == record.env.uid}) |
||||
|
else: |
||||
|
record.update({'is_locked': False, 'is_lock_editor': False}) |
||||
|
|
||||
|
#---------------------------------------------------------- |
||||
|
# Create, Update, Delete |
||||
|
#---------------------------------------------------------- |
||||
|
|
||||
|
@api.multi |
||||
|
def write(self, vals): |
||||
|
self.check_lock() |
||||
|
return super(BaseModelLocking, self).write(vals) |
||||
|
|
||||
|
|
||||
|
@api.multi |
||||
|
def unlink(self): |
||||
|
self.check_lock() |
||||
|
return super(BaseModelLocking, self).unlink() |
||||
|
|
||||
@ -0,0 +1,43 @@ |
|||||
|
################################################################################### |
||||
|
# |
||||
|
# Copyright (C) 2017 MuK IT GmbH |
||||
|
# |
||||
|
# This program is free software: you can redistribute it and/or modify |
||||
|
# it under the terms of the GNU Affero General Public License as |
||||
|
# published by the Free Software Foundation, either version 3 of the |
||||
|
# License, or (at your option) any later version. |
||||
|
# |
||||
|
# This program is distributed in the hope that it will be useful, |
||||
|
# but WITHOUT ANY WARRANTY; without even the implied warranty of |
||||
|
# MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the |
||||
|
# GNU Affero General Public License for more details. |
||||
|
# |
||||
|
# You should have received a copy of the GNU Affero General Public License |
||||
|
# along with this program. If not, see <http://www.gnu.org/licenses/>. |
||||
|
# |
||||
|
################################################################################### |
||||
|
|
||||
|
import logging |
||||
|
|
||||
|
from odoo import api, fields, models |
||||
|
from odoo import tools, _ |
||||
|
from odoo.exceptions import ValidationError |
||||
|
|
||||
|
from odoo.addons.muk_security.tools.security import NoSecurityUid |
||||
|
|
||||
|
_logger = logging.getLogger(__name__) |
||||
|
|
||||
|
class AccessUser(models.Model): |
||||
|
|
||||
|
_inherit = 'res.users' |
||||
|
|
||||
|
#---------------------------------------------------------- |
||||
|
# Functions |
||||
|
#---------------------------------------------------------- |
||||
|
|
||||
|
@classmethod |
||||
|
def _browse(cls, ids, env, prefetch=None): |
||||
|
return super(AccessUser, cls)._browse([ |
||||
|
id if not isinstance(id, NoSecurityUid) |
||||
|
else super(NoSecurityUid, id).__int__() |
||||
|
for id in ids], env, prefetch=prefetch) |
||||
@ -0,0 +1,20 @@ |
|||||
|
################################################################################### |
||||
|
# |
||||
|
# Copyright (C) 2018 MuK IT GmbH |
||||
|
# |
||||
|
# This program is free software: you can redistribute it and/or modify |
||||
|
# it under the terms of the GNU Affero General Public License as |
||||
|
# published by the Free Software Foundation, either version 3 of the |
||||
|
# License, or (at your option) any later version. |
||||
|
# |
||||
|
# This program is distributed in the hope that it will be useful, |
||||
|
# but WITHOUT ANY WARRANTY; without even the implied warranty of |
||||
|
# MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the |
||||
|
# GNU Affero General Public License for more details. |
||||
|
# |
||||
|
# You should have received a copy of the GNU Affero General Public License |
||||
|
# along with this program. If not, see <http://www.gnu.org/licenses/>. |
||||
|
# |
||||
|
################################################################################### |
||||
|
|
||||
|
from . import api |
||||
@ -0,0 +1,36 @@ |
|||||
|
################################################################################### |
||||
|
# |
||||
|
# Copyright (C) 2018 MuK IT GmbH |
||||
|
# |
||||
|
# This program is free software: you can redistribute it and/or modify |
||||
|
# it under the terms of the GNU Affero General Public License as |
||||
|
# published by the Free Software Foundation, either version 3 of the |
||||
|
# License, or (at your option) any later version. |
||||
|
# |
||||
|
# This program is distributed in the hope that it will be useful, |
||||
|
# but WITHOUT ANY WARRANTY; without even the implied warranty of |
||||
|
# MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the |
||||
|
# GNU Affero General Public License for more details. |
||||
|
# |
||||
|
# You should have received a copy of the GNU Affero General Public License |
||||
|
# along with this program. If not, see <http://www.gnu.org/licenses/>. |
||||
|
# |
||||
|
################################################################################### |
||||
|
|
||||
|
import logging |
||||
|
|
||||
|
from odoo import models, api, SUPERUSER_ID |
||||
|
|
||||
|
from odoo.addons.muk_utils.tools import patch |
||||
|
from odoo.addons.muk_security.tools import security |
||||
|
|
||||
|
_logger = logging.getLogger(__name__) |
||||
|
|
||||
|
@api.model |
||||
|
@patch.monkey_patch(api.Environment) |
||||
|
def __call__(self, cr=None, user=None, context=None): |
||||
|
env = __call__.super(self, cr, user, context) |
||||
|
if user and isinstance(user, security.NoSecurityUid): |
||||
|
env.uid = user |
||||
|
return env |
||||
|
return env |
||||
@ -0,0 +1,3 @@ |
|||||
|
id,name,model_id/id,group_id/id,perm_read,perm_write,perm_create,perm_unlink |
||||
|
|
||||
|
access_security_access_groups_user,access_security_access_groups_user,model_muk_security_access_groups,base.group_user,1,1,1 |
||||
@ -0,0 +1,45 @@ |
|||||
|
<?xml version="1.0" encoding="UTF-8"?> |
||||
|
|
||||
|
<!-- |
||||
|
Copyright (C) 2017 MuK IT GmbH |
||||
|
|
||||
|
This program is free software: you can redistribute it and/or modify |
||||
|
it under the terms of the GNU Affero General Public License as |
||||
|
published by the Free Software Foundation, either version 3 of the |
||||
|
License, or (at your option) any later version. |
||||
|
|
||||
|
This program is distributed in the hope that it will be useful, |
||||
|
but WITHOUT ANY WARRANTY; without even the implied warranty of |
||||
|
MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the |
||||
|
GNU Affero General Public License for more details. |
||||
|
|
||||
|
You should have received a copy of the GNU Affero General Public License |
||||
|
along with this program. If not, see <http://www.gnu.org/licenses/>. |
||||
|
--> |
||||
|
|
||||
|
<odoo> |
||||
|
|
||||
|
<record id="rule_security_groups_user" model="ir.rule"> |
||||
|
<field name="name">User can only edit and delete their own groups.</field> |
||||
|
<field name="model_id" ref="model_muk_security_access_groups"/> |
||||
|
<field name="groups" eval="[(4, ref('base.group_user'))]"/> |
||||
|
<field name="perm_read" eval="0"/> |
||||
|
<field name="perm_create" eval="0"/> |
||||
|
<field name="perm_write" eval="1"/> |
||||
|
<field name="perm_unlink" eval="1" /> |
||||
|
<field name="domain_force">[('create_uid','=',user.id)]</field> |
||||
|
</record> |
||||
|
|
||||
|
<record id="rule_security_groups_manager" model="ir.rule"> |
||||
|
<field name="name">Admins can edit and delete all groups.</field> |
||||
|
<field name="model_id" ref="model_muk_security_access_groups"/> |
||||
|
<field name="groups" eval="[(4, ref('base.group_erp_manager'))]"/> |
||||
|
<field name="perm_read" eval="0"/> |
||||
|
<field name="perm_create" eval="0"/> |
||||
|
<field name="perm_write" eval="1"/> |
||||
|
<field name="perm_unlink" eval="1" /> |
||||
|
<field name="domain_force">[(1 ,'=', 1)]</field> |
||||
|
</record> |
||||
|
|
||||
|
</odoo> |
||||
|
|
||||
|
After Width: 880 | Height: 440 | Size: 40 KiB |
|
After Width: 250 | Height: 250 | Size: 9.0 KiB |
@ -0,0 +1 @@ |
|||||
|
<?xml version="1.0" standalone="no"?><!-- Generator: Gravit.io --><svg xmlns="http://www.w3.org/2000/svg" xmlns:xlink="http://www.w3.org/1999/xlink" style="isolation:isolate" viewBox="0 0 250 250" width="250" height="250"><defs><clipPath id="_clipPath_3i7MpoDR4VDbpDPMXofxOgHGfdyMFk54"><rect width="250" height="250"/></clipPath></defs><g clip-path="url(#_clipPath_3i7MpoDR4VDbpDPMXofxOgHGfdyMFk54)"><rect width="250" height="250" style="fill:rgb(0,0,0)" fill-opacity="0"/><defs><filter id="zXYOgPw6ZkEtc592Q4cHUwwVTqb7NS9Z" x="-200%" y="-200%" width="400%" height="400%" filterUnits="objectBoundingBox" color-interpolation-filters="sRGB"><feOffset xmlns="http://www.w3.org/2000/svg" in="SourceGraphic" dx="0" dy="3"/><feGaussianBlur xmlns="http://www.w3.org/2000/svg" stdDeviation="2.146804531419514" result="pf_100_offsetBlur"/><feComposite xmlns="http://www.w3.org/2000/svg" in="SourceGraphic" in2="pf_100_offsetBlur" result="pf_100_inverse" operator="out"/><feFlood xmlns="http://www.w3.org/2000/svg" flood-color="#FFFFFF" flood-opacity="0.5" result="pf_100_color"/><feComposite xmlns="http://www.w3.org/2000/svg" in="pf_100_color" in2="pf_100_inverse" operator="in" result="pf_100_shadow"/><feComposite xmlns="http://www.w3.org/2000/svg" in="pf_100_shadow" in2="SourceGraphic" operator="over" result="_out_9QikyfyvmbLqL6TQmTeLGtQUwhfbo5Xj"/><feOffset xmlns="http://www.w3.org/2000/svg" in="_out_9QikyfyvmbLqL6TQmTeLGtQUwhfbo5Xj" dx="0" dy="-3"/><feGaussianBlur xmlns="http://www.w3.org/2000/svg" stdDeviation="2.146804531419514" result="pf_101_offsetBlur"/><feComposite xmlns="http://www.w3.org/2000/svg" in="_out_9QikyfyvmbLqL6TQmTeLGtQUwhfbo5Xj" in2="pf_101_offsetBlur" result="pf_101_inverse" operator="out"/><feFlood xmlns="http://www.w3.org/2000/svg" flood-color="#000000" flood-opacity="0.5" result="pf_101_color"/><feComposite xmlns="http://www.w3.org/2000/svg" in="pf_101_color" in2="pf_101_inverse" operator="in" result="pf_101_shadow"/><feComposite xmlns="http://www.w3.org/2000/svg" in="pf_101_shadow" in2="_out_9QikyfyvmbLqL6TQmTeLGtQUwhfbo5Xj" operator="over" result="_out_ZlenbM59Nxs0pJE1uAKGnYSDAIS1hnDX"/><feMerge><feMergeNode in="_out_ZlenbM59Nxs0pJE1uAKGnYSDAIS1hnDX"/></feMerge></filter></defs><g filter="url(#zXYOgPw6ZkEtc592Q4cHUwwVTqb7NS9Z)"><path d="M 15 0 L 235 0 C 243.279 0 250 6.721 250 15 L 250 235 C 250 243.279 243.279 250 235 250 L 15 250 C 6.721 250 0 243.279 0 235 L 0 15 C 0 6.721 6.721 0 15 0 Z" style="stroke:none;fill:#243742;stroke-miterlimit:10;"/></g><defs><filter id="kPJ4MSpmSusop79ZW6eDUCPXxNQVLyNp" x="-200%" y="-200%" width="400%" height="400%" filterUnits="objectBoundingBox" color-interpolation-filters="sRGB"><feGaussianBlur xmlns="http://www.w3.org/2000/svg" in="SourceGraphic" stdDeviation="2.146804531419514"/><feOffset xmlns="http://www.w3.org/2000/svg" dx="-5" dy="5" result="pf_100_offsetBlur"/><feFlood xmlns="http://www.w3.org/2000/svg" flood-color="#000000" flood-opacity="0.65"/><feComposite xmlns="http://www.w3.org/2000/svg" in2="pf_100_offsetBlur" operator="in" result="pf_100_dropShadow"/><feBlend xmlns="http://www.w3.org/2000/svg" in="SourceGraphic" in2="pf_100_dropShadow" mode="normal"/></filter></defs><g filter="url(#kPJ4MSpmSusop79ZW6eDUCPXxNQVLyNp)"><path d=" M 177.25 115.5 L 170.125 115.5 L 170.125 94.125 C 170.125 69.247 149.878 49 125 49 C 100.122 49 79.875 69.247 79.875 94.125 L 79.875 115.5 L 72.75 115.5 C 64.883 115.5 58.5 121.883 58.5 129.75 L 58.5 186.75 C 58.5 194.617 64.883 201 72.75 201 L 177.25 201 C 185.117 201 191.5 194.617 191.5 186.75 L 191.5 129.75 C 191.5 121.883 185.117 115.5 177.25 115.5 Z M 146.375 115.5 L 103.625 115.5 L 103.625 94.125 C 103.625 82.339 113.214 72.75 125 72.75 C 136.786 72.75 146.375 82.339 146.375 94.125 L 146.375 115.5 Z " id="lock" fill="rgb(255,255,255)"/></g></g></svg> |
||||
@ -0,0 +1,67 @@ |
|||||
|
<section class="oe_container"> |
||||
|
<div class="oe_row oe_spaced"> |
||||
|
<h2 class="oe_slogan">MuK Security</h2> |
||||
|
<h3 class="oe_slogan">Utility Features</h3> |
||||
|
<h4 class="oe_slogan" style="font-size: 23px;">MuK IT GmbH - |
||||
|
www.mukit.at</h4> |
||||
|
</div> |
||||
|
</section> |
||||
|
|
||||
|
<section class="oe_container"> |
||||
|
<div class="oe_row oe_spaced"> |
||||
|
<div style="max-width: 84%; margin: 16px 8%;"> |
||||
|
<h3 class="oe_slogan">Overview</h3> |
||||
|
<p class="oe_mt32">Technical module to provide some utility and |
||||
|
security features. The module is mainly used as a dependency by |
||||
|
other modules and has no direct visible effect on the system.</p> |
||||
|
</div> |
||||
|
</div> |
||||
|
</section> |
||||
|
|
||||
|
<section class="oe_container oe_dark" |
||||
|
style="margin-bottom: 20px; border-top: 5px solid #797979; border-bottom: 5px solid #797979;"> |
||||
|
<h3 class="oe_slogan" style="margin-bottom: 10px;">Demo</h3> |
||||
|
<div class="row" style="margin: auto; max-width: 250px;"> |
||||
|
<div class="col-6 col-xs-6"> |
||||
|
<h5 class="oe_slogan" style="font-size: 20px; margin: 2px;">User:</h5> |
||||
|
</div> |
||||
|
<div class="col-6 col-xs-6"> |
||||
|
<h5 class="oe_slogan" style="font-size: 20px; margin: 2px;">apps</h5> |
||||
|
</div> |
||||
|
<div class="col-6 col-xs-6"> |
||||
|
<h5 class="oe_slogan" style="font-size: 20px; margin: 2px;">Password:</h5> |
||||
|
</div> |
||||
|
<div class="col-6 col-xs-6"> |
||||
|
<h5 class="oe_slogan" style="font-size: 20px; margin: 2px;">demo</h5> |
||||
|
</div> |
||||
|
</div> |
||||
|
<div class="oe_slogan" style="margin-top: 5px;"> |
||||
|
<a class="btn btn-primary btn-lg mt8" |
||||
|
href="https://demo.mukit.at/web/login" |
||||
|
style="position: relative; overflow: hidden;"> |
||||
|
<i class="fa fa-video-camera"></i> Live Preview |
||||
|
</a> |
||||
|
</div> |
||||
|
</section> |
||||
|
|
||||
|
<section class="oe_container oe_dark"> |
||||
|
<h3 class="oe_slogan">Help and Support</h3> |
||||
|
<h5 class="oe_slogan" style="font-size: 20px;">Feel free to |
||||
|
contact us, if you need any help with your Odoo integration or |
||||
|
addiontal features.</h5> |
||||
|
<div class="oe_slogan"> |
||||
|
<a class="btn btn-primary btn-lg mt8" href="https://mukit.at"> |
||||
|
<i class="fa fa-globe"></i> Website |
||||
|
</a> |
||||
|
<a class="btn btn-primary btn-lg mt8" href="https://mukit.at/page/contactus"> |
||||
|
<i class="fa fa-phone"></i> Contact |
||||
|
</a> |
||||
|
<a class="btn btn-primary btn-lg mt8" href="https://github.com/muk-it"> |
||||
|
<i class="fa fa-github"></i> Issues |
||||
|
</a> |
||||
|
<a class="btn btn-primary btn-lg mt8" href="mailto:sale@mukit.at"> |
||||
|
<i class="fa fa-envelope"></i> Request a Feature |
||||
|
</a> |
||||
|
</div> |
||||
|
<img src="logo.png" style="width: 200px; margin-bottom: 20px; display: block;" class="mx-auto center-block"> |
||||
|
</section> |
||||
|
After Width: 500 | Height: 500 | Size: 37 KiB |
@ -0,0 +1,21 @@ |
|||||
|
################################################################################### |
||||
|
# |
||||
|
# Copyright (C) 2018 MuK IT GmbH |
||||
|
# |
||||
|
# This program is free software: you can redistribute it and/or modify |
||||
|
# it under the terms of the GNU Affero General Public License as |
||||
|
# published by the Free Software Foundation, either version 3 of the |
||||
|
# License, or (at your option) any later version. |
||||
|
# |
||||
|
# This program is distributed in the hope that it will be useful, |
||||
|
# but WITHOUT ANY WARRANTY; without even the implied warranty of |
||||
|
# MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the |
||||
|
# GNU Affero General Public License for more details. |
||||
|
# |
||||
|
# You should have received a copy of the GNU Affero General Public License |
||||
|
# along with this program. If not, see <http://www.gnu.org/licenses/>. |
||||
|
# |
||||
|
################################################################################### |
||||
|
|
||||
|
from . import test_access_groups |
||||
|
from . import test_suspend_security |
||||
@ -0,0 +1,83 @@ |
|||||
|
################################################################################### |
||||
|
# |
||||
|
# Copyright (C) 2017 MuK IT GmbH |
||||
|
# |
||||
|
# This program is free software: you can redistribute it and/or modify |
||||
|
# it under the terms of the GNU Affero General Public License as |
||||
|
# published by the Free Software Foundation, either version 3 of the |
||||
|
# License, or (at your option) any later version. |
||||
|
# |
||||
|
# This program is distributed in the hope that it will be useful, |
||||
|
# but WITHOUT ANY WARRANTY; without even the implied warranty of |
||||
|
# MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the |
||||
|
# GNU Affero General Public License for more details. |
||||
|
# |
||||
|
# You should have received a copy of the GNU Affero General Public License |
||||
|
# along with this program. If not, see <http://www.gnu.org/licenses/>. |
||||
|
# |
||||
|
################################################################################### |
||||
|
|
||||
|
import os |
||||
|
import base64 |
||||
|
import logging |
||||
|
|
||||
|
from odoo import exceptions |
||||
|
from odoo.tests import common |
||||
|
|
||||
|
_path = os.path.dirname(os.path.dirname(__file__)) |
||||
|
_logger = logging.getLogger(__name__) |
||||
|
|
||||
|
class AccessGroupsTestCase(common.TransactionCase): |
||||
|
|
||||
|
def setUp(self): |
||||
|
super(AccessGroupsTestCase, self).setUp() |
||||
|
self.user_id = self.ref('base.user_demo') |
||||
|
self.group_id = self.ref('base.group_system') |
||||
|
self.groups = self.env['muk_security.access_groups'] |
||||
|
self.group01 = self.groups.create({ |
||||
|
'name': 'Group 01', |
||||
|
'explicit_users': [(6, 0, [self.user_id])]}) |
||||
|
self.group02 = self.groups.create({ |
||||
|
'name': 'Group 02', |
||||
|
'groups': [(6, 0, [self.group_id])]}) |
||||
|
self.user = self.env['res.users'].browse(self.user_id) |
||||
|
self.group = self.env['res.groups'].browse(self.group_id) |
||||
|
|
||||
|
def tearDown(self): |
||||
|
super(AccessGroupsTestCase, self).tearDown() |
||||
|
|
||||
|
def test_access_groups_users(self): |
||||
|
count = len(self.group02.users) |
||||
|
self.group02.write({'explicit_users': [(6, 0, [self.user_id])]}) |
||||
|
self.assertTrue(len(self.group02.users) > count) |
||||
|
|
||||
|
def test_access_groups_groups(self): |
||||
|
count = len(self.group01.users) |
||||
|
self.group01.write({'groups': [(6, 0, [self.group_id])]}) |
||||
|
self.assertTrue(len(self.group01.users) > count) |
||||
|
|
||||
|
def test_access_groups_groups_group(self): |
||||
|
count = len(self.group02.users) |
||||
|
self.group.write({'users': [(4, self.user_id)]}) |
||||
|
self.assertTrue(len(self.group02.users) > count) |
||||
|
|
||||
|
def test_access_groups_groups_user(self): |
||||
|
count = len(self.group02.users) |
||||
|
self.user.write({'groups_id':[(4, self.group_id)]}) |
||||
|
self.assertTrue(len(self.group02.users) > count) |
||||
|
|
||||
|
def test_access_groups_parent(self): |
||||
|
count = len(self.group02.users) |
||||
|
self.group02.write({'parent_group': self.group01.id}) |
||||
|
self.assertTrue(len(self.group02.users) > count) |
||||
|
|
||||
|
def test_access_groups_parent_multi(self): |
||||
|
group01 = self.groups.create({'name': 'MGroup 01'}) |
||||
|
group02 = self.groups.create({'name': 'MGroup 02', 'parent_group': group01.id}) |
||||
|
group03 = self.groups.create({'name': 'MGroup 03', 'parent_group': group02.id}) |
||||
|
init_count = len(group03.users) |
||||
|
group02.write({'explicit_users': [(6, 0, [self.user_id])]}) |
||||
|
self.assertTrue(len(group03.users) > init_count) |
||||
|
updated_count = len(group03.users) |
||||
|
group01.write({'groups': [(6, 0, [self.group_id])]}) |
||||
|
self.assertTrue(len(group03.users) > updated_count) |
||||
@ -0,0 +1,48 @@ |
|||||
|
################################################################################### |
||||
|
# |
||||
|
# Copyright (C) 2017 MuK IT GmbH |
||||
|
# |
||||
|
# This program is free software: you can redistribute it and/or modify |
||||
|
# it under the terms of the GNU Affero General Public License as |
||||
|
# published by the Free Software Foundation, either version 3 of the |
||||
|
# License, or (at your option) any later version. |
||||
|
# |
||||
|
# This program is distributed in the hope that it will be useful, |
||||
|
# but WITHOUT ANY WARRANTY; without even the implied warranty of |
||||
|
# MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the |
||||
|
# GNU Affero General Public License for more details. |
||||
|
# |
||||
|
# You should have received a copy of the GNU Affero General Public License |
||||
|
# along with this program. If not, see <http://www.gnu.org/licenses/>. |
||||
|
# |
||||
|
################################################################################### |
||||
|
|
||||
|
import os |
||||
|
import base64 |
||||
|
import logging |
||||
|
|
||||
|
from odoo import exceptions |
||||
|
from odoo.tests import common |
||||
|
|
||||
|
_path = os.path.dirname(os.path.dirname(__file__)) |
||||
|
_logger = logging.getLogger(__name__) |
||||
|
|
||||
|
class SuspendSecurityTestCase(common.TransactionCase): |
||||
|
|
||||
|
def setUp(self): |
||||
|
super(SuspendSecurityTestCase, self).setUp() |
||||
|
|
||||
|
def tearDown(self): |
||||
|
super(SuspendSecurityTestCase, self).tearDown() |
||||
|
|
||||
|
def test_suspend_security(self): |
||||
|
user_id = self.env.ref('base.user_demo').id |
||||
|
tester = self.env.ref('base.user_root').sudo(user_id) |
||||
|
with self.assertRaises(exceptions.AccessError): |
||||
|
tester.write({'login': 'test'}) |
||||
|
tester.suspend_security().write({'login': 'test'}) |
||||
|
self.assertEqual(tester.login, 'test') |
||||
|
self.assertEqual(tester.write_uid.id, user_id) |
||||
|
|
||||
|
def test_normalize(self): |
||||
|
self.env['res.users'].browse(self.env['res.users'].suspend_security().env.uid) |
||||
@ -0,0 +1,20 @@ |
|||||
|
################################################################################### |
||||
|
# |
||||
|
# Copyright (C) 2018 MuK IT GmbH |
||||
|
# |
||||
|
# This program is free software: you can redistribute it and/or modify |
||||
|
# it under the terms of the GNU Affero General Public License as |
||||
|
# published by the Free Software Foundation, either version 3 of the |
||||
|
# License, or (at your option) any later version. |
||||
|
# |
||||
|
# This program is distributed in the hope that it will be useful, |
||||
|
# but WITHOUT ANY WARRANTY; without even the implied warranty of |
||||
|
# MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the |
||||
|
# GNU Affero General Public License for more details. |
||||
|
# |
||||
|
# You should have received a copy of the GNU Affero General Public License |
||||
|
# along with this program. If not, see <http://www.gnu.org/licenses/>. |
||||
|
# |
||||
|
################################################################################### |
||||
|
|
||||
|
from . import security |
||||
@ -0,0 +1,34 @@ |
|||||
|
################################################################################### |
||||
|
# |
||||
|
# Copyright (C) 2018 MuK IT GmbH |
||||
|
# |
||||
|
# This program is free software: you can redistribute it and/or modify |
||||
|
# it under the terms of the GNU Affero General Public License as |
||||
|
# published by the Free Software Foundation, either version 3 of the |
||||
|
# License, or (at your option) any later version. |
||||
|
# |
||||
|
# This program is distributed in the hope that it will be useful, |
||||
|
# but WITHOUT ANY WARRANTY; without even the implied warranty of |
||||
|
# MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the |
||||
|
# GNU Affero General Public License for more details. |
||||
|
# |
||||
|
# You should have received a copy of the GNU Affero General Public License |
||||
|
# along with this program. If not, see <http://www.gnu.org/licenses/>. |
||||
|
# |
||||
|
################################################################################### |
||||
|
|
||||
|
class NoSecurityUid(int): |
||||
|
|
||||
|
def __int__(self): |
||||
|
return self |
||||
|
|
||||
|
def __eq__(self, other): |
||||
|
if isinstance(other, int): |
||||
|
return False |
||||
|
return super(NoSecurityUid, self).__int__() == other |
||||
|
|
||||
|
def __iter__(self): |
||||
|
yield super(NoSecurityUid, self).__int__() |
||||
|
|
||||
|
def __hash__(self): |
||||
|
return super(NoSecurityUid, self).__hash__() |
||||
@ -0,0 +1,73 @@ |
|||||
|
<?xml version="1.0" encoding="UTF-8"?> |
||||
|
|
||||
|
<!-- |
||||
|
Copyright (C) 2017 MuK IT GmbH |
||||
|
|
||||
|
This program is free software: you can redistribute it and/or modify |
||||
|
it under the terms of the GNU Affero General Public License as |
||||
|
published by the Free Software Foundation, either version 3 of the |
||||
|
License, or (at your option) any later version. |
||||
|
|
||||
|
This program is distributed in the hope that it will be useful, |
||||
|
but WITHOUT ANY WARRANTY; without even the implied warranty of |
||||
|
MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the |
||||
|
GNU Affero General Public License for more details. |
||||
|
|
||||
|
You should have received a copy of the GNU Affero General Public License |
||||
|
along with this program. If not, see <http://www.gnu.org/licenses/>. |
||||
|
--> |
||||
|
|
||||
|
<odoo> |
||||
|
|
||||
|
<record id="view_security_access_groups_tree" model="ir.ui.view"> |
||||
|
<field name="name">muk_security_access_groups.tree</field> |
||||
|
<field name="model">muk_security.access_groups</field> |
||||
|
<field name="mode">primary</field> |
||||
|
<field name="inherit_id" ref="muk_utils.view_mixins_groups_tree"/> |
||||
|
<field name="arch" type="xml"> |
||||
|
<xpath expr="//field[@name='name']" position="after"> |
||||
|
<field name="perm_read" /> |
||||
|
<field name="perm_create" /> |
||||
|
<field name="perm_write" /> |
||||
|
<field name="perm_unlink" /> |
||||
|
</xpath> |
||||
|
</field> |
||||
|
</record> |
||||
|
|
||||
|
<record id="view_security_access_groups_form" model="ir.ui.view"> |
||||
|
<field name="name">muk_security_access_groups.form</field> |
||||
|
<field name="model">muk_security.access_groups</field> |
||||
|
<field name="mode">primary</field> |
||||
|
<field name="inherit_id" ref="muk_utils.view_mixins_groups_form"/> |
||||
|
<field name="arch" type="xml"> |
||||
|
<xpath expr="//group[@name='group']" position="after"> |
||||
|
<group string="Settings"> |
||||
|
<group> |
||||
|
<field name="perm_create" /> |
||||
|
<field name="perm_read" /> |
||||
|
</group> |
||||
|
<group> |
||||
|
<field name="perm_write" /> |
||||
|
<field name="perm_unlink" /> |
||||
|
</group> |
||||
|
</group> |
||||
|
</xpath> |
||||
|
<xpath expr="//page[@name='childs']//field[@name='name']" position="after"> |
||||
|
<field name="perm_read" /> |
||||
|
<field name="perm_create" /> |
||||
|
<field name="perm_write" /> |
||||
|
<field name="perm_unlink" /> |
||||
|
</xpath> |
||||
|
</field> |
||||
|
</record> |
||||
|
|
||||
|
<record id="action_security_access_groups" model="ir.actions.act_window"> |
||||
|
<field name="name">Access Groups</field> |
||||
|
<field name="res_model">muk_security.access_groups</field> |
||||
|
<field name="view_mode">tree,form</field> |
||||
|
</record> |
||||
|
|
||||
|
<menuitem id="menu_security_access_groups" name="Access Groups" |
||||
|
parent="base.menu_security" action="action_security_access_groups" /> |
||||
|
|
||||
|
</odoo> |
||||
Write
Preview
Loading…
Cancel
Save
Reference in new issue