From 0212f8ca6a1c4ef8a8725eb18583bb8ca2204078 Mon Sep 17 00:00:00 2001
From: =?UTF-8?q?C=C3=A9dric=20Krier?= <ced@b2ck.com>
Date: Sun, 27 Oct 2013 19:36:46 +0100
Subject: [PATCH] Add default access rights

review1241002
---
 CHANGELOG |  4 +++-
 bank.py   |  2 +-
 bank.xml  | 59 +++++++++++++++++++++++++++++++++++++++++++++++++++++++
 party.xml | 17 ++++++++++++++++
 4 files changed, 80 insertions(+), 2 deletions(-)

diff --git a/CHANGELOG b/CHANGELOG
index 09550c165d..cfd28b0dc7 100644
--- a/CHANGELOG
+++ b/CHANGELOG
@@ -1,2 +1,4 @@
+* Add default access rights
+
 Version 3.0.0 - 2013-10-21
-* Initial release
\ No newline at end of file
+* Initial release
diff --git a/bank.py b/bank.py
index 0a4458ae22..6d06f920fb 100644
--- a/bank.py
+++ b/bank.py
@@ -63,7 +63,7 @@ class BankAccountNumber(ModelSQL, ModelView):
     # TODO validate IBAN
 
 
-class BankAccountParty(ModelSQL, ModelView):
+class BankAccountParty(ModelSQL):
     'Bank Account - Party'
     __name__ = 'bank.account-party.party'
     account = fields.Many2One('bank.account', 'Account',
diff --git a/bank.xml b/bank.xml
index 8762cb0886..a4e3048740 100644
--- a/bank.xml
+++ b/bank.xml
@@ -3,6 +3,18 @@
 this repository contains the full copyright notices and license terms. -->
 <tryton>
     <data>
+        <record model="res.group" id="group_bank_admin">
+            <field name="name">Bank Administration</field>
+        </record>
+        <record model="res.user-res.group" id="user_admin_group_bank_admin">
+            <field name="user" ref="res.user_admin"/>
+            <field name="group" ref="group_bank_admin"/>
+        </record>
+        <record model="res.user-res.group" id="user_trigger_group_bank_admin">
+            <field name="user" ref="res.user_trigger"/>
+            <field name="group" ref="group_bank_admin"/>
+        </record>
+
         <menuitem name="Banking" sequence="3" id="menu_banking"/>
 
         <record model="ir.ui.view" id="bank_view_form">
@@ -34,6 +46,22 @@ this repository contains the full copyright notices and license terms. -->
         <menuitem parent="menu_banking" action="act_bank_form"
             sequence="10" id="menu_bank_form"/>
 
+        <record model="ir.model.access" id="access_bank">
+            <field name="model" search="[('model', '=', 'bank')]"/>
+            <field name="perm_read" eval="True"/>
+            <field name="perm_write" eval="False"/>
+            <field name="perm_create" eval="False"/>
+            <field name="perm_delete" eval="False"/>
+        </record>
+        <record model="ir.model.access" id="access_bank_bank_admin">
+            <field name="model" search="[('model', '=', 'bank')]"/>
+            <field name="group" ref="group_bank_admin"/>
+            <field name="perm_read" eval="True"/>
+            <field name="perm_write" eval="True"/>
+            <field name="perm_create" eval="True"/>
+            <field name="perm_delete" eval="True"/>
+        </record>
+
         <record model="ir.ui.view" id="bank_account_view_form">
             <field name="model">bank.account</field>
             <field name="type">form</field>
@@ -65,6 +93,22 @@ this repository contains the full copyright notices and license terms. -->
         <menuitem parent="menu_banking" action="act_bank_account_form"
             sequence="20" id="menu_bank_account_form"/>
 
+        <record model="ir.model.access" id="access_account">
+            <field name="model" search="[('model', '=', 'bank.account')]"/>
+            <field name="perm_read" eval="True"/>
+            <field name="perm_write" eval="False"/>
+            <field name="perm_create" eval="False"/>
+            <field name="perm_delete" eval="False"/>
+        </record>
+        <record model="ir.model.access" id="access_account_bank_admin">
+            <field name="model" search="[('model', '=', 'bank.account')]"/>
+            <field name="group" ref="group_bank_admin"/>
+            <field name="perm_read" eval="True"/>
+            <field name="perm_write" eval="True"/>
+            <field name="perm_create" eval="True"/>
+            <field name="perm_delete" eval="True"/>
+        </record>
+
         <record model="ir.ui.view" id="bank_account_number_view_form">
             <field name="model">bank.account.number</field>
             <field name="type">form</field>
@@ -81,5 +125,20 @@ this repository contains the full copyright notices and license terms. -->
             <field name="name">bank_account_number_list_sequence</field>
         </record>
 
+        <record model="ir.model.access" id="access_account_number">
+            <field name="model" search="[('model', '=', 'bank.account.number')]"/>
+            <field name="perm_read" eval="True"/>
+            <field name="perm_write" eval="False"/>
+            <field name="perm_create" eval="False"/>
+            <field name="perm_delete" eval="False"/>
+        </record>
+        <record model="ir.model.access" id="access_account_number_bank_admin">
+            <field name="model" search="[('model', '=', 'bank.account.number')]"/>
+            <field name="group" ref="group_bank_admin"/>
+            <field name="perm_read" eval="True"/>
+            <field name="perm_write" eval="True"/>
+            <field name="perm_create" eval="True"/>
+            <field name="perm_delete" eval="True"/>
+        </record>
     </data>
 </tryton>
diff --git a/party.xml b/party.xml
index e5c6732c93..fdcfd5d681 100644
--- a/party.xml
+++ b/party.xml
@@ -8,5 +8,22 @@ this repository contains the full copyright notices and license terms. -->
             <field name="inherit" ref="party.party_view_form"/>
             <field name="name">party_form</field>
         </record>
+
+        <record model="ir.model.field.access" id="access_party_bank_accounts">
+            <field name="field" search="[('model.model', '=', 'party.party'), ('name', '=', 'bank_accounts')]"/>
+            <field name="perm_read" eval="True"/>
+            <field name="perm_write" eval="False"/>
+            <field name="perm_create" eval="False"/>
+            <field name="perm_delete" eval="False"/>
+        </record>
+        <record model="ir.model.field.access"
+            id="access_party_bank_accounts_bank_admin">
+            <field name="field" search="[('model.model', '=', 'party.party'), ('name', '=', 'bank_accounts')]"/>
+            <field name="group" ref="group_bank_admin"/>
+            <field name="perm_read" eval="True"/>
+            <field name="perm_write" eval="True"/>
+            <field name="perm_create" eval="True"/>
+            <field name="perm_delete" eval="True"/>
+        </record>
     </data>
 </tryton>