From ae694bb47c44679282b8ad1561da39e006779f09 Mon Sep 17 00:00:00 2001
From: =?UTF-8?q?C=C3=A9dric=20Krier?= <ced@b2ck.com>
Date: Thu, 8 Sep 2022 13:21:18 +0200
Subject: [PATCH] Limit access to administration group

issue11666
review447231003
---
 country.xml | 48 ++++++++++++++++++++++++++++++++++++++++++++++++
 1 file changed, 48 insertions(+)

diff --git a/country.xml b/country.xml
index b41f30de04..55d22192f7 100644
--- a/country.xml
+++ b/country.xml
@@ -44,6 +44,22 @@ this repository contains the full copyright notices and license terms. -->
             <field name="group" ref="res.group_admin"/>
         </record>
 
+        <record model="ir.model.access" id="access_country">
+            <field name="model" search="[('model', '=', 'country.country')]"/>
+            <field name="perm_read" eval="True"/>
+            <field name="perm_write" eval="False"/>
+            <field name="perm_create" eval="False"/>
+            <field name="perm_delete" eval="False"/>
+        </record>
+        <record model="ir.model.access" id="access_country_admin">
+            <field name="model" search="[('model', '=', 'country.country')]"/>
+            <field name="group" ref="res.group_admin"/>
+            <field name="perm_read" eval="True"/>
+            <field name="perm_write" eval="True"/>
+            <field name="perm_create" eval="True"/>
+            <field name="perm_delete" eval="True"/>
+        </record>
+
         <record model="ir.ui.view" id="subdivision_view_form">
             <field name="model">country.subdivision</field>
             <field name="type">form</field>
@@ -55,6 +71,22 @@ this repository contains the full copyright notices and license terms. -->
             <field name="name">subdivision_tree</field>
         </record>
 
+        <record model="ir.model.access" id="access_subdivision">
+            <field name="model" search="[('model', '=', 'country.subdivision')]"/>
+            <field name="perm_read" eval="True"/>
+            <field name="perm_write" eval="False"/>
+            <field name="perm_create" eval="False"/>
+            <field name="perm_delete" eval="False"/>
+        </record>
+        <record model="ir.model.access" id="access_subdivision_admin">
+            <field name="model" search="[('model', '=', 'country.subdivision')]"/>
+            <field name="group" ref="res.group_admin"/>
+            <field name="perm_read" eval="True"/>
+            <field name="perm_write" eval="True"/>
+            <field name="perm_create" eval="True"/>
+            <field name="perm_delete" eval="True"/>
+        </record>
+
         <record model="ir.ui.view" id="postal_code_view_form">
             <field name="model">country.postal_code</field>
             <field name="type">form</field>
@@ -87,5 +119,21 @@ this repository contains the full copyright notices and license terms. -->
             <field name="model">country.country,-1</field>
             <field name="action" ref="act_postal_code_form"/>
         </record>
+
+        <record model="ir.model.access" id="access_postal_code">
+            <field name="model" search="[('model', '=', 'country.postal_code')]"/>
+            <field name="perm_read" eval="True"/>
+            <field name="perm_write" eval="False"/>
+            <field name="perm_create" eval="False"/>
+            <field name="perm_delete" eval="False"/>
+        </record>
+        <record model="ir.model.access" id="access_postal_code_admin">
+            <field name="model" search="[('model', '=', 'country.postal_code')]"/>
+            <field name="group" ref="res.group_admin"/>
+            <field name="perm_read" eval="True"/>
+            <field name="perm_write" eval="True"/>
+            <field name="perm_create" eval="True"/>
+            <field name="perm_delete" eval="True"/>
+        </record>
     </data>
 </tryton>