From cb3aea9b2caeb7b8f7257bf00fbd6c5bb7dd12c6 Mon Sep 17 00:00:00 2001
From: =?UTF-8?q?C=C3=A9dric=20Krier?= <ced@b2ck.com>
Date: Fri, 30 Sep 2011 17:09:18 +0200
Subject: [PATCH] Remove default read access

issue2067
review107002
---
 party.xml    |  5 +++++
 purchase.xml | 58 +++++++++++++++++++++++++++++++++++++++++++++-------
 2 files changed, 56 insertions(+), 7 deletions(-)

diff --git a/party.xml b/party.xml
index 2f9f1985d2..4f70ba5d4f 100644
--- a/party.xml
+++ b/party.xml
@@ -14,6 +14,11 @@ this repository contains the full copyright notices and license terms. -->
             <field name="model">party.party,-1</field>
             <field name="action" ref="act_purchase_form2"/>
         </record>
+        <record model="ir.action-res.group"
+            id="act_purchase_form2-group_purchase">
+            <field name="action" ref="act_purchase_form2"/>
+            <field name="group" ref="group_purchase"/>
+        </record>
 
     </data>
 </tryton>
diff --git a/purchase.xml b/purchase.xml
index cbaeca73f7..957668fffd 100644
--- a/purchase.xml
+++ b/purchase.xml
@@ -3,8 +3,6 @@
 this repository contains the full copyright notices and license terms. -->
 <tryton>
     <data>
-        <menuitem name="Purchase" id="menu_purchase" sequence="4"/>
-
         <record model="res.group" id="group_purchase_admin">
             <field name="name">Purchase Administrator</field>
         </record>
@@ -29,6 +27,12 @@ this repository contains the full copyright notices and license terms. -->
             <field name="group" ref="group_purchase_admin"/>
         </record>
 
+        <menuitem name="Purchase" id="menu_purchase" sequence="4"/>
+        <record model="ir.ui.menu-res.group" id="menu_purchase_group_purchase">
+            <field name="menu" ref="menu_purchase"/>
+            <field name="group" ref="group_purchase"/>
+        </record>
+
         <!-- set active for 1.4 migration -->
         <menuitem name="Configuration" parent="menu_purchase"
             id="menu_configuration" sequence="0" icon="tryton-preferences"
@@ -282,6 +286,10 @@ this repository contains the full copyright notices and license terms. -->
         </record>
         <menuitem parent="menu_purchase" action="act_purchase_form"
             id="menu_purchase_form" sequence="10"/>
+        <record model="ir.ui.menu-res.group" id="menu_purchase_form_group_purchase">
+            <field name="menu" ref="menu_purchase_form"/>
+            <field name="group" ref="group_purchase"/>
+        </record>
 
         <record model="ir.action.act_window" id="act_purchase_form_draft">
             <field name="name">Draft Purchases</field>
@@ -342,7 +350,7 @@ this repository contains the full copyright notices and license terms. -->
 
         <record model="ir.model.access" id="access_purchase">
             <field name="model" search="[('model', '=', 'purchase.purchase')]"/>
-            <field name="perm_read" eval="True"/>
+            <field name="perm_read" eval="False"/>
             <field name="perm_write" eval="False"/>
             <field name="perm_create" eval="False"/>
             <field name="perm_delete" eval="False"/>
@@ -741,10 +749,10 @@ this repository contains the full copyright notices and license terms. -->
         </record>
         <record model="ir.model.access" id="access_purchase_line">
             <field name="model" search="[('model', '=', 'purchase.line')]"/>
-            <field name="perm_read" eval="True"/>
-            <field name="perm_write" eval="True"/>
-            <field name="perm_create" eval="True"/>
-            <field name="perm_delete" eval="True"/>
+            <field name="perm_read" eval="False"/>
+            <field name="perm_write" eval="False"/>
+            <field name="perm_create" eval="False"/>
+            <field name="perm_delete" eval="False"/>
         </record>
         <record model="ir.model.access" id="access_purchase_line_purchase">
             <field name="model" search="[('model', '=', 'purchase.line')]"/>
@@ -954,5 +962,41 @@ this repository contains the full copyright notices and license terms. -->
             <field name="rule_group" ref="rule_group_purchase"/>
         </record>
 
+        <record model="ir.model.access" id="access_invoice_purchase">
+            <field name="model" search="[('model', '=', 'account.invoice')]"/>
+            <field name="group" ref="group_purchase"/>
+            <field name="perm_read" eval="True"/>
+            <field name="perm_write" eval="False"/>
+            <field name="perm_create" eval="False"/>
+            <field name="perm_delete" eval="False"/>
+        </record>
+
+        <record model="ir.model.access" id="access_invoice_line_purchase">
+            <field name="model" search="[('model', '=', 'account.invoice.line')]"/>
+            <field name="group" ref="group_purchase"/>
+            <field name="perm_read" eval="True"/>
+            <field name="perm_write" eval="False"/>
+            <field name="perm_create" eval="False"/>
+            <field name="perm_delete" eval="False"/>
+        </record>
+
+        <record model="ir.model.access" id="access_move_group_purchase">
+            <field name="model" search="[('model', '=', 'stock.move')]"/>
+            <field name="group" ref="group_purchase"/>
+            <field name="perm_read" eval="True"/>
+            <field name="perm_write" eval="False"/>
+            <field name="perm_create" eval="False"/>
+            <field name="perm_delete" eval="False"/>
+        </record>
+
+        <record model="ir.model.access" id="access_shipment_in_group_purchase">
+            <field name="model" search="[('model', '=', 'stock.shipment.in')]"/>
+            <field name="group" ref="group_purchase"/>
+            <field name="perm_read" eval="True"/>
+            <field name="perm_write" eval="False"/>
+            <field name="perm_create" eval="False"/>
+            <field name="perm_delete" eval="False"/>
+        </record>
+
     </data>
 </tryton>