Merge lp:~fabien-morin/unifield-server/fm-sync_server_security into lp:unifield-server

[jftempo]

=== modified file 'bin/addons/msf_profile/data/patches.xml'
--- bin/addons/msf_profile/data/patches.xml	2016-11-18 16:55:41 +0000
+++ bin/addons/msf_profile/data/patches.xml	2016-11-25 16:46:08 +0000
@@ -1,6 +1,10 @@
 <?xml version="1.0" encoding="utf-8" ?>
 <openerp>
     <data>
+        <record id="setup_security_on_sync_server" model="patch.scripts">
+            <field name="method">setup_security_on_sync_server</field>
+        </record>
+
         <record id="us_1482" model="patch.scripts">
             <field name="method">us_1482_fix_default_code_on_msf_lines</field>
         </record>

=== modified file 'bin/addons/msf_profile/msf_profile.py'
--- bin/addons/msf_profile/msf_profile.py	2016-11-18 16:55:41 +0000
+++ bin/addons/msf_profile/msf_profile.py	2016-11-25 16:46:08 +0000
@@ -46,6 +46,29 @@
         'model': lambda *a: 'patch.scripts',
     }
 
+    def setup_security_on_sync_server(self, cr, uid, *a, **b):
+        update_module = self.pool.get('sync.server.update')
+        if not update_module:
+            # this script is exucuted on server side, update the first delete
+            return
+
+        data_obj = self.pool.get('ir.model.data')
+        group_id = data_obj.get_object_reference(cr, uid, 'base',
+                'group_erp_manager')[1]
+
+        model_obj = self.pool.get('ir.model')
+        model_list_not_to_change = ['res.users', 'res.lang', 'res.widget',
+                'res.widget.user', 'res.log', 'publisher_warranty.contract',
+                'module.module']
+        model_ids = model_obj.search(cr, uid,
+                [('model', 'not like', "ir%"),
+                 ('model', 'not in', model_list_not_to_change)])
+
+        access_obj = self.pool.get('ir.model.access')
+        no_group_access = access_obj.search(cr, uid, [('group_id', '=', False),
+            ('model_id', 'in', model_ids)])
+        access_obj.write(cr, uid, no_group_access, {'group_id': group_id})
+
     def us_1482_fix_default_code_on_msf_lines(self, cr, uid, *a, **b):
         """
         If the default code set on the MSR lines is different from the
@@ -144,7 +167,6 @@
                            (tuple(ids_chunk),))
                 start_chunk += chunk_size
 
-
     def us_1388_change_sequence_implementation(self, cr, uid, *a, **b):
         """
         change the implementation of the finance.ocb.export ir_sequence to be

=== modified file 'bin/addons/sync_server/__openerp__.py'
--- bin/addons/sync_server/__openerp__.py	2016-11-09 09:03:48 +0000
+++ bin/addons/sync_server/__openerp__.py	2016-11-25 16:46:08 +0000
@@ -29,8 +29,11 @@
     """,
     'author': 'OpenERP SA',
     'website': 'http://openerp.com',
-    'depends': ['sync_common', 'msf_tools'],
-    'init_xml': [],
+    'depends': ['sync_common', 'msf_tools', 'useability_dashboard_and_menu',
+        'sync_client', 'product_attributes', 'sale_override'],
+    'init_xml': [
+        'sync_server_menu.xml',
+        ],
     'data': [
         'sync_server_view.xml',
         'update_view.xml',

=== modified file 'bin/addons/sync_server/message_view.xml'
--- bin/addons/sync_server/message_view.xml	2016-10-03 14:36:09 +0000
+++ bin/addons/sync_server/message_view.xml	2016-11-25 16:46:08 +0000
@@ -78,7 +78,8 @@
     </record>
 
     <menuitem id="message_menu_id" name="Message Monitor"
-              parent="mon_menu" action="message_action"/>
+            groups="base.group_erp_manager"
+            parent="mon_menu" action="message_action"/>
 
   </data>
 </openerp>

=== modified file 'bin/addons/sync_server/rules_view.xml'
--- bin/addons/sync_server/rules_view.xml	2015-11-23 14:38:46 +0000
+++ bin/addons/sync_server/rules_view.xml	2016-11-25 16:46:08 +0000
@@ -242,13 +242,17 @@
             <field name="context">{'search_default_all' : 1}</field>
         </record>
 
-        <menuitem id="rules_menu" name="Rules" parent="sync_menu" sequence="20"/>
+        <menuitem id="rules_menu" name="Rules" parent="sync_menu"
+            groups="base.group_erp_manager"
+            sequence="20"/>
 
         <menuitem id="sync_rule_menu" name="Data Synchronization Rules" parent="rules_menu"
-                action="sync_rule_action" />
+            groups="base.group_erp_manager"
+            action="sync_rule_action" />
 
         <menuitem id="message_rule_menu" name="Messages Rules" parent="rules_menu"
-                action="message_rule_action" />
+            groups="base.group_erp_manager"
+            action="message_rule_action" />
 
 
        <record model="ir.ui.view" id="rule_validation_view">

=== modified file 'bin/addons/sync_server/security/ir.model.access.csv'
--- bin/addons/sync_server/security/ir.model.access.csv	2012-08-03 14:51:30 +0000
+++ bin/addons/sync_server/security/ir.model.access.csv	2016-11-25 16:46:08 +0000
@@ -1,9 +1,36 @@
 "id","name","model_id","perm_read","perm_write","perm_create","perm_unlink","group_id/id"
-"sync_read_group_id","sync_read_group","sync.server.entity_group","True","","","","sync_common.sync_read_group"
-"sync_read_group_type_id","sync_read_group_type","sync.server.group_type","True","","","","sync_common.sync_read_group"
-"sync_read_group_entity_id","sync_read_group_entity","sync.server.entity","True","","","","sync_common.sync_read_group"
-"sync_read_sync_rule_id","sync_read_sync_rule","sync_server.sync_rule","True","","","","sync_common.sync_read_group"
-"sync_read_sync_update_id","sync_read_sync_update","sync.server.update","True","","","","sync_common.sync_read_group"
-"sync_read_message_rule_id","sync_read_message_rule","sync_server.message_rule","True","","","","sync_common.sync_read_group"
-"sync_read_message_id","sync_read_message","sync.server.message","True","","","","sync_common.sync_read_group"
-
+"sync_read_sync_server_entity_group_id","sync_server_entity_user sync","sync.server.entity_group",1,0,0,0,"sync_common.sync_read_group"
+"sync_read_group_type","read_group_user sync","sync.server.group_type",1,0,0,0,"sync_common.sync_read_group"
+"sync_read_sync_server_entity","sync_read_sync_server_entity_user sync","sync.server.entity",1,1,1,1,"sync_common.sync_read_group"
+"sync_read_sync_server_entity_activity","sync_read_sync_server_entity_activity_user sync","sync.server.entity.activity",1,1,1,1,"sync_common.sync_read_group"
+"sync_read_sync_rule_id","sync_read_sync_rule","sync_server.sync_rule",1,0,0,0,"sync_common.sync_read_group"
+"sync_read_sync_update_id","sync_read_sync_update","sync.server.update",1,0,0,0,"sync_common.sync_read_group"
+"sync_read_message_rule_id","sync_read_message_rule","sync_server.message_rule",1,0,0,0,"sync_common.sync_read_group"
+"sync_read_message_id","sync_read_message","sync.server.message",1,0,0,0,"sync_common.sync_read_group"
+"access_module_ir_module_user_all","module_ir_module_user all","ir.module.module",1,0,0,0,
+"access_publisher_waranty_user_all","publisher_waranty_user all","publisher_warranty.contract",1,0,0,0,
+"access_ir_act_window_user_all","ir_act_window_user all","ir.actions.act_window",1,0,0,0,
+"access_ir_ui_view_user_all","ir_ui_view_user all","ir.ui.view",1,0,0,0,
+"access_ir_action_server_user_all","ir_action_server_user all","ir.actions.server",1,0,0,0,
+"access_res_widget_user_user_all","res_widget_user_user all","res.widget.user",1,0,0,0,
+"access_res_log_user_all","res_log_user all","res.log",1,0,0,0,
+"access_ir_ui_menu_user_all","ir_ui_menu_user all","ir.ui.menu",1,0,0,0,
+"access_sync_client_register_entity_user_all","sync_client_register_entity_user all","sync.client.register_entity",1,1,1,1,"sync_common.sync_read_group"
+"access_sync_client_update_entity_user_all","sync_client_update_entity_user all","sync.client.update_entity",1,1,1,1,"sync_common.sync_read_group"
+"access_sync_client_view_entity_id_user_all","sync_client_view_entity_id_user all","sync.client.view_entity_id",1,1,1,1,"sync_common.sync_read_group"
+"access_res_company_user_all","res_company_user all","res.company",1,0,0,0,
+"access_ir_actions_act_window_view_user_all","ir_actions_act_window_view_user all","ir.actions.act_window.view",1,0,0,0,
+"access_ir_filters_user_all","ir_filters_user all","ir.filters",1,0,0,0,
+"access_process_process_user_all","ir_process_process_user all","process.process",1,0,0,0,
+"access_process_node_user_all","ir_process_node_user all","process.node",1,0,0,0,
+"access_ir_attachment_user_all","ir_attachment_user all","ir.attachment",1,0,0,0,
+"access_ir_ui_view_sc_user_all","ir_ui_view_sc_user all","ir.ui.view_sc",1,0,0,0,
+"access_board_board_user_all","board_board_user all","board.board",1,0,0,0,
+"access_ir_ui_view_custom_user_all","ir_ui_view_custom_user all","ir.ui.view.custom",1,0,0,0,
+"access_ir_actions_actions_user_all","ir_actions_actions_user all","ir.actions.actions",1,0,0,0,
+"access_res_log_report_user_all","res_log_report_user all","res.log.report",1,0,0,0,
+"access_ir_actions_report_xml_user_all","ir_actions_report_xml_user all","ir.actions.report.xml",1,0,0,0,
+"access_ir_audittrail_log_line_user_all","ir_audittrail_log_line_user all","audittrail.log.line",1,1,1,1,"sync_common.sync_read_group"
+"access_ir_mode_data_user_all","ir_model_data_user all","ir.model.data",1,1,1,1,"sync_common.sync_read_group"
+"access_res_users_user_all","res_users_user all","res.users",1,0,0,0,
+"access_ir_translation_user_all","ir_translation_user all","ir.translation",1,0,0,0,

=== added file 'bin/addons/sync_server/sync_server_menu.xml'
--- bin/addons/sync_server/sync_server_menu.xml	1970-01-01 00:00:00 +0000
+++ bin/addons/sync_server/sync_server_menu.xml	2016-11-25 16:46:08 +0000
@@ -0,0 +1,71 @@
+<?xml version="1.0" encoding="utf-8"?>
+<openerp>
+    <data>
+        <menuitem id="sale_override.menu_localisation"
+            parent="base.menu_administration"
+            groups="base.group_extended"/>
+        <menuitem id="base.menu_administration"
+            groups="sync_common.sync_read_group"/>
+        <menuitem id="base.menu_administration_shortcut"
+            groups="base.group_erp_manager"
+            parent="base.menu_administration"/>
+        <menuitem id="base.menu_custom"
+            parent="base.menu_administration"
+            groups="base.group_extended"/>
+        <menuitem id="base.next_id_4"
+            parent="base.menu_custom"
+            groups="base.group_erp_manager"/>
+        <menuitem id="base.menu_low_workflow"
+            groups="base.group_erp_manager"
+            parent="base.next_id_4"/>
+        <menuitem id="base.menu_custom_action"
+            parent="base.menu_custom"
+            groups="base.group_extended"/>
+        <menuitem id="base.menu_config"
+            groups="base.group_erp_manager"
+            parent="base.menu_administration"/>
+        <menuitem id="base.menu_translation"
+            groups="base.group_erp_manager"
+            parent="base.menu_administration"/>
+        <menuitem id="base.menu_translation_app"
+            parent="base.menu_translation"
+            groups="base.group_extended"/>
+        <menuitem id="base.menu_translation_export"
+            groups="base.group_extended"
+            parent="base.menu_translation"/>
+        <menuitem id="base.menu_users"
+            groups="base.group_erp_manager"
+            parent="base.menu_administration"/>
+        <menuitem id="base.menu_security"
+            parent="base.menu_administration"
+            groups="base.group_extended"/>
+        <menuitem id="base.menu_management"
+            parent="base.menu_administration"
+            groups="base.group_extended"/>
+        <menuitem id="base.reporting_menu"
+            parent="base.menu_custom"
+            groups="base.group_extended"/>
+        <menuitem id="base.menu_reporting"
+            parent="base.menu_administration"
+            groups="base.group_extended"/>
+        <menuitem id="base.menu_audit"
+            groups="base.group_erp_manager"
+            parent="base.menu_reporting"/>
+        <menuitem id="base.menu_res_company_global"
+            parent="base.menu_administration"
+            groups="base.group_erp_manager"/>
+        <menuitem id="base.publisher_warranty"
+            parent="base.menu_administration"
+            groups="base.group_erp_manager"/>
+        <menuitem id="useability_dashboard_and_menu.menu_supply_config"
+            groups="base.group_erp_manager"/>
+        <menuitem id="useability_dashboard_and_menu.menu_partner"
+            groups="base.group_erp_manager"/>
+        <menuitem id="product_attributes.menu_main_product"
+            groups="base.group_erp_manager"/>
+        <menuitem id="sync_client.main_menu"
+            groups="base.group_erp_manager"/>
+        <menuitem id="sync_client.hq_monitor_main_menu"
+            groups="base.group_erp_manager"/>
+    </data>
+</openerp>

=== modified file 'bin/addons/sync_server/sync_server_view.xml'
--- bin/addons/sync_server/sync_server_view.xml	2016-11-17 16:56:18 +0000
+++ bin/addons/sync_server/sync_server_view.xml	2016-11-25 16:46:08 +0000
@@ -134,20 +134,29 @@
 
 
 
-        <menuitem id="sync_menu" name="Synchronization" parent="base.menu_administration" sequence="0"/>
-
-        <menuitem id="mon_menu" name="Monitoring" parent="sync_menu" sequence="10"/>
-
-        <menuitem id="conf_menu" name="Configuration" parent="sync_menu" sequence="90"/>
+        <menuitem id="sync_menu" name="Synchronization" parent="base.menu_administration"
+            groups="sync_common.sync_read_group"
+            sequence="0"/>
+
+        <menuitem id="mon_menu" name="Monitoring" parent="sync_menu"
+            groups="base.group_erp_manager"
+            sequence="10"/>
+
+        <menuitem id="conf_menu" name="Configuration" parent="sync_menu"
+            groups="sync_common.sync_read_group"
+            sequence="90"/>
 
         <menuitem id="entity_menu" name="Instance" parent="conf_menu" sequence="10"
-                action="entity_action"/>
+            groups="sync_common.sync_read_group"
+            action="entity_action"/>
 
         <menuitem id="group_menu" name="Groups" parent="conf_menu" sequence="20"
-                action="group_action"/>
+            groups="base.group_erp_manager"
+            action="group_action"/>
 
         <menuitem id="group_type_menu" name="Type of Group" parent="conf_menu" sequence="30"
-                action="group_type_action"/>
+            groups="base.group_erp_manager"
+            action="group_type_action"/>
 
     </data>
 </openerp>

=== modified file 'bin/addons/sync_server/update_view.xml'
--- bin/addons/sync_server/update_view.xml	2016-10-21 15:36:56 +0000
+++ bin/addons/sync_server/update_view.xml	2016-11-25 16:46:08 +0000
@@ -121,7 +121,8 @@
     </record>
 
     <menuitem id="update_menu_id" name="Data Monitor"
-              parent="mon_menu" action="update_action"/>
+            groups="base.group_erp_manager"
+            parent="mon_menu" action="update_action"/>
 
 
     <record model="ir.ui.view" id="sync_server_monitor_email_tree_view">