From 726f3ca1698ce57ab6c6f6dfa0eda9e7cd343e96 Mon Sep 17 00:00:00 2001
From: "pawan.sharma" <pawan.sharma@sunarctechnologies.com>
Date: Fri, 7 Oct 2022 18:24:12 +0530
Subject: [PATCH] add internaluser condition in project user secruity group

---
 cor_custom/security/cor_custom_security.xml | 128 ++++++++++++--------
 1 file changed, 76 insertions(+), 52 deletions(-)

diff --git a/cor_custom/security/cor_custom_security.xml b/cor_custom/security/cor_custom_security.xml
index 8ecd9a9..fe044f1 100755
--- a/cor_custom/security/cor_custom_security.xml
+++ b/cor_custom/security/cor_custom_security.xml
@@ -1,24 +1,46 @@
 <?xml version="1.0" encoding="utf-8"?>
 <odoo>
+    <function name="write" model="ir.model.data">
+        <function name="search" model="ir.model.data">
+            <value eval="[('module','=','project'),('name','=','project_public_members_rule')]"/>
+        </function>
+        <value eval="{'noupdate': False}"/>
+    </function>
+    <!-- Overide Project user group record rule-->
+    <record model="ir.rule" id="project.project_public_members_rule">
+        <field name="name">Project: Only invited users</field>
+        <field name="model_id" ref="model_project_project"/>
+        <field name="domain_force">[
+            '|', '|',
+            ('privacy_visibility', '!=', 'followers'),
+            ('allowed_internal_user_ids', 'in', user.ids),
+            ('sale_line_employee_ids.employee_id.user_id', 'in', user.ids),
+            ]
+        </field>
+        <field name="groups" eval="[(4, ref('base.group_user'))]"/>
+    </record>
+
+
+    <!-- -->
 
     <!-- Note using code overriding menu in code (not working) so these below features will add using ODOO UI -->
 
-     <!--<record id="group_show_hr_discuss_group" model="res.groups">
-        <field name="name">Show Discuss Menu</field>
-        <field name="comment">Show Discuss Menu related user group</field>
-    </record>
+    <!--<record id="group_show_hr_discuss_group" model="res.groups">
+       <field name="name">Show Discuss Menu</field>
+       <field name="comment">Show Discuss Menu related user group</field>
+   </record>
 
-     <record id="group_show_hr_contact_group" model="res.groups">
-        <field name="name">Show Contact Menu</field>
-        <field name="comment">Show Contact Menu related user group</field>
-        <field name="users" eval="[(4, ref('base.user_root')), (4, ref('base.user_admin'))]"/>
-    </record>
+    <record id="group_show_hr_contact_group" model="res.groups">
+       <field name="name">Show Contact Menu</field>
+       <field name="comment">Show Contact Menu related user group</field>
+       <field name="users" eval="[(4, ref('base.user_root')), (4, ref('base.user_admin'))]"/>
+   </record>
 
-    <record id="group_show_hr_menu_group" model="res.groups">
-        <field name="name">Show HR Menu</field>
-        <field name="comment">Show HR Menu related user group</field>
-        <field name="users" eval="[(4, ref('base.user_root')), (4, ref('base.user_admin'))]"/>
-    </record>-->
+   <record id="group_show_hr_menu_group" model="res.groups">
+       <field name="name">Show HR Menu</field>
+       <field name="comment">Show HR Menu related user group</field>
+       <field name="users" eval="[(4, ref('base.user_root')), (4, ref('base.user_admin'))]"/>
+   </record>-->
 
     <!--<record id="project.group_project_manager" model="res.groups">
         <field name="name">Manager</field>
@@ -27,19 +49,19 @@
         <field name="users" eval="[(4, ref('base.user_root')), (4, ref('base.user_admin'))]"/>
     </record>-->
 
-   <!-- <record id="group_project_cor_admin" model="res.groups">
-        <field name="name">Cor Custom</field>
-        <field name="category_id" ref="base.module_category_services_project"/>
-        <field name="implied_ids" eval="[(4, ref('project.group_project_manager'))]"/>
-        <field name="users" eval="[(4, ref('base.user_root')), (4, ref('base.user_admin'))]"/>
-    </record> -->
+    <!-- <record id="group_project_cor_admin" model="res.groups">
+         <field name="name">Cor Custom</field>
+         <field name="category_id" ref="base.module_category_services_project"/>
+         <field name="implied_ids" eval="[(4, ref('project.group_project_manager'))]"/>
+         <field name="users" eval="[(4, ref('base.user_root')), (4, ref('base.user_admin'))]"/>
+     </record> -->
 
 
     <function name="write" model="ir.model.data">
         <function name="search" model="ir.model.data">
             <value eval="[('module','=','hr_timesheet'),('name','=','timesheet_line_rule_user')]"/>
         </function>
-        <value eval="{'noupdate': False}" />
+        <value eval="{'noupdate': False}"/>
     </function>
 
 
@@ -50,12 +72,13 @@
             ('user_id', '=', user.id),
             ('project_id', '!=', False),
             '|', '|','|',
-                ('project_id.privacy_visibility', '!=', 'followers'),
-                ('project_id.allowed_internal_user_ids', 'in', user.ids),
-                ('task_id.allowed_user_ids', 'in', user.ids),
-                ('project_id.sale_line_employee_ids.employee_id.user_id', 'in', user.ids),
+            ('project_id.privacy_visibility', '!=', 'followers'),
+            ('project_id.allowed_internal_user_ids', 'in', user.ids),
+            ('task_id.allowed_user_ids', 'in', user.ids),
+            ('project_id.sale_line_employee_ids.employee_id.user_id', 'in', user.ids),
 
-        ]</field>
+            ]
+        </field>
         <field name="groups" eval="[(4, ref('hr_timesheet.group_hr_timesheet_user'))]"/>
     </record>
 
@@ -64,20 +87,21 @@
         <function name="search" model="ir.model.data">
             <value eval="[('module','=','hr_timesheet'),('name','=','timesheet_line_rule_approver')]"/>
         </function>
-        <value eval="{'noupdate': False}" />
+        <value eval="{'noupdate': False}"/>
     </function>
 
     <record id="hr_timesheet.timesheet_line_rule_approver" model="ir.rule">
         <field name="name">account.analytic.line.timesheet.approver</field>
-        <field name="model_id" ref="analytic.model_account_analytic_line" />
+        <field name="model_id" ref="analytic.model_account_analytic_line"/>
         <field name="domain_force">[
             ('project_id', '!=', False),
             '|','|',
-                ('project_id.privacy_visibility', '!=', 'followers'),
-                ('project_id.allowed_internal_user_ids', 'in', user.ids),
-                ('project_id.sale_line_employee_ids.employee_id.user_id', 'in', user.ids),
-        ]</field>
-        <field name="groups" eval="[(4, ref('hr_timesheet.group_hr_timesheet_approver'))]" />
+            ('project_id.privacy_visibility', '!=', 'followers'),
+            ('project_id.allowed_internal_user_ids', 'in', user.ids),
+            ('project_id.sale_line_employee_ids.employee_id.user_id', 'in', user.ids),
+            ]
+        </field>
+        <field name="groups" eval="[(4, ref('hr_timesheet.group_hr_timesheet_approver'))]"/>
     </record>
 
     <!-- <function name="write" model="ir.model.data">
@@ -109,19 +133,19 @@
         <field name="groups" eval="[(4,ref('project.group_project_manager'))]"/>
     </record> -->
 
-   <!-- <record model="ir.rule" id="project_project_all_admin_rule">
-        <field name="name">Project: project manager: see all</field>
-        <field name="model_id" ref="model_project_project"/>
-        <field name="domain_force">[(1, '=', 1)]</field>
-        <field name="groups" eval="[(4,ref('group_project_cor_admin'))]"/>
-    </record>
+    <!-- <record model="ir.rule" id="project_project_all_admin_rule">
+         <field name="name">Project: project manager: see all</field>
+         <field name="model_id" ref="model_project_project"/>
+         <field name="domain_force">[(1, '=', 1)]</field>
+         <field name="groups" eval="[(4,ref('group_project_cor_admin'))]"/>
+     </record>
 
-    <record model="ir.rule" id="project_project_all_project_tasks_admin_rule">
-        <field name="name">Project/Task: project manager: see all</field>
-        <field name="model_id" ref="model_project_task"/>
-        <field name="domain_force">[(1, '=', 1)]</field>
-        <field name="groups" eval="[(4,ref('group_project_cor_admin'))]"/>
-    </record> -->
+     <record model="ir.rule" id="project_project_all_project_tasks_admin_rule">
+         <field name="name">Project/Task: project manager: see all</field>
+         <field name="model_id" ref="model_project_task"/>
+         <field name="domain_force">[(1, '=', 1)]</field>
+         <field name="groups" eval="[(4,ref('group_project_cor_admin'))]"/>
+     </record> -->
 
     <record model="ir.rule" id="project_view_consultant_user_own_rule">
         <field name="name">Project: view Consultant: Own User</field>
@@ -137,12 +161,12 @@
         <field name="groups" eval="[(4,ref('project.group_project_manager'))]"/>
     </record>
 
-   <!-- [('project_id.user_id','=',user.id)]
-    <record model="ir.rule" id="project_view_consultant_admin_rrule">
-        <field name="name">Project: view Consultant: all User</field>
-        <field name="model_id" ref="model_project_consultant_hrs_report"/>
-        <field name="domain_force">[(1,'=',1)]</field>
-        <field name="groups" eval="[(4,ref('group_project_cor_admin'))]"/>
-    </record>-->
+    <!-- [('project_id.user_id','=',user.id)]
+     <record model="ir.rule" id="project_view_consultant_admin_rrule">
+         <field name="name">Project: view Consultant: all User</field>
+         <field name="model_id" ref="model_project_consultant_hrs_report"/>
+         <field name="domain_force">[(1,'=',1)]</field>
+         <field name="groups" eval="[(4,ref('group_project_cor_admin'))]"/>
+     </record>-->
 
 </odoo>