36 lines
1.7 KiB
XML
36 lines
1.7 KiB
XML
<?xml version="1.0" encoding="utf-8"?>
|
|
<odoo>
|
|
<data noupdate="1">
|
|
|
|
<!-- Record Rules for Rating Access Control -->
|
|
|
|
<!-- Helpdesk users can read/write ratings for helpdesk tickets -->
|
|
<record id="rating_rating_helpdesk_user_rule" model="ir.rule">
|
|
<field name="name">Helpdesk Rating: User Access</field>
|
|
<field name="model_id" ref="rating.model_rating_rating"/>
|
|
<field name="domain_force">[('res_model', '=', 'helpdesk.ticket')]</field>
|
|
<field name="groups" eval="[(4, ref('helpdesk.group_helpdesk_user'))]"/>
|
|
<field name="perm_read" eval="True"/>
|
|
<field name="perm_write" eval="True"/>
|
|
<field name="perm_create" eval="True"/>
|
|
<field name="perm_unlink" eval="False"/>
|
|
</record>
|
|
|
|
<!-- Helpdesk managers have full access to all ratings -->
|
|
<record id="rating_rating_helpdesk_manager_rule" model="ir.rule">
|
|
<field name="name">Helpdesk Rating: Manager Full Access</field>
|
|
<field name="model_id" ref="rating.model_rating_rating"/>
|
|
<field name="domain_force">[('res_model', '=', 'helpdesk.ticket')]</field>
|
|
<field name="groups" eval="[(4, ref('helpdesk.group_helpdesk_manager'))]"/>
|
|
<field name="perm_read" eval="True"/>
|
|
<field name="perm_write" eval="True"/>
|
|
<field name="perm_create" eval="True"/>
|
|
<field name="perm_unlink" eval="True"/>
|
|
</record>
|
|
|
|
<!-- Public users can only write ratings via token (handled in controller) -->
|
|
<!-- No record rule needed as controller uses sudo() with token validation -->
|
|
|
|
</data>
|
|
</odoo>
|