[IMP] product_assortment: Add security group to only show assortments…

… to managers

TT51064

product_assortment/__manifest__.py

@@ -14,6 +14,7 @@
     "depends": ["base", "product"],
     "data": [
         "data/ir_cron.xml",
+        "security/product_assortment_security.xml",
         "views/product_assortment.xml",
         "views/res_partner_view.xml",
     ],

product_assortment/models/__init__.py

@@ -1,2 +1,3 @@
 from . import ir_filters
+from . import ir_rule
 from . import res_partner

product_assortment/models/ir_rule.py

@@ -0,0 +1,36 @@
+# Copyright 2024 Tecnativa - Sergio Teruel
+# License AGPL-3 - See https://www.gnu.org/licenses/agpl-3.0.html
+
+from odoo import api, models, tools
+from odoo.osv import expression
+from odoo.tools import config
+
+
+class IrRule(models.Model):
+    _inherit = "ir.rule"
+
+    @api.model
+    @tools.conditional(
+        "xml" not in config["dev_mode"],
+        tools.ormcache(
+            "self.env.uid",
+            "self.env.su",
+            "model_name",
+            "mode",
+            "tuple(self._compute_domain_context_values())",
+        ),
+    )
+    def _compute_domain(self, model_name, mode="read"):
+        """Inject extra domain for restricting filter (Assortments) when the user
+        has not the group 'Product Assortment Manager'.
+        """
+        res = super()._compute_domain(model_name, mode=mode)
+        user = self.env.user
+        if model_name == "ir.filters" and not self.env.su:
+            if not user.has_group(
+                "product_assortment.group_product_assortment_manager"
+            ):
+                extra_domain = [("is_assortment", "=", False)]
+                extra_domain = expression.normalize_domain(extra_domain)
+                res = expression.AND([extra_domain] + [res])
+        return res

product_assortment/security/product_assortment_security.xml

@@ -0,0 +1,18 @@
+<?xml version="1.0" encoding="utf-8" ?>
+<odoo noupdate="1">
+    <record id="group_product_assortment_manager" model="res.groups">
+        <field name="name">Product Assortment Manager</field>
+        <field name="comment">Access to all product assortment</field>
+    </record>
+
+    <record id="ir_filters_product_assortment_rule" model="ir.rule">
+        <field name="name">ir.filters.product.assortment.manager.rule</field>
+        <field name="model_id" ref="model_ir_filters" />
+        <field name="domain_force">[('is_assortment','=', True)]</field>
+        <field
+            name="groups"
+            eval="[Command.link(ref('product_assortment.group_product_assortment_manager'))]"
+        />
+        <field name="perm_unlink" eval="False" />
+    </record>
+</odoo>

product_assortment/views/product_assortment.xml

@@ -122,6 +122,7 @@
         name="Product Assortment"
         id="menu_product_assortments"
         action="actions_product_assortment_view"
+        groups="product_assortment.group_product_assortment_manager"
         sequence="5"
         web_icon="product_assortment,static/description/icon.png"
     />

product_assortment/views/res_partner_view.xml

@@ -11,6 +11,7 @@
                     name="action_define_product_assortment"
                     icon="fa-pencil"
                     type="object"
+                    groups="product_assortment.group_product_assortment_manager"
                 >
                     <span class="o_stat_text">Product Assortments</span>
                 </button>