odoo权限

ir.model.access.csv文件这里注意，用户和经理的写法

id,name,model_id:id,group_id:id,perm_read,perm_write,perm_create,perm_unlink

access_demo_contract_lx,demo.contract.lx,model_demo_contract_lx,group_contract_user,1,0,0,0
access_demo_contract_lx_manager,demo.contract.lx,model_demo_contract_lx,group_contract_manager,1,1,1,1

access_settle_account,settle.account,model_settle_account,group_contract_user,1,0,0,0
access_settle_account_manager,settle.account,model_settle_account,group_contract_manager,1,1,1,1

access_settle_account_line,settle.account.line,model_settle_account_line,group_contract_user,1,0,0,0
access_settle_account_line_manager,settle.account.line,model_settle_account_line,group_contract_manager,1,1,1,1

access_sigining_contract,sigining.contract,model_sigining_contract,group_contract_user,1,0,0,0
access_sigining_contract_manager,sigining.contract,model_sigining_contract,group_contract_manager,1,1,1,1

access_pay_type,pay.type,model_pay_type,group_contract_user,1,0,0,0
access_pay_type_manager,pay.type,model_pay_type,group_contract_manager,1,1,1,1

安全文件

<?xml version="1.0" encoding="utf-8"?>
<openerp>
    <!--其中这一段，是文件定义组和组对菜单的访问权限-->
    <!--Noupdate 表示，当模块升级时是否更新本条数据。-->
    <!--对于demo 数据，通常设置成noupdate=”1”，即不更新，不指定noupdate 的话，默认值是noupdate=”0”。-->
      <data noupdate="0">
       <record id="model_category_contract_management" model="ir.module.category"> <!--分类总的model为固定model   id是自己取的-->
           <field name="name">合同</field>  <!--哪个模块的分类-->
           <field name="sequence">16</field>
       </record>
       <record id="group_contract_user" model="res.groups"><!--model代表你自己要限制权限的哪个文件名-->
           <field name="name">用户</field>
           <field name="category_id" ref="model_category_contract_management"/><!--category_id 指定此组属于哪个应用程序（模块）-->
           <field name="implied_ids" eval="[(4, ref('base.group_user'))]"/>
       </record>
       <record id="group_contract_manager" model="res.groups">
           <field name="name">经理</field>
           <field name="category_id" ref="model_category_contract_management"/>
           <field name="implied_ids" eval="[(4,ref('group_contract_user'))]"/> <!--包含-->
           <field name="users" eval="[(4,ref('base.user_root'))]"/> <!--超级用户权限--><!--users 指定了组里面的用户，这里表示把admin用户添加到该组-->
       </record>

    </data>
</openerp>

一个完整的权限例子：各部门都要有各部门的权限：

<?xml version="1.0" encoding="utf-8"?>
<openerp>
   <!--其中这一段，是文件定义组和组对菜单的访问权限-->
    <!--Noupdate 表示，当模块升级时是否更新本条数据。-->
    <!--对于demo 数据，通常设置成noupdate=”1”，即不更新，不指定noupdate 的话，默认值是noupdate=”0”。-->
      <data noupdate="0">
       <record id="model_demo_mrp" model="ir.module.category"> <!--分类总的model为固定model   id是自己取的-->
           <field name="name">demo_mrp</field>  <!--哪个模块的分类-->
           <field name="sequence">22</field>
       </record>

       <record id="group_demo_mrp_user_io" model="res.groups"><!--model代表你自己要限制权限的哪个文件名-->
           <field name="name">仓库</field>
           <field name="implied_ids" eval="[(4, ref('base.group_user'))]"/>
           <field name="category_id" ref="model_demo_mrp"/>
       </record>

      <record id="group_demo_mrp_manager_io" model="res.groups"><!--model代表你自己要限制权限的哪个文件名-->
           <field name="name">仓库经理</field>
           <field name="implied_ids" eval="[(4, ref('group_demo_mrp_user_io'))]"/>
           <field name="category_id" ref="model_demo_mrp"/>
      </record>

      <record id="group_demo_mrp_user_bussiness" model="res.groups"><!--model代表你自己要限制权限的哪个文件名-->
           <field name="name">业务部</field>
           <field name="implied_ids" eval="[(4, ref('base.group_user'))]"/>
           <field name="category_id" ref="model_demo_mrp"/>
      </record>

      <record id="group_demo_mrp_manager_bussiness" model="res.groups"><!--model代表你自己要限制权限的哪个文件名-->
           <field name="name">业务部经理</field>
           <field name="implied_ids" eval="[(4, ref('group_demo_mrp_user_bussiness'))]"/>
           <field name="category_id" ref="model_demo_mrp"/>
      </record>

      <record id="group_demo_mrp_user_drawn" model="res.groups"><!--model代表你自己要限制权限的哪个文件名-->
           <field name="name">绘图部</field>
           <field name="implied_ids" eval="[(4, ref('base.group_user'))]"/>
           <field name="category_id" ref="model_demo_mrp"/>
      </record>

      <record id="group_demo_mrp_manager_drawn" model="res.groups"><!--model代表你自己要限制权限的哪个文件名-->
           <field name="name">绘图部经理</field>
           <field name="implied_ids" eval="[(4, ref('group_demo_mrp_user_drawn'))]"/>
           <field name="category_id" ref="model_demo_mrp"/>
      </record>

      <record id="group_mrp_manager_man" model="res.groups">
           <field name="name">超级用户</field>
           <field name="category_id" ref="model_demo_mrp"/>
           <!--<field name="implied_ids" eval="[(4, ref('group_demo_mrp_user_bussiness'))]"/>-->
           <field name="implied_ids" eval="[((4,ref('group_demo_mrp_user_bussiness')),(4,ref('group_demo_mrp_user_drawn')),(4,ref('group_demo_mrp_user_io')),(4,ref('group_demo_mrp_manager_bussiness')),(4,ref('group_demo_mrp_manager_io')),(4,ref('group_demo_mrp_manager_drawn')))]"/> <!--包含-->
           <field name="users" eval="[(4,ref('base.user_root'))]"/><!--超级用户权限--><!--users 指定了组里面的用户，这里表示把admin用户添加到该组-->
      </record>

    </data>
</openerp>

id,name,model_id:id,group_id:id,perm_read,perm_write,perm_create,perm_unlink
access_unit,unit,model_unit,group_mrp_manager_man,1,1,1,1
access_profin_application,profin.application,model_profin_application,group_demo_mrp_user_io,1,0,0,0
access_proofing_process,proofing.process,model_proofing_process,group_demo_mrp_user_io,1,0,0,0
access_new_nversion,new.nversion,model_new_nversion,group_demo_mrp_user_io,1,0,0,0
access_create_versionzhi,create.versionzhi,model_create_versionzhi,group_demo_mrp_user_io,1,0,0,0
access_prodtion_lc,prodtion.lc,model_prodtion_lc,group_demo_mrp_user_io,1,0,0,0
access_outg_process,outg.process,model_outg_process,group_demo_mrp_user_io,1,0,0,0
access_product_instock,product.instock,model_product_instock,group_demo_mrp_user_io,1,1,1,1
access_finishp_out,finishp.out,model_finishp_out,group_demo_mrp_user_io,1,1,1,1
access_product_require,product.require,model_product_require,group_demo_mrp_user_io,1,1,1,1
access_market_sort,market.sort,model_market_sort,group_demo_mrp_user_io,1,1,1,1
access_machine_model,machine.model,model_machine_model,group_demo_mrp_user_io,1,1,1,1
access_shb_mc,shb.mc,model_shb_mc,group_demo_mrp_user_io,1,1,1,1
access_trademark_type,trademark.type,model_trademark_type,group_demo_mrp_user_io,1,0,0,0
access_unit,unit,model_unit,group_demo_mrp_user_io,1,1,1,1
access_product_instock_line,product.instock.line,model_product_instock_line,group_demo_mrp_user_io,1,1,1,1
access_product_instock_order,product.instock.order,model_product_instock_order,group_demo_mrp_user_io,1,1,1,1
access_finishp_out_line,finishp.out.line,model_finishp_out_line,group_demo_mrp_user_io,1,1,1,1
access_profin_application_1,profin.application,model_profin_application,group_demo_mrp_user_drawn,1,0,0,0
access_proofing_process_1,proofing.process,model_proofing_process,group_demo_mrp_user_drawn,1,1,1,1
access_new_nversion_1,new.nversion,model_new_nversion,group_demo_mrp_user_drawn,1,0,0,0
access_create_versionzhi_1,create.versionzhi,model_create_versionzhi,group_demo_mrp_user_drawn,1,0,0,0
access_prodtion_lc_1,prodtion.lc,model_prodtion_lc,group_demo_mrp_user_drawn,1,0,0,0
access_outg_process_1,outg.process,model_outg_process,group_demo_mrp_user_drawn,1,0,0,0
access_product_instock_1,product.instock,model_product_instock,group_demo_mrp_user_drawn,1,1,1,1
access_finishp_out_1,finishp.out,model_finishp_out,group_demo_mrp_user_drawn,1,1,1,1          #对与同一表单，不同部门权限，名称不能重复，必须唯一
access_product_require_1,product.require,model_product_require,group_demo_mrp_user_drawn,1,1,1,1
access_market_sort_1,market.sort,model_market_sort,group_demo_mrp_user_drawn,1,1,1,1
access_machine_model_1,machine.model,model_machine_model,group_demo_mrp_user_drawn,1,1,1,1
access_shb_mc_1,shb.mc,model_shb_mc,group_demo_mrp_user_drawn,1,1,1,1
access_trademark_type_1,trademark.type,model_trademark_type,group_demo_mrp_user_drawn,1,0,0,0
access_unit_1,unit,model_unit,group_demo_mrp_user_drawn,1,1,1,1
access_proofing_process_line_1,proofing.process.line,model_proofing_process_line,group_demo_mrp_user_drawn,1,1,1,1
access_profin_application_2,profin.application,model_profin_application,group_demo_mrp_user_bussiness,1,1,1,1
access_proofing_process_2,proofing.process,model_proofing_process,group_demo_mrp_user_bussiness,1,0,0,0
access_new_nversion_2,new.nversion,model_new_nversion,group_demo_mrp_user_bussiness,1,1,1,1
access_create_versionzhi_2,create.versionzhi,model_create_versionzhi,group_demo_mrp_user_bussiness,1,1,1,1
access_prodtion_lc_2,prodtion.lc,model_prodtion_lc,group_demo_mrp_user_bussiness,1,1,1,1
access_prodtion_lc_line_2,prodtion.lc.line,model_prodtion_lc_line,group_demo_mrp_user_bussiness,1,1,1,1
access_fen_vernum_2,fen.vernum,model_fen_vernum,group_demo_mrp_user_bussiness,1,1,1,1
access_outg_process_2,outg.process,model_outg_process,group_demo_mrp_user_bussiness,1,1,1,1
access_outg_process_line_2,outg.process.line,model_outg_process_line,group_demo_mrp_user_bussiness,1,1,1,1
access_wai_vernum_2,wai.vernum,model_wai_vernum,group_demo_mrp_user_bussiness,1,1,1,1
access_product_instock_2,product.instock,model_product_instock,group_demo_mrp_user_bussiness,1,0,0,0
access_finishp_out_2,finishp.out,model_finishp_out,group_demo_mrp_user_bussiness,,0,0,0
access_product_require_2,product.require,model_product_require,group_demo_mrp_user_bussiness,1,1,1,1
access_market_sort_2,market.sort,model_market_sort,group_demo_mrp_user_bussiness,1,1,1,1
access_machine_model_2,machine.model,model_machine_model,group_demo_mrp_user_bussiness,1,1,1,1
access_shb_mc_2,shb.mc,model_shb_mc,group_demo_mrp_user_bussiness,1,1,1,1
access_trademark_type_2,trademark.type,model_trademark_type,group_demo_mrp_user_bussiness,1,0,0,0
access_unit_2,unit,model_unit,group_demo_mrp_user_bussiness,1,1,1,1
access_proofing_process_line_2,proofing.process.line,model_proofing_process_line,group_demo_mrp_user_bussiness,1,0,0,0
access_proofing_process_line_3,proofing.process.line,model_proofing_process_line,group_mrp_manager_man,1,1,1,1
access_profin_application_3,profin.application,model_profin_application,group_mrp_manager_man,1,1,1,1
access_proofing_process_3,proofing.process,model_proofing_process,group_mrp_manager_man,1,1,1,1
access_new_nversion_3,new.nversion,model_new_nversion,group_mrp_manager_man,1,1,1,1
access_create_versionzhi_3,create.versionzhi,model_create_versionzhi,group_mrp_manager_man,1,1,1,1
access_prodtion_lc_3,prodtion.lc,model_prodtion_lc,group_mrp_manager_man,1,1,1,1
access_prodtion_lc_line_3,prodtion.lc.line,model_prodtion_lc_line,group_mrp_manager_man,1,1,1,1
access_fen_vernum_3,fen.vernum,model_fen_vernum,group_mrp_manager_man,1,1,1,1
access_outg_process_3,outg.process,model_outg_process,group_mrp_manager_man,1,1,1,1
access_outg_process_line_3,outg.process.line,model_outg_process_line,group_mrp_manager_man,1,1,1,1
access_wai_vernum_3,wai.vernum,model_wai_vernum,group_mrp_manager_man,1,1,1,1
access_product_instock_3,product.instock,model_product_instock,group_mrp_manager_man,1,1,1,1
access_finishp_out_3,finishp.out,model_finishp_out,group_mrp_manager_man,1,1,1,1
access_product_require_3,product.require,model_product_require,group_mrp_manager_man,1,1,1,1
access_market_sort_3,market.sort,model_market_sort,group_mrp_manager_man,1,1,1,1
access_machine_model_3,machine.model,model_machine_model,group_mrp_manager_man,1,1,1,1
access_shb_mc_3,shb.mc,model_shb_mc,group_mrp_manager_man,1,1,1,1
access_trademark_type_3,trademark.type,model_trademark_type,group_mrp_manager_man,1,1,1,1
access_unit_2,unit,model_unit,group_mrp_manager_man,1,1,1,1
access_product_instock_line_3,product.instock.line,model_product_instock_line,group_mrp_manager_man,1,1,1,1
access_product_instock_order_3,product.instock.order,model_product_instock_order,group_mrp_manager_man,1,1,1,1
access_finishp_out_line_3,finishp.out.line,model_finishp_out_line,group_mrp_manager_man,1,1,1,1