Odoo is the world's easiest all-in-one management software.
It includes hundreds of business apps:

CRM
e-Commerce
Kirjanpito
Varastointi
PoS
Projekti
MRP

All apps

Kaikki kirjoitukset Ihmiset Merkit

Tunnisteet (Näytä kaikki)

odoo accounting v14 pos v15

Tietoa tästä foorumista

Apua

How to restrict the values of a field based on user groups?

stages groups compute access_rules

15 Vastaukset

7920 Näkymät

Ragav Y

I know how to restrict visibility of a field using the groups attribute. But how do I restrict the values that would be visible in the field?

Here's my specific case:-

So in our application there is a request lifecycle and each request created has to pass through several stages, in a specific order. There are different groups who operate on the request at each stage and their access is restricted to that stage. So a user can only see a request if they have access to the stage it is currently in. And when they open it, they have the ability to process the request and push it to the next stage, if they have access to the next stage.

We need to know what are the next stages that the request can go through depending on the stage it is currently in. For this we compute a field called "next_stage_ids" in the model file:-

@api.depends('type_id', 'stage_id')
def _compute_next_stage_ids(self):
    for record in self:
        routes = self.env['request.stage.route'].search(
            record._get_next_stage_route_domain())
        record.next_stage_ids = (
            record.stage_id + routes.mapped('stage_to_id'))

Currently we are giving all the users all the available stage_ids that come after the current stage. But we have to restrict the available stage ids based on the user group that the user belongs to. How do we do this?

Update:-
I should clarify that we already have specified the groups that each stage is allowed to be accessible by. So access control-wise it is configured. But the problem is that we have a widget at the right top where it shows which is the next stage that it should be moved to and it is visible regardless of whether the user has access to that stage or not. When a user clicks on it, it will either completed the moving to the stage or say that they don't have access. What I need is for that stage to not even show up on the screen if they don't have access. I'm sorry, I should have clarified this in the original post.

Sehrish

Groups and Access Rights: https://goo.gl/4jAhtH

Mohammed Rida Yahla

Paras vastaus

Hi,

Why dont you make it easy for yourself bro , and just add a groups_ids field in 'request.stage.route':

like : groups_ids = field.Many2many('res.groups')

and after you add it and display it in xml views of request.stage.route you can select the groups you want foreach stage_id you create.

and to use it in your functions just like your example, you can :

First get the groups related to the current user :

groups_uid = self.env['res.users'].browse([uid]).groups_id.ids

intersection_list = [value for value in groups_uid if value in self.stage_id.groups_ids.ids]

if intersection_list : # wich means you're testing if this current user has at least one group of the selected groups in this stage_id.

Dont forget to vote positive.

Ragav Y

Tekijä

We've based it not on specific users, but groups of users. It's a large organization with changing users. Only the groups remain constant.

Mohammed Rida Yahla

well in that case instead of doing res.users , do groups_ids = field.Many2many('res.groups'), , so you can select groups you want for each stage_id you create

Ragav Y

Tekijä

mireda, thanks for the suggestion. I should have clarified this earlier. Please see my update in the original post above.

Mohammed Rida Yahla

ur welcome, i edited the answer for you :) , hope it make sense

Ragav Y

Tekijä

I tried to implement what you've suggested in your answer. I am seeing an error. Please check if I've made some mistake in using your code:-

@api.depends('type_id', 'stage_id')

def _compute_next_stage_ids(self):

for record in self:

routes = self.env['request.stage.route'].search(

record._get_next_stage_route_domain())

groups_uid = self.env['res.users'].browse([self.env.user.id]).groups_id.ids

intersection_list = [value for value in groups_uid if value in self.stage_id.groups_ids.ids]

if intersection_list:

record.next_stage_ids = intersection_list

# record.next_stage_ids = (

# record.stage_id + routes.mapped('stage_to_id'))

Initially I was seeing an error in the group_uids line, so I replaced "uid" in your original comment with self.env.user and it worked but now it is stalling in the intersection_list line and I don't understand your code enough to modify it on my own. Could you explain your code please?

Thank you!

Mohammed Rida Yahla

Still no votes xD, my idea , brother , this line: intersection_list = [value for value in groups_uid if value in self.stage_id.groups_ids.ids]

to get get commun groups_ids between the groups of the current user , and the groups selected in your current stage_id

Ragav Y

Tekijä

Ok I see what you're trying, but for some reason I can't seem to fix the error. I don't mind giving upvotes, but I need the problem solved. And as mentioned above my problem still remains. But thanks for trying.

Mohammed Rida Yahla

mail me your code , my user name is my mail

Ragav Y

Tekijä

Sent you email.

Mohammed Rida Yahla

brother, you didnt add a field in request.stage !! you have to to add groups_ids field there

Ragav Y

Tekijä

Ok, thanks for your efforts. I will try and update you. Btw, I've upvoted your answer.

Mohammed Rida Yahla

thank you brother , and nice to meet you , i'll be in touch whenver you need any help :)

Haresh Kansara

Hi Ragav,

In this case, record rule will helpful.

What you need to do is,

for stages, actually it's a model records, so you can create mutliple access groups for accessibility and assign record rules based on groups. So stages only visible to that group's users.

Record Rules

How to create record rules

I hope it will helpful for you.

Regards

Haresh Kansara

Nautitko keskustelusta? Älä vain lue, vaan osallistu!

Luo tili jo tänään nauttiaksesi yksinoikeusominaisuuksista ja osallistuaksesi mahtavaan yhteisöömme!

Rekisteröidy

Aiheeseen liittyviä artikkeleita	Vastaukset	Näkymät
Unable to set access control on view element in XML via groups="" attribute. What am I missing? Ratkaistu groups access_rules	1 jouluk. 19	5892
Give a Single User Access Rights to Specific Field groups record_rules access_rules	2 elok. 23	3868
How to use groups to restrict field access rights? groups access_rules v12	3 jouluk. 20	11384
Allow "Project / Users" creating new task stages (Kanban view) Ratkaistu project stages task groups	2 maalisk. 25	3524
Adding Another Internal User Group (Odoo V14) rights groups internal access_rules	1 maalisk. 25	3434

Tämä kysymys on merkitty

Nautitko keskustelusta? Älä vain lue, vaan osallistu!