Skip to Content
This question has been flagged
stagesgroupscomputeaccess_rules
15 Replies
5886 Views
Avatar
Ragav Y

I know how to restrict visibility of a field using the groups attribute. But how do I restrict the values that would be visible in the field? 

Here's my specific case:-

So in our application there is a request lifecycle and each request created has to pass through several stages, in a specific order. There are different groups who operate on the request at each stage and their access is restricted to that stage. So a user can only see a request if they have access to the stage it is currently in. And when they open it, they have the ability to process the request and push it to the next stage, if they have access to the next stage. 

We need to know what are the next stages that the request can go through depending on the stage it is currently in. For this we compute a field called "next_stage_ids" in the model file:-

@api.depends('type_id', 'stage_id')
def _compute_next_stage_ids(self):
    for record in self:
        routes = self.env['request.stage.route'].search(
            record._get_next_stage_route_domain())
        record.next_stage_ids = (
            record.stage_id + routes.mapped('stage_to_id'))

Currently we are giving all the users all the available stage_ids that come after the current stage. But we have to restrict the available stage ids based on the user group that the user belongs to. How do we do this?

Update:-
I should clarify that we already have specified the groups that each stage is allowed to be accessible by. So access control-wise it is configured. But the problem is that we have a widget at the right top where it shows which is the next stage that it should be moved to and it is visible regardless of whether the user has access to that stage or not. When a user clicks on it, it will either completed the moving to the stage or say that they don't have access. What I need is for that stage to not even show up on the screen if they don't have access. I'm sorry, I should have clarified this in the original post.

Avatar
Discard
Sehrish

Groups and Access Rights: https://goo.gl/4jAhtH

Avatar
Mohammed Rida Yahla
Best Answer

Hi,

Why dont you make it easy for yourself bro , and just add a groups_ids field in 'request.stage.route':

like : groups_ids = field.Many2many('res.groups')

and after you add it and display it in xml views of request.stage.route you can select the groups you want foreach stage_id you create.

and to use it in your functions just like your example, you can : 

First get the groups related to the current user :

groups_uid = self.env['res.users'].browse([uid]).groups_id.ids

intersection_list = [value for value in   groups_uid if value in self.stage_id.groups_ids.ids]

if intersection_list : # wich means you're testing if this current user has at least one group of the selected groups in this stage_id.

Dont forget to vote positive.



Avatar
Discard
Ragav Y
Author

We've based it not on specific users, but groups of users. It's a large organization with changing users. Only the groups remain constant.

Mohammed Rida Yahla

well in that case instead of doing res.users , do groups_ids = field.Many2many('res.groups'), , so you can select groups you want for each stage_id you create

Ragav Y
Author

mireda, thanks for the suggestion. I should have clarified this earlier. Please see my update in the original post above.

Mohammed Rida Yahla

ur welcome, i edited the answer for you :) , hope it make sense

Ragav Y
Author

I tried to implement what you've suggested in your answer. I am seeing an error. Please check if I've made some mistake in using your code:-

@api.depends('type_id', 'stage_id')

def _compute_next_stage_ids(self):

for record in self:

routes = self.env['request.stage.route'].search(

record._get_next_stage_route_domain())

groups_uid = self.env['res.users'].browse([self.env.user.id]).groups_id.ids

intersection_list = [value for value in groups_uid if value in self.stage_id.groups_ids.ids]

if intersection_list:

record.next_stage_ids = intersection_list

# record.next_stage_ids = (

# record.stage_id + routes.mapped('stage_to_id'))

Initially I was seeing an error in the group_uids line, so I replaced "uid" in your original comment with self.env.user and it worked but now it is stalling in the intersection_list line and I don't understand your code enough to modify it on my own. Could you explain your code please?

Thank you!

Mohammed Rida Yahla

Still no votes xD, my idea , brother , this line: intersection_list = [value for value in groups_uid if value in self.stage_id.groups_ids.ids]

to get get commun groups_ids between the groups of the current user , and the groups selected in your current stage_id

Ragav Y
Author

Ok I see what you're trying, but for some reason I can't seem to fix the error. I don't mind giving upvotes, but I need the problem solved. And as mentioned above my problem still remains. But thanks for trying.

Mohammed Rida Yahla

mail me your code , my user name is my mail

Ragav Y
Author

Sent you email.

Mohammed Rida Yahla

brother, you didnt add a field in request.stage !! you have to to add groups_ids field there

Ragav Y
Author

Ok, thanks for your efforts. I will try and update you. Btw, I've upvoted your answer.

Mohammed Rida Yahla

thank you brother , and nice to meet you , i'll be in touch whenver you need any help :)

Avatar
Haresh Kansara
Best Answer

Hi Ragav,

In this case, record rule will helpful.

What you need to do is, 

for stages, actually it's a model records, so you can create mutliple access groups for accessibility and assign record rules based on groups. So stages only visible to that group's users. 

Record Rules

How to create record rules


I hope it will helpful for you.

Regards

Haresh Kansara

Avatar
Discard
Related Posts Replies Views Activity
Unable to set access control on view element in XML via groups="" attribute. What am I missing? Solved
groups access_rules
Avatar
Avatar
1
Dec 19
3588
Give a Single User Access Rights to Specific Field
groups record_rules access_rules
Avatar
Avatar
Avatar
2
Aug 23
1297
How to use groups to restrict field access rights?
groups access_rules v12
Avatar
Avatar
Avatar
Avatar
3
Dec 20
8188
Allow "Project / Users" creating new task stages (Kanban view) Solved
project stages task groups
Avatar
Avatar
1
Sep 24
254
To create new group right access
community groups access_rules v17
Avatar
Avatar
1
Feb 24
1222