From 3c2067cef3292e893cdbb26c821c6d5e7ed93fd6 Mon Sep 17 00:00:00 2001
From: dufresnedavid <david.dufresne@savoirfairelinux.com>
Date: Mon, 6 Apr 2015 11:53:56 -0400
Subject: [PATCH] Fix security

---
 hr_employee_exemption/hr_employee.py               | 1 +
 hr_employee_exemption/security/ir.model.access.csv | 2 ++
 hr_employee_exemption/view/hr_employee_view.xml    | 2 +-
 3 files changed, 4 insertions(+), 1 deletion(-)

diff --git a/hr_employee_exemption/hr_employee.py b/hr_employee_exemption/hr_employee.py
index 3c2371b6747..bfe83e300d5 100644
--- a/hr_employee_exemption/hr_employee.py
+++ b/hr_employee_exemption/hr_employee.py
@@ -30,6 +30,7 @@ class hr_employee(orm.Model):
             'hr.employee.exemption',
             'employee_id',
             'Income Tax Exemptions',
+            groups='base.group_hr_manager',
         ),
     }
 
diff --git a/hr_employee_exemption/security/ir.model.access.csv b/hr_employee_exemption/security/ir.model.access.csv
index f012a0b7702..35d7fefb385 100644
--- a/hr_employee_exemption/security/ir.model.access.csv
+++ b/hr_employee_exemption/security/ir.model.access.csv
@@ -1,3 +1,5 @@
 id,name,model_id:id,group_id:id,perm_read,perm_write,perm_create,perm_unlink
 access_hr_income_tax_exemption,access_hr_income_tax_exemption,model_hr_income_tax_exemption,base.group_hr_manager,1,1,1,1
 access_hr_employee_exemption,access_hr_employee_exemption,model_hr_employee_exemption,base.group_hr_manager,1,1,1,1
+
+access_hr_income_tax_exemption_base,access_hr_income_tax_exemption_base,model_hr_income_tax_exemption,base.group_user,1,0,0,0
diff --git a/hr_employee_exemption/view/hr_employee_view.xml b/hr_employee_exemption/view/hr_employee_view.xml
index 72335ac7ebe..43765459412 100644
--- a/hr_employee_exemption/view/hr_employee_view.xml
+++ b/hr_employee_exemption/view/hr_employee_view.xml
@@ -7,7 +7,7 @@
             <field name="inherit_id" ref="hr.view_employee_form"/>
             <field name="arch" type="xml">
                 <notebook position="inside">
-                    <page string="Tax Exemptions" name="exemption_page">
+                    <page string="Tax Exemptions" name="exemption_page" groups="base.group_hr_manager">
                         <field name="exemption_ids">
                             <tree editable="top">
                                 <field name="exemption_id"/>