Fix security

OCA · Apr 24, 2015 · ba3e4da · ba3e4da
1 parent d24c8ef
commit ba3e4da
Show file tree

Hide file tree

Showing 3 changed files with 4 additions and 1 deletion.
diff --git a/hr_employee_exemption/hr_employee.py b/hr_employee_exemption/hr_employee.py
@@ -30,6 +30,7 @@ class hr_employee(orm.Model):
             'hr.employee.exemption',
             'employee_id',
             'Income Tax Exemptions',
+            groups='base.group_hr_manager',
         ),
     }
 

diff --git a/hr_employee_exemption/security/ir.model.access.csv b/hr_employee_exemption/security/ir.model.access.csv
@@ -1,3 +1,5 @@
 id,name,model_id:id,group_id:id,perm_read,perm_write,perm_create,perm_unlink
 access_hr_income_tax_exemption,access_hr_income_tax_exemption,model_hr_income_tax_exemption,base.group_hr_manager,1,1,1,1
 access_hr_employee_exemption,access_hr_employee_exemption,model_hr_employee_exemption,base.group_hr_manager,1,1,1,1
+
+access_hr_income_tax_exemption_base,access_hr_income_tax_exemption_base,model_hr_income_tax_exemption,base.group_user,1,0,0,0
diff --git a/hr_employee_exemption/view/hr_employee_view.xml b/hr_employee_exemption/view/hr_employee_view.xml
@@ -7,7 +7,7 @@
             <field name="inherit_id" ref="hr.view_employee_form"/>
             <field name="arch" type="xml">
                 <notebook position="inside">
-                    <page string="Tax Exemptions" name="exemption_page">
+                    <page string="Tax Exemptions" name="exemption_page" groups="base.group_hr_manager">
                         <field name="exemption_ids">
                             <tree editable="top">
                                 <field name="exemption_id"/>