[IMP] bi_view_editor: Restrict access to BI View Editor Managers

Forward-port changes from 15.0
OCA#801

Author: yankinmax

bi_view_editor/__manifest__.py

@@ -18,6 +18,7 @@
         "deb": ["graphviz"],
     },
     "data": [
+        "security/res_groups.xml",
         "security/ir.model.access.csv",
         "security/rules.xml",
         "views/bve_view.xml",

bi_view_editor/readme/USAGE.rst

@@ -1,6 +1,8 @@
 To graphically design your analysis data-set:
 
 - From the Dashboards menu, select "Custom BI Views"
+- BI Views creation is restricted to members of "BI View Editor Manager" group.
+  You can add this group to a user in User form, Access Rights, Technical section.
 - Browse trough the business objects in the "Query Builder" tab
 - Pick the interesting fields (Drag & Drop)
 - For each selected field, right-click on the Options column and select whether
@@ -13,6 +15,7 @@ To access the created BI View with a dedicated menu:
 
 - If module Dashboard (board) is installed, the standard "Add to My Dashboard"
   functionality would be available
+- "Create a menu" is restricted to members of "BI View Editor Manager" group.
 - Click "Create a menu" to create a new menu item directly linked to your new
   BI view (this feature is available in developer mode); when the BI view is
   reset back to draft this menu will be removed, and you will need to re-create

bi_view_editor/security/ir.model.access.csv

@@ -1,3 +1,5 @@
 id,name,model_id:id,group_id:id,perm_read,perm_write,perm_create,perm_unlink
-access_bve_view_everyone,bve.view,bi_view_editor.model_bve_view,,1,1,1,1
-access_bve_view_line,access_bve_view_line,model_bve_view_line,,1,1,1,1
+access_bve_view_everyone_user,bve.view.user,bi_view_editor.model_bve_view,base.group_user,1,0,0,0
+access_bve_view_everyone_manager,bve.view.manager,bi_view_editor.model_bve_view,bi_view_editor.group_bve_manager,1,1,1,1
+access_bve_view_line_user,access_bve_view_line_user,bi_view_editor.model_bve_view_line,base.group_user,1,0,0,0
+access_bve_view_line_manager,access_bve_view_line_manager,bi_view_editor.model_bve_view_line,bi_view_editor.group_bve_manager,1,1,1,1

bi_view_editor/security/res_groups.xml

@@ -0,0 +1,14 @@
+<?xml version="1.0" encoding="UTF-8" ?>
+<odoo noupdate="1">
+
+    <record id="group_bve_manager" model="res.groups">
+        <field name="name">BI View Editor Manager</field>
+        <field name="category_id" ref="base.module_category_hidden" />
+        <field name="implied_ids" eval="[(4, ref('base.group_user'))]" />
+        <field
+            name="users"
+            eval="[(4, ref('base.user_root')), (4, ref('base.user_admin'))]"
+        />
+    </record>
+
+</odoo>

bi_view_editor/views/bve_view.xml

@@ -51,26 +51,29 @@
                         type="object"
                         states="created"
                         string="Reset to Draft"
+                        groups="bi_view_editor.group_bve_manager"
                     />
                     <button
                         name="action_create"
                         type="object"
                         states="draft"
                         string="Generate BI View"
                         class="oe_highlight"
+                        groups="bi_view_editor.group_bve_manager"
                     />
                     <button
                         name="open_view"
                         type="object"
                         states="created"
                         string="Open BI View"
                         class="oe_highlight"
+                        groups="bi_view_editor.group_bve_manager"
                     />
                     <button
                         name="%(base.act_menu_create)d"
                         type="action"
                         states="created"
-                        groups="base.group_no_one"
+                        groups="bi_view_editor.group_bve_manager"
                         icon="fa-align-justify"
                         string="Create a Menu"
                         target="new"