From 3506be1651bf6775048d6f8dc2086d280c032922 Mon Sep 17 00:00:00 2001
From: XuanHuyen <goat2625@gmail.com>
Date: Mon, 24 Mar 2025 17:29:27 +0700
Subject: [PATCH] decentralize

---
 clinic_management/__manifest__.py             |  2 +-
 .../security/clinic_security.xml              | 48 ++++++++++++++-----
 .../security/ir.model.access.csv              | 12 ++---
 3 files changed, 43 insertions(+), 19 deletions(-)

diff --git a/clinic_management/__manifest__.py b/clinic_management/__manifest__.py
index cfb0657..4571c5e 100644
--- a/clinic_management/__manifest__.py
+++ b/clinic_management/__manifest__.py
@@ -17,8 +17,8 @@
     'depends': ['base'],
 
     'data': [
+        'security/clinic_security.xml',
         'security/ir.model.access.csv',
-        # 'security/clinic_security.xml',
         'views/clinic_patient_views.xml',
         'views/clinic_appointment_views.xml',
         'views/clinic_medicine_views.xml',
diff --git a/clinic_management/security/clinic_security.xml b/clinic_management/security/clinic_security.xml
index 319f60c..1e5451d 100644
--- a/clinic_management/security/clinic_security.xml
+++ b/clinic_management/security/clinic_security.xml
@@ -1,26 +1,50 @@
 <?xml version="1.0" encoding="utf-8"?>
 <odoo>
 
-    <data noupdate="1">
-        <!-- nhóm admin -->
-        <record id="group_clinic_admin" model="res.groups">
-            <field name="name">Admin</field>
+    <data noupdate="0">
+        <record id="module_category_clinic" model="ir.module.category">
+            <field name="name">Clinic Management</field>
         </record>
 
-        <!-- nhóm bác sĩ -->
-        <record id="group_clinic_doctor" model="res.groups">
-            <field name="name">Doctor</field>
-        </record>
+        <!-- <record id="group_clinic_patient" model="res.groups">
+            <field name="name">Patient</field>
+            <field name="category_id" ref="clinic_management.module_category_clinic"/>
+            <field name="implied_ids" eval="[(4, ref('base.group_user'))]" />
+            <field name="comment">this user can only see their own records</field>
+        </record> -->
 
-        <!-- nhóm lễ tân -->
         <record id="group_clinic_receptionist" model="res.groups">
             <field name="name">Receptionist</field>
+            <field name="category_id" ref="clinic_management.module_category_clinic" />
+            <field name="implied_ids" eval="[(4, ref('base.group_user'))]" />
+            <field name="comment">the user will have access to appointment</field>
         </record>
 
-        <!-- nhóm bệnh nhân -->
-        <record id="group_clinic_patient" model="res.groups">
-            <field name="name">Patient</field>
+        <record id="group_clinic_doctors" model="res.groups">
+            <field name="name">Doctors</field>
+            <field name="category_id" ref="clinic_management.module_category_clinic" />
+            <field name="implied_ids"
+                eval="[(4, ref('clinic_management.group_clinic_receptionist'))]" />
+            <field name="comment">the user will have access to patient details</field>
         </record>
     </data>
 
+    <!-- <data noupdate="0">
+        <record id="receptionist_own_appointment_rule" model="ir.rule">
+            <field name="name">receptionist: view own record</field>
+            <field name="model_id" ref="model_clinic_appointment" />
+            <field name="domain_force">[('create_uid', '=', 'user.id')]</field>
+            <field name="groups"
+                eval="[Command.set([ref('clinic_management.group_clinic_receptionist')])]" />
+        </record>
+
+        <record id="doctor_view_all_appointment_rule" model="ir.rule">
+            <field name="name">doctor: view all record</field>
+            <field name="model_id" ref="model_clinic_appointment" />
+            <field name="domain_force">[(1, '=', 1)]</field>
+            <field name="groups"
+                eval="[Command.set([ref('clinic_management.group_clinic_doctors')])]" />
+        </record>
+    </data> -->
+
 </odoo>
\ No newline at end of file
diff --git a/clinic_management/security/ir.model.access.csv b/clinic_management/security/ir.model.access.csv
index 96b0cbd..7618dc3 100644
--- a/clinic_management/security/ir.model.access.csv
+++ b/clinic_management/security/ir.model.access.csv
@@ -1,7 +1,7 @@
 id,name,model_id:id,group_id:id,perm_read,perm_write,perm_create,perm_unlink
-access_clinic_appointment,clinic.appointment,model_clinic_appointment,base.group_user,1,1,1,1
-access_clinic_medicine,clinic.medicine,model_clinic_medicine,base.group_user,1,1,1,1
-access_clinic_patient,clinic.patient,model_clinic_patient,base.group_user,1,1,1,1
-access_clinic_prescription,clinic.prescription,model_clinic_prescription,base.group_user,1,1,1,1
-access_clinic_prescription_line,clinic.prescription.line,model_clinic_prescription_line,base.group_user,1,1,1,1
-access_clinic_service,clinic.service,model_clinic_service,base.group_user,1,1,1,1
\ No newline at end of file
+access_clinic_appointment,clinic.appointment,model_clinic_appointment,clinic_management.group_clinic_receptionist,1,1,1,1
+access_clinic_medicine,clinic.medicine,model_clinic_medicine,clinic_management.group_clinic_doctors,1,1,1,1
+access_clinic_patient,clinic.patient,model_clinic_patient,clinic_management.group_clinic_receptionist,1,1,1,1
+access_clinic_prescription,clinic.prescription,model_clinic_prescription,clinic_management.group_clinic_doctors,1,1,1,1
+access_clinic_prescription_line,clinic.prescription.line,model_clinic_prescription_line,clinic_management.group_clinic_doctors,1,1,1,1
+access_clinic_service,clinic.service,model_clinic_service,clinic_management.group_clinic_receptionist,1,1,1,1
\ No newline at end of file