decentralize

clinic_management/__manifest__.py

@@ -17,8 +17,8 @@
     'depends': ['base'],
 
     'data': [
+        'security/clinic_security.xml',
         'security/ir.model.access.csv',
-        # 'security/clinic_security.xml',
         'views/clinic_patient_views.xml',
         'views/clinic_appointment_views.xml',
         'views/clinic_medicine_views.xml',

clinic_management/security/clinic_security.xml

@@ -1,26 +1,50 @@
 <?xml version="1.0" encoding="utf-8"?>
 <odoo>
 
-    <data noupdate="1">
+    <data noupdate="0">
-        <!-- nhóm admin -->
+        <record id="module_category_clinic" model="ir.module.category">
-        <record id="group_clinic_admin" model="res.groups">
+            <field name="name">Clinic Management</field>
-            <field name="name">Admin</field>
         </record>
 
-        <!-- nhóm bác sĩ -->
+        <!-- <record id="group_clinic_patient" model="res.groups">
-        <record id="group_clinic_doctor" model="res.groups">
+            <field name="name">Patient</field>
-            <field name="name">Doctor</field>
+            <field name="category_id" ref="clinic_management.module_category_clinic"/>
-        </record>
+            <field name="implied_ids" eval="[(4, ref('base.group_user'))]" />
+            <field name="comment">this user can only see their own records</field>
+        </record> -->
 
-        <!-- nhóm lễ tân -->
         <record id="group_clinic_receptionist" model="res.groups">
             <field name="name">Receptionist</field>
+            <field name="category_id" ref="clinic_management.module_category_clinic" />
+            <field name="implied_ids" eval="[(4, ref('base.group_user'))]" />
+            <field name="comment">the user will have access to appointment</field>
         </record>
 
-        <!-- nhóm bệnh nhân -->
+        <record id="group_clinic_doctors" model="res.groups">
-        <record id="group_clinic_patient" model="res.groups">
+            <field name="name">Doctors</field>
-            <field name="name">Patient</field>
+            <field name="category_id" ref="clinic_management.module_category_clinic" />
+            <field name="implied_ids"
+                eval="[(4, ref('clinic_management.group_clinic_receptionist'))]" />
+            <field name="comment">the user will have access to patient details</field>
         </record>
     </data>
 
+    <!-- <data noupdate="0">
+        <record id="receptionist_own_appointment_rule" model="ir.rule">
+            <field name="name">receptionist: view own record</field>
+            <field name="model_id" ref="model_clinic_appointment" />
+            <field name="domain_force">[('create_uid', '=', 'user.id')]</field>
+            <field name="groups"
+                eval="[Command.set([ref('clinic_management.group_clinic_receptionist')])]" />
+        </record>
+
+        <record id="doctor_view_all_appointment_rule" model="ir.rule">
+            <field name="name">doctor: view all record</field>
+            <field name="model_id" ref="model_clinic_appointment" />
+            <field name="domain_force">[(1, '=', 1)]</field>
+            <field name="groups"
+                eval="[Command.set([ref('clinic_management.group_clinic_doctors')])]" />
+        </record>
+    </data> -->
+
 </odoo>

clinic_management/security/ir.model.access.csv

@@ -1,7 +1,7 @@
 id,name,model_id:id,group_id:id,perm_read,perm_write,perm_create,perm_unlink
-access_clinic_appointment,clinic.appointment,model_clinic_appointment,base.group_user,1,1,1,1
+access_clinic_appointment,clinic.appointment,model_clinic_appointment,clinic_management.group_clinic_receptionist,1,1,1,1
-access_clinic_medicine,clinic.medicine,model_clinic_medicine,base.group_user,1,1,1,1
+access_clinic_medicine,clinic.medicine,model_clinic_medicine,clinic_management.group_clinic_doctors,1,1,1,1
-access_clinic_patient,clinic.patient,model_clinic_patient,base.group_user,1,1,1,1
+access_clinic_patient,clinic.patient,model_clinic_patient,clinic_management.group_clinic_receptionist,1,1,1,1
-access_clinic_prescription,clinic.prescription,model_clinic_prescription,base.group_user,1,1,1,1
+access_clinic_prescription,clinic.prescription,model_clinic_prescription,clinic_management.group_clinic_doctors,1,1,1,1
-access_clinic_prescription_line,clinic.prescription.line,model_clinic_prescription_line,base.group_user,1,1,1,1
+access_clinic_prescription_line,clinic.prescription.line,model_clinic_prescription_line,clinic_management.group_clinic_doctors,1,1,1,1
-access_clinic_service,clinic.service,model_clinic_service,base.group_user,1,1,1,1
+access_clinic_service,clinic.service,model_clinic_service,clinic_management.group_clinic_receptionist,1,1,1,1