mgmtsystem/security/mgmtsystem_security.xml
<?xml version="1.0" encoding="utf-8"?>
<openerp>
<data noupdate="1">
<record model="ir.module.category" id="module_category_management_system">
<field name="name">Management System</field>
<field name="description">Manage management systems, manuals, KPIs, nonconformities, actions, feedbacks, audits, reviews.</field>
<field name="sequence">10</field>
</record>
<record id="group_mgmtsystem_viewer" model="res.groups">
<field name="name">Viewer</field>
<field name="comment">Module user with general read only access.</field>
<field name="category_id" ref="module_category_management_system"/>
</record>
<record id="group_mgmtsystem_user" model="res.groups">
<field name="name">User</field>
<field name="comment">Module user, with general read and write.</field>
<field name="category_id" ref="module_category_management_system"/>
<field name="implied_ids" eval="(4,ref('mgmtsystem.group_mgmtsystem_viewer'))"/>
</record>
<record id="group_mgmtsystem_user_manager" model="res.groups">
<field name="name">Approving User</field>
<field name="comment">Module user with additional permission for approvals.</field>
<field name="category_id" ref="module_category_management_system"/>
<field name="implied_ids" eval="(4,ref('mgmtsystem.group_mgmtsystem_user'))"/>
<field name="users" eval="[(6,0,[ref('base.user_root')])]"/>
</record>
<record id="group_mgmtsystem_auditor" model="res.groups">
<field name="name">Auditor</field>
<field name="comment">Module user with additional permission specific for the auditor job, such as effectiveness reviews.</field>
<field name="category_id" ref="module_category_management_system"/>
<field name="implied_ids" eval="(4,ref('mgmtsystem.group_mgmtsystem_user'))"/>
</record>
<record id="group_mgmtsystem_manager" model="res.groups">
<field name="name">Manager</field>
<field name="comment">Module administrator, able to modify configuration data.</field>
<field name="category_id" ref="module_category_management_system"/>
<field name="implied_ids" eval="[(4, ref('group_mgmtsystem_auditor'))]"/>
<field name="users" eval="[(6,0,[ref('base.user_root')])]"/>
</record>
<!-- Rule -->
<record model="ir.rule" id="mgmtsystem_rule">
<field name="name">mgmtsystem multi-company</field>
<field name="model_id" ref="model_mgmtsystem_system"/>
<field name="global" eval="True"/>
<field name="domain_force">['|',('company_id','=',False),('company_id','child_of',[user.company_id.id])]</field>
</record>
</data>
</openerp>