hr_contract_security/security/ir_rule_data.xml
<?xml version="1.0" encoding="utf-8" ?>
<openerp>
<data>
<!-- Employee -->
<record id="ir_rule_contract_employee" model="ir.rule">
<field name="model_id" ref="hr_contract.model_hr_contract" />
<field name="domain_force">[
('employee_id.user_id.id','=',user.id),
]</field>
<field name="name">Employee Contract Rule for Employee</field>
<field name="groups" eval="[(4, ref('base.group_user'))]" />
<field eval="1" name="perm_unlink" />
<field eval="1" name="perm_write" />
<field eval="1" name="perm_read" />
<field eval="1" name="perm_create" />
</record>
<!-- Operation -->
<record id="ir_rule_contract_user" model="ir.rule">
<field name="model_id" ref="hr_contract.model_hr_contract" />
<field name="domain_force">[
('employee_id.user_id.id','=',user.id),
]</field>
<field name="name">Employee Contract Rule for User</field>
<field name="groups" eval="[(4, ref('group_contract_user'))]" />
<field eval="1" name="perm_unlink" />
<field eval="1" name="perm_write" />
<field eval="1" name="perm_read" />
<field eval="1" name="perm_create" />
</record>
<record id="ir_rule_contract_supervisor" model="ir.rule">
<field name="model_id" ref="hr_contract.model_hr_contract" />
<field name="domain_force">[
('employee_id.parent_id.user_id.id','=',user.id),
]</field>
<field name="name">Employee Contract Rule for Manager</field>
<field name="groups" eval="[(4, ref('group_contract_supervisor'))]" />
<field eval="1" name="perm_unlink" />
<field eval="1" name="perm_write" />
<field eval="1" name="perm_read" />
<field eval="1" name="perm_create" />
</record>
<record id="ir_rule_contract_department" model="ir.rule">
<field name="model_id" ref="hr_contract.model_hr_contract" />
<field name="domain_force">[
('contract_department_id.id','child_of',user.employee_ids[0].department_id.id),
]</field>
<field name="name">Employee Contract Rule for Department</field>
<field name="groups" eval="[(4, ref('group_contract_department'))]" />
<field eval="1" name="perm_unlink" />
<field eval="1" name="perm_write" />
<field eval="1" name="perm_read" />
<field eval="1" name="perm_create" />
</record>
<record id="ir_rule_contract_company" model="ir.rule">
<field name="model_id" ref="hr_contract.model_hr_contract" />
<field name="domain_force">[
('employee_id.user_id.company_id.id','child_of',user.company_id.id),
]</field>
<field name="name">Employee Contract Rule for Company</field>
<field name="groups" eval="[(4, ref('group_contract_company'))]" />
<field eval="1" name="perm_unlink" />
<field eval="1" name="perm_write" />
<field eval="1" name="perm_read" />
<field eval="1" name="perm_create" />
</record>
<!-- Contract Viewer -->
<record id="ir_rule_contract_viewer_supervisor" model="ir.rule">
<field name="model_id" ref="hr_contract.model_hr_contract" />
<field name="domain_force">[
('employee_id.parent_id.user_id.id','=',user.id),
]</field>
<field name="name">Employee Contract Viewer Rule for Manager</field>
<field name="groups" eval="[(4, ref('group_contract_viewer_supervisor'))]" />
<field eval="0" name="perm_unlink" />
<field eval="0" name="perm_write" />
<field eval="1" name="perm_read" />
<field eval="0" name="perm_create" />
</record>
<record id="ir_rule_contract_viewer_department" model="ir.rule">
<field name="model_id" ref="hr_contract.model_hr_contract" />
<field name="domain_force">[
('employee_id.department_id.id','child_of',user.employee_ids[0].department_id.id),
]</field>
<field name="name">Employee Contract Viewer Rule for Department</field>
<field name="groups" eval="[(4, ref('group_contract_viewer_department'))]" />
<field eval="0" name="perm_unlink" />
<field eval="0" name="perm_write" />
<field eval="1" name="perm_read" />
<field eval="0" name="perm_create" />
</record>
<record id="ir_rule_contract_viewer_company" model="ir.rule">
<field name="model_id" ref="hr_contract.model_hr_contract" />
<field name="domain_force">[
('employee_id.user_id.company_id.id','child_of',user.company_id.id),
]</field>
<field name="name">Employee Contract Viewer Rule for Company</field>
<field name="groups" eval="[(4, ref('group_contract_viewer_company'))]" />
<field eval="0" name="perm_unlink" />
<field eval="0" name="perm_write" />
<field eval="1" name="perm_read" />
<field eval="0" name="perm_create" />
</record>
</data>
</openerp>