openerp - Access controls list "Editing Odoo security rules" -

i'm trying modify access control list of leave requests approve under leave managements module.

i need make leave requests approve menu accessed each employee's manager.

ea. if company has 10 employees under sales/marketing , 5 employees under department. need sales manager access 10 employees' leave requests , not able access rest of company's employees not under authority. it, modified record rule domain definition of leaves officer [(1,'=',1)] [('employee_id.parent_id,'=',user.id)] didn't work. how fix it?

in case totally pass wrong domain record rules.

you using domain

[(1,'=',1)] = > access model record model

[('employee_id.parent_id,'=',user.id)] = > access manager parent_id current user employee only

but in accessing manager user not access related user.

so must have add below domain in record rules:

['|',('employee_id.user_id','=',user.id),('employee_id.parent_id.user_id','=',user.id)]

basically manager self employee of company , employee having attached related user.

first need understand following relation :

1. employee_id :

which indicate each leave related 1 employee.

2. parent_id :

which indicate each employee related 1 manager hr.holidays model w[('employee_id.parent_id,'=',user.id)]particular model.hich called leave request

3. user_id :

if want access login particular employee , must have set related user each employee form.which labeled related user.

4. user :

which indicate global user name means current user logged in.

5.id :

means unique id each record

in case how domain work ?

first check current logged in user attached current leave employee related user or not. , then find user ids having same employee attached same managers.

it means perform or operation of sql statement both of domain.

i hope answer may helpful :)