From dd17296490cdf2f4fc35eed5addb5902433de738 Mon Sep 17 00:00:00 2001
From: Saurang Suthar <ssu@tinyerp.com>
Date: Thu, 13 Sep 2012 18:28:51 +0530
Subject: [PATCH] [IMP]:improved access rights by giving rights of Read to
 HR/Employee

bzr revid: ssu@tinyerp.com-20120913125851-p80ayg3ka4gevulu
---
 addons/hr/security/ir.model.access.csv                          | 2 +-
 addons/hr_payroll/security/hr_security.xml                      | 2 +-
 addons/hr_payroll/security/ir.model.access.csv                  | 2 +-
 .../hr_timesheet_sheet/security/hr_timesheet_sheet_security.xml | 2 +-
 4 files changed, 4 insertions(+), 4 deletions(-)

diff --git a/addons/hr/security/ir.model.access.csv b/addons/hr/security/ir.model.access.csv
index 07593028028..651fbaa7fcf 100644
--- a/addons/hr/security/ir.model.access.csv
+++ b/addons/hr/security/ir.model.access.csv
@@ -7,5 +7,5 @@ access_hr_employee_resource_user,resource.resource.user,resource.model_resource_
 access_hr_department_user,hr.department.user,model_hr_department,base.group_hr_user,1,1,1,1
 access_hr_department_employee,hr.department.employee,model_hr_department,base.group_user,1,0,0,0
 access_hr_job_user,hr.job user,model_hr_job,base.group_hr_user,1,1,1,1
-access_hr_employee_user,hr.employee user,model_hr_employee,base.group_user,1,1,1,1
+access_hr_employee_user,hr.employee user,model_hr_employee,base.group_user,1,0,0,0
 access_ir_property_hr_user,ir_property hr_user,base.model_ir_property,base.group_hr_user,1,1,1,0
diff --git a/addons/hr_payroll/security/hr_security.xml b/addons/hr_payroll/security/hr_security.xml
index c97c0b5a5eb..412e06871eb 100644
--- a/addons/hr_payroll/security/hr_security.xml
+++ b/addons/hr_payroll/security/hr_security.xml
@@ -16,7 +16,7 @@
     <record id="employee_payslip_rule" model="ir.rule">
         <field name="name">Employee Payslip Rule</field>
         <field model="ir.model" name="model_id" ref="model_hr_payslip"/>
-        <field name="domain_force">['|', ('employee_id.user_id', '=', user.id), ('employee_id.department_id.manager_id.user_id', '=', user.id)]</field>
+        <field name="domain_force">[('employee_id.user_id', '=', user.id)]</field>
         <field name="groups" eval="[(4,ref('base.group_user'))]"/>
     </record>
 
diff --git a/addons/hr_payroll/security/ir.model.access.csv b/addons/hr_payroll/security/ir.model.access.csv
index 58d5835fb6b..a8211e18369 100644
--- a/addons/hr_payroll/security/ir.model.access.csv
+++ b/addons/hr_payroll/security/ir.model.access.csv
@@ -12,4 +12,4 @@ access_hr_payslip_input_user,hr.payslip.input.user,model_hr_payslip_input,base.g
 access_hr_payslip_worked_days ,hr.payslip.worked_days,model_hr_payslip_worked_days,base.group_user,1,0,0,0
 access_hr_payslip_run,hr.payslip.run,model_hr_payslip_run,base.group_hr_manager,1,1,1,1
 access_hr_rule_input,hr.rule.input,model_hr_rule_input,base.group_hr_manager,1,1,1,1
-access_hr_salary_rule_user,hr.salary.rule.user,model_hr_salary_rule,base.group_user,1,1,1,1
\ No newline at end of file
+access_hr_salary_rule_user,hr.salary.rule.user,model_hr_salary_rule,base.group_user,1,0,0,0
\ No newline at end of file
diff --git a/addons/hr_timesheet_sheet/security/hr_timesheet_sheet_security.xml b/addons/hr_timesheet_sheet/security/hr_timesheet_sheet_security.xml
index 8755e319ae9..cadbe81a6f2 100644
--- a/addons/hr_timesheet_sheet/security/hr_timesheet_sheet_security.xml
+++ b/addons/hr_timesheet_sheet/security/hr_timesheet_sheet_security.xml
@@ -12,7 +12,7 @@
     <record id="employee_timesheet_rule" model="ir.rule">
         <field name="name">Employee Timesheet Rule</field>
         <field model="ir.model" name="model_id" ref="model_hr_timesheet_sheet_sheet"/>
-        <field name="domain_force">['|', ('employee_id.user_id', '=', user.id), ('employee_id.department_id.manager_id.user_id', '=', user.id)]</field>
+        <field name="domain_force">[('employee_id.user_id', '=', user.id)]</field>
         <field name="groups" eval="[(4,ref('base.group_user'))]"/>
     </record>