[IMP] estate: security part, created groups for agent and manager

started security assignment by groups. created groups as per given exercise.
created category for the application.
faced so many errors while doing it.
learned about record rules.
created security for agent so that no other agent cannot see his properties .
but manager group can access all the properties.

Author: djip-odoo

estate/__manifest__.py

@@ -1,6 +1,7 @@
 {
-    "name": "Real Estate",
     "version": "1.0",
+    "name": "Real Estate",
+    "category": "Real Estate/Brokerage",
     "depends": ["base"],
     "author": "djip-odoo",
     "description": """
@@ -24,6 +25,7 @@
         "views/estate_property_offer_views.xml",
         "views/res_users_views.xml",
         # security
+        "security/security.xml",
         "security/ir.model.access.csv",
     ],
     "demo": [

estate/models/estate_property_offer.py

@@ -7,7 +7,7 @@ class EstatePropertyOffer(models.Model):
     _name = "estate.property.offers"
     _description = "Real Estate Property Offer"
     _order = "price desc"
-    
+
     _sql_constraints = [
         ("check_price", "CHECK(price > 0)", "Price cannot be less than or equal to 0."),
     ]

estate/models/res_users.py

@@ -3,4 +3,4 @@
 class ResUsers(models.Model):
     _inherit = "res.users"
 
-    property_ids = fields.One2many("estate.property", "property_type_id")
+    property_ids = fields.One2many("estate.property", "user_id")

estate/security/ir.model.access.csv

@@ -1,5 +1,10 @@
 id,name,model_id:id,group_id:id,perm_read,perm_write,perm_create,perm_unlink
-estate.access_estate_property,access_estate_property,estate.model_estate_property,base.group_user,1,1,1,1
-estate.access_estate_property_types,access_estate_property_types,estate.model_estate_property_types,base.group_user,1,1,1,1
-estate.access_estate_property_tags,access_estate_property_tags,estate.model_estate_property_tags,base.group_user,1,1,1,1
-estate.access_estate_property_offers,access_estate_property_offers,estate.model_estate_property_offers,base.group_user,1,1,1,1
+estate.manager_access_estate_property,access_estate_property,estate.model_estate_property,estate.estate_group_manager,1,1,1,0
+estate.manager_access_estate_property_types,access_estate_property_types,estate.model_estate_property_types,estate.estate_group_manager,1,1,1,1
+estate.manager_access_estate_property_tags,access_estate_property_tags,estate.model_estate_property_tags,estate.estate_group_manager,1,1,1,1
+estate.manager_access_estate_property_offers,access_estate_property_offers,estate.model_estate_property_offers,estate.estate_group_manager,1,1,1,1
+
+estate.agent_access_estate_property,access_estate_property,estate.model_estate_property,estate.estate_group_user,1,1,1,0
+estate.agent_access_estate_property_types,access_estate_property_types,estate.model_estate_property_types,estate.estate_group_user,1,0,0,0
+estate.agent_access_estate_property_tags,access_estate_property_tags,estate.model_estate_property_tags,estate.estate_group_user,1,0,0,0
+estate.agent_access_estate_property_offers,access_estate_property_offers,estate.model_estate_property_offers,estate.estate_group_user,1,1,1,0

estate/security/security.xml

@@ -0,0 +1,29 @@
+<odoo>
+    <record id="base.module_category_real_estate_brokerage" model="ir.module.category">
+        <field name="name">Real Estate Brokerage</field>
+    </record>
+
+    <!-- Create the Agent Group and Assign it to the Real Estate Brokerage Category -->
+    <record id="estate_group_user" model="res.groups">
+        <field name="name">Agent</field>
+        <field name="category_id" ref="base.module_category_real_estate_brokerage" />
+    </record>
+
+    <!-- Define Manager Group -->
+    <record id="estate_group_manager" model="res.groups">
+        <field name="name">Manager</field>
+        <field name="category_id" ref="base.module_category_real_estate_brokerage" />
+        <field name="implied_ids" eval="[(4, ref('estate_group_user'))]" />
+    </record>
+
+    <record id="estate_property_agent_rule" model="ir.rule">
+        <field name="name">Agent Access on Properties</field>
+        <field name="model_id" ref="estate.model_estate_property" />
+        <field name="groups" eval="[(4, ref('estate.estate_group_user'))]" />
+        <field name="domain_force">["|",('user_id', '=', user.id),('user_id', '=', False)]</field>
+        <field name="perm_read" eval="1" />
+        <field name="perm_write" eval="1" />
+        <field name="perm_create" eval="1" />
+        <field name="perm_unlink" eval="0" />
+    </record>
+</odoo>