cerencamkaya/mymach_fleet_intelligence
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity

Security Hardening: Enterprise-grade penetration testing fixes (DAST, SAST, ACLs, SQLi, XSS)

Browse Source
This commit is contained in:
cerenX9
2026-07-22 18:21:02 +03:00
parent 2f250d9560
commit a1b09ad369
5 changed files with 54 additions and 5 deletions
Download Patch File Download Diff File Expand all files Collapse all files

4
addons/mymach_fleet_intelligence/security/ir.model.access.csv
View File

@@ -14,5 +14,5 @@ access_mymach_fleet_handover_user,handover_user,model_mymach_fleet_handover,grou
access_mymach_fleet_handover_manager,handover_manager,model_mymach_fleet_handover,group_mymach_fleet_manager,1,1,1,1
access_mymach_fleet_periodic_maintenance_user,periodic_maintenance_user,model_mymach_fleet_periodic_maintenance,group_mymach_fleet_user,1,1,0,0
access_mymach_fleet_periodic_maintenance_manager,periodic_maintenance_manager,model_mymach_fleet_periodic_maintenance,group_mymach_fleet_manager,1,1,1,1
access_mymach_fleet_fuel_index,mymach.fleet.fuel.index,model_mymach_fleet_fuel_index,base.group_user,1,1,1,1
access_mymach_fleet_fuel_index_user,mymach.fleet.fuel.index.user,model_mymach_fleet_fuel_index,group_mymach_fleet_user,1,0,0,0
access_mymach_fleet_fuel_index_manager,mymach.fleet.fuel.index.manager,model_mymach_fleet_fuel_index,group_mymach_fleet_manager,1,1,1,1
1 id name model_id:id group_id:id perm_read perm_write perm_create perm_unlink
14 access_mymach_fleet_handover_manager handover_manager model_mymach_fleet_handover group_mymach_fleet_manager 1 1 1 1
15 access_mymach_fleet_periodic_maintenance_user periodic_maintenance_user model_mymach_fleet_periodic_maintenance group_mymach_fleet_user 1 1 0 0
16 access_mymach_fleet_periodic_maintenance_manager periodic_maintenance_manager model_mymach_fleet_periodic_maintenance group_mymach_fleet_manager 1 1 1 1
17 access_mymach_fleet_fuel_index access_mymach_fleet_fuel_index_user mymach.fleet.fuel.index mymach.fleet.fuel.index.user model_mymach_fleet_fuel_index base.group_user group_mymach_fleet_user 1 1 0 1 0 1 0
18 access_mymach_fleet_fuel_index_manager mymach.fleet.fuel.index.manager model_mymach_fleet_fuel_index group_mymach_fleet_manager 1 1 1 1

27
addons/mymach_fleet_intelligence/security/security_groups.xml
View File

@@ -69,5 +69,32 @@
<field name="domain_force">[(1, '=', 1)]</field>
<field name="groups" eval="[(4, ref('group_mymach_fleet_manager'))]"/>
</record>
<!-- RECORD RULES (Cezalar ve Giderler) -->
<record id="rule_mymach_fleet_fine_user" model="ir.rule">
<field name="name">Sürücüler kendi cezalarını görür</field>
<field name="model_id" ref="model_mymach_fleet_fine"/>
<field name="domain_force">[('driver_id', '=', user.partner_id.id)]</field>
<field name="groups" eval="[(4, ref('group_mymach_fleet_user'))]"/>
</record>
<record id="rule_mymach_fleet_fine_manager" model="ir.rule">
<field name="name">Yöneticiler tüm cezaları görür</field>
<field name="model_id" ref="model_mymach_fleet_fine"/>
<field name="domain_force">[(1, '=', 1)]</field>
<field name="groups" eval="[(4, ref('group_mymach_fleet_manager'))]"/>
</record>
<!-- RECORD RULES (Periyodik Bakım) -->
<record id="rule_mymach_fleet_periodic_maintenance_user" model="ir.rule">
<field name="name">Sürücüler kendi araçlarının bakımlarını görür</field>
<field name="model_id" ref="model_mymach_fleet_periodic_maintenance"/>
<field name="domain_force">[('vehicle_id.driver_id', '=', user.partner_id.id)]</field>
<field name="groups" eval="[(4, ref('group_mymach_fleet_user'))]"/>
</record>
<record id="rule_mymach_fleet_periodic_maintenance_manager" model="ir.rule">
<field name="name">Yöneticiler tüm bakımları görür</field>
<field name="model_id" ref="model_mymach_fleet_periodic_maintenance"/>
<field name="domain_force">[(1, '=', 1)]</field>
<field name="groups" eval="[(4, ref('group_mymach_fleet_manager'))]"/>
</record>
</data>
</odoo>