Public release from ruodoo-project: 19.0 - 2026-05-10 21:19:01 UTC

access_restricted/models/res_config_settings.py

@@ -0,0 +1,71 @@
+from odoo import SUPERUSER_ID, api, models
+from odoo.tools import ustr
+from odoo.tools.translate import _
+
+
+class ResConfigSettings(models.TransientModel):
+    _inherit = "res.config.settings"
+
+    @api.model
+    def _get_classified_fields(self, fnames=None):
+        uid = self.env.uid
+        classified = super()._get_classified_fields(fnames)
+        config = self.env.context.get("config")
+        is_execute_stage = config and isinstance(config, models.Model)
+
+        if uid == SUPERUSER_ID or is_execute_stage:
+            return classified
+
+        group = []
+        user = self.env.user
+
+        for name, groups, implied_group in classified["group"]:
+            if (
+                implied_group in user.group_ids
+                or user.has_group(
+                    "access_restricted.group_allow_add_implied_from_settings"
+                )
+            ):
+                group.append((name, groups, implied_group))
+
+        classified["group"] = group
+        return classified
+
+    @api.model
+    def fields_get(self, allfields=None, **kwargs):
+        uid = self.env.uid
+        fields = super().fields_get(allfields, **kwargs)
+
+        if uid == SUPERUSER_ID:
+            return fields
+
+        user = self.env.user
+
+        for name in fields:
+            if not name.startswith("group_"):
+                continue
+
+            f = self._fields[name]
+
+            if (
+                f.implied_group in user.group_ids
+                or user.has_group(
+                    "access_restricted.group_allow_add_implied_from_settings"
+                )
+            ):
+                continue
+
+            fields[name].update(
+                readonly=True,
+                help=ustr(fields[name].get("help", ""))
+                + _(
+                    "\n\nYou don't have access to change this settings, because your administration rights are restricted"
+                ),
+            )
+
+        return fields
+
+    def execute(self):
+        return super(
+            ResConfigSettings, self.with_context({"config": self})
+        ).execute()