[RFC] new api.groups decorator

[legalsylvain]

Implementation

def groups(*groups):
    # check if current user are member of one of the given groups.
    # If not, raise an error. "To do this action, you should be member of ..."

Call sample

@oca.decorators.groups('group_1', 'group_2', '...')
def function_name(self, args):
    # custom action

Main interest

The check will be done if function is called by

• (1) another function,
• (2) an xml-rpc call,
• (3) a button in a view. (<button name='function_name' />)

So it is a more secured approach that writing <button name='function_name' groups='group_xml_id'/> that does'nt prevent for the time being case 1 or 2.

Ref of the previous discussion

OCA/server-tools#944

CC : @NL66278, @ lasley, @pedrobaeza

[lasley]

Hey @legalsylvain - any updates on this?

[legalsylvain]

No update !

Sorry, no time in the next weeks. (and maybe months...)
@lasley, @other, feel free to make a PoC, I review it with pleasure.

kind regards.

[lasley]

Thanks for the update @legalsylvain. I, too, am super busy - so probably won't have time in the near future either. I've been working on a project with some high test times recently, so have been trying to perform some OCA repo maintenance while waiting for test results (hence my comment) 🚀