[18.0][ADD] cetmix_tower_jet_isolation: base module add new module

cetmix_tower_jet_isolation/README.rst

@@ -0,0 +1,69 @@
+==========================
+Cetmix Tower Jet Isolation
+==========================
+
+.. 
+   !!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!
+   !! This file is generated by oca-gen-addon-readme !!
+   !! changes will be overwritten.                   !!
+   !!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!
+
+.. |badge1| image:: https://img.shields.io/badge/maturity-Beta-yellow.png
+    :target: https://odoo-community.org/page/development-status
+    :alt: Beta
+.. |badge2| image:: https://img.shields.io/badge/licence-AGPL--3-blue.png
+    :target: http://www.gnu.org/licenses/agpl-3.0-standalone.html
+    :alt: License: AGPL-3
+.. |badge3| image:: https://img.shields.io/badge/github-cetmix%2Fcetmix--tower-lightgray.png?logo=github
+    :target: https://github.com/cetmix/cetmix-tower
+    :alt: cetmix/cetmix-tower
+
+|badge1| |badge2| |badge3|
+
+Adds strict isolation mode for Jets, preventing users from altering command visibility.
+
+**Table of contents**
+
+.. contents::
+   :local:
+
+Installation
+============
+
+To install this module, you need to:
+
+1. Clone cetmix-tower repository.
+2. Install this module `cetmix_tower_jet_isolation` into your Odoo instance.
+
+Configuration
+=============
+
+To configure this module, you need to:
+
+1. Go to Tower > Jet Templates.
+2. Open a Jet Template.
+3. Enable 'Isolation Mode' and configure forced applicability and tags.
+
+Usage
+=====
+
+When users run a command or a flight plan from an isolated Jet, the wizard will have the applicability options and tag selections locked, enforcing the parameters defined by the administrator in the Template.
+
+Bug Tracker
+===========
+
+Bugs are tracked on `GitHub Issues <https://github.com/cetmix/cetmix-tower/issues>`_.
+
+Credits
+=======
+
+Authors
+~~~~~~~
+
+* Cetmix
+* Crumges
+
+Maintainers
+~~~~~~~~~~~
+
+This module is maintained by the Cetmix team.

cetmix_tower_jet_isolation/__init__.py

@@ -0,0 +1,2 @@
+from . import models, wizards
+from .hooks import uninstall_hook

cetmix_tower_jet_isolation/__manifest__.py

@@ -0,0 +1,19 @@
+{
+    "name": "Cetmix Tower Jet Isolation",
+    "version": "18.0.1.0.1",
+    "category": "Tower",
+    "summary": "Adds strict isolation mode for Jets.",
+    "author": "Cetmix, Crumges",
+    "website": "https://tower.cetmix.com",
+    "depends": [
+        "cetmix_tower_server",
+    ],
+    "data": [
+        "views/cx_tower_jet_template_views.xml",
+        "views/cx_tower_command_run_wizard_views.xml",
+        "views/cx_tower_plan_run_wizard_views.xml",
+    ],
+    "installable": True,
+    "license": "AGPL-3",
+    "uninstall_hook": "uninstall_hook",
+}

cetmix_tower_jet_isolation/hooks.py

@@ -0,0 +1,17 @@
+def uninstall_hook(env):
+    """Reset isolation fields on all jet templates when the module is uninstalled.
+
+    Odoo does not drop columns when a module is uninstalled, so any templates
+    that had ``isolation_mode`` enabled would still carry the value ``True``
+    in their row.  When the module is re-installed (or the column is somehow
+    still read) those stale values would silently reactivate the restriction
+    logic.  Resetting them here ensures a clean state.
+    """
+    env["cx.tower.jet.template"].search([("isolation_mode", "=", True)]).write(
+        {
+            "isolation_mode": False,
+            "forced_applicability": False,
+            "forced_command_tag_ids": [(5,)],
+            "forced_plan_tag_ids": [(5,)],
+        }
+    )

cetmix_tower_jet_isolation/models/__init__.py

@@ -0,0 +1 @@
+from . import cx_tower_jet_template

cetmix_tower_jet_isolation/models/cx_tower_jet_template.py

@@ -0,0 +1,22 @@
+from odoo import fields, models
+
+
+class CxTowerJetTemplate(models.Model):
+    _inherit = "cx.tower.jet.template"
+
+    isolation_mode = fields.Boolean(
+        help="Prevents changing applicability or tags when running commands."
+    )
+    forced_applicability = fields.Selection(
+        [("this", "For selected server(s)"), ("shared", "Non server restricted")]
+    )
+
+    forced_command_tag_ids = fields.Many2many(
+        comodel_name="cx.tower.tag",
+        relation="cx_tower_template_forced_command_tag_rel",
+    )
+
+    forced_plan_tag_ids = fields.Many2many(
+        comodel_name="cx.tower.tag",
+        relation="cx_tower_template_forced_plan_tag_rel",
+    )

cetmix_tower_jet_isolation/pyproject.toml

@@ -0,0 +1,3 @@
+[build-system]
+requires = ["setuptools"]
+build-backend = "setuptools.build_meta"

cetmix_tower_jet_isolation/views/cx_tower_command_run_wizard_views.xml

@@ -0,0 +1,58 @@
+<?xml version="1.0" encoding="utf-8" ?>
+<odoo>
+    <record id="cx_tower_command_run_wizard_view_form_isolation" model="ir.ui.view">
+        <field name="name">cx.tower.command.run.wizard.view.form.isolation</field>
+        <field name="model">cx.tower.command.run.wizard</field>
+        <field
+            name="inherit_id"
+            ref="cetmix_tower_server.cx_tower_command_run_wizard_view_form"
+        />
+        <field name="arch" type="xml">
+            <xpath expr="//field[@name='tag_ids']" position="before">
+                <field name="is_restricted_context" invisible="1" />
+            </xpath>
+
+            <xpath expr="//label[@for='applicability']" position="attributes">
+                <attribute name="invisible">is_restricted_context or result</attribute>
+            </xpath>
+
+            <xpath expr="//field[@name='applicability']" position="attributes">
+                <attribute name="readonly">is_restricted_context</attribute>
+                <attribute name="force_save">1</attribute>
+            </xpath>
+
+            <xpath expr="//field[@name='tag_ids']" position="attributes">
+                <attribute name="groups">cetmix_tower_server.group_manager</attribute>
+                <attribute name="invisible">is_restricted_context or result</attribute>
+                <attribute name="force_save">1</attribute>
+            </xpath>
+
+            <xpath expr="//field[@name='tag_ids']" position="after">
+                <field
+                    name="isolated_tag_ids"
+                    widget="many2many_tags"
+                    invisible="not is_restricted_context or result"
+                />
+            </xpath>
+
+            <xpath expr="//notebook" position="attributes">
+                <attribute name="groups" />
+            </xpath>
+            <xpath expr="//page[@name='code']" position="attributes">
+                <attribute name="invisible">is_restricted_context</attribute>
+            </xpath>
+            <xpath expr="//field[@name='rendered_code']" position="attributes">
+                <attribute name="groups" />
+                <attribute name="readonly">1</attribute>
+            </xpath>
+            <xpath
+                expr="//field[@name='custom_variable_value_ids']"
+                position="attributes"
+            >
+                <attribute
+                    name="readonly"
+                >not have_access_to_server or is_restricted_context</attribute>
+            </xpath>
+        </field>
+    </record>
+</odoo>

cetmix_tower_jet_isolation/views/cx_tower_jet_template_views.xml

@@ -0,0 +1,33 @@
+<?xml version="1.0" encoding="utf-8" ?>
+<odoo>
+    <record id="cx_tower_jet_template_view_form_isolation" model="ir.ui.view">
+        <field name="name">cx.tower.jet.template.view.form.isolation</field>
+        <field name="model">cx.tower.jet.template</field>
+        <field
+            name="inherit_id"
+            ref="cetmix_tower_server.cx_tower_jet_template_view_form"
+        />
+        <field name="arch" type="xml">
+            <xpath expr="//group[@name='general']" position="after">
+                <group name="isolation" string="Execution Security (Isolation Mode)">
+                    <field name="isolation_mode" widget="boolean_toggle" />
+                    <field
+                        name="forced_applicability"
+                        invisible="not isolation_mode"
+                        required="isolation_mode"
+                    />
+                    <field
+                        name="forced_command_tag_ids"
+                        widget="many2many_tags"
+                        invisible="not isolation_mode"
+                    />
+                    <field
+                        name="forced_plan_tag_ids"
+                        widget="many2many_tags"
+                        invisible="not isolation_mode"
+                    />
+                </group>
+            </xpath>
+        </field>
+    </record>
+</odoo>

cetmix_tower_jet_isolation/views/cx_tower_plan_run_wizard_views.xml

@@ -0,0 +1,45 @@
+<?xml version="1.0" encoding="utf-8" ?>
+<odoo>
+    <record id="cx_tower_plan_run_wizard_view_form_isolation" model="ir.ui.view">
+        <field name="name">cx.tower.plan.run.wizard.view.form.isolation</field>
+        <field name="model">cx.tower.plan.run.wizard</field>
+        <field
+            name="inherit_id"
+            ref="cetmix_tower_server.cx_tower_plan_run_wizard_view_form"
+        />
+        <field name="arch" type="xml">
+            <xpath expr="//field[@name='tag_ids']" position="before">
+                <field name="is_restricted_context" invisible="1" />
+            </xpath>
+
+            <xpath expr="//label[@for='applicability']" position="attributes">
+                <attribute name="invisible">is_restricted_context</attribute>
+            </xpath>
+
+            <xpath expr="//field[@name='applicability']" position="attributes">
+                <attribute name="readonly">is_restricted_context</attribute>
+                <attribute name="force_save">1</attribute>
+            </xpath>
+
+            <xpath expr="//field[@name='tag_ids']" position="attributes">
+                <attribute name="invisible">is_restricted_context</attribute>
+                <attribute name="force_save">1</attribute>
+            </xpath>
+
+            <xpath expr="//field[@name='tag_ids']" position="after">
+                <field
+                    name="isolated_tag_ids"
+                    widget="many2many_tags"
+                    invisible="not is_restricted_context"
+                />
+            </xpath>
+
+            <xpath
+                expr="//field[@name='custom_variable_value_ids']"
+                position="attributes"
+            >
+                <attribute name="readonly">is_restricted_context</attribute>
+            </xpath>
+        </field>
+    </record>
+</odoo>

cetmix_tower_jet_isolation/wizards/__init__.py

@@ -0,0 +1,2 @@
+from . import cx_tower_command_run_wizard
+from . import cx_tower_plan_run_wizard

cetmix_tower_jet_isolation/wizards/cx_tower_command_run_wizard.py

@@ -0,0 +1,55 @@
+from odoo import api, fields, models
+
+
+class CxTowerCommandRunWizardFilter(models.TransientModel):
+    _inherit = "cx.tower.command.run.wizard"
+
+    is_restricted_context = fields.Boolean(compute="_compute_is_restricted_context")
+    isolated_tag_ids = fields.Many2many(
+        comodel_name="cx.tower.tag",
+        compute="_compute_isolated_tag_ids",
+        string="Forced Tags",
+    )
+
+    @api.depends("jet_ids")
+    def _compute_is_restricted_context(self):
+        is_global_manager = self.env.user.has_group("cetmix_tower_server.group_manager")
+        for record in self:
+            jets = record.jet_ids or self.env["cx.tower.jet"].browse(
+                self.env.context.get("default_jet_ids", [])
+            )
+
+            is_isolated = bool(
+                jets and any(j.jet_template_id.isolation_mode for j in jets)
+            )
+
+            if is_global_manager:
+                is_manager = True
+            elif jets and all(self.env.user in j.manager_ids for j in jets):
+                is_manager = True
+            else:
+                is_manager = False
+
+            record.is_restricted_context = is_isolated and not is_manager
+
+    @api.depends("tag_ids")
+    def _compute_isolated_tag_ids(self):
+        for record in self:
+            record.isolated_tag_ids = record.tag_ids
+
+    @api.model
+    def default_get(self, fields_list):
+        res = super().default_get(fields_list)
+        if "default_jet_ids" in self.env.context:
+            jet_ids = self.env["cx.tower.jet"].browse(
+                self.env.context["default_jet_ids"]
+            )
+            if jet_ids:
+                template = jet_ids[0].jet_template_id
+
+                if template.isolation_mode:
+                    if template.forced_applicability:
+                        res["applicability"] = template.forced_applicability
+                    if template.forced_command_tag_ids:
+                        res["tag_ids"] = [(6, 0, template.forced_command_tag_ids.ids)]
+        return res

cetmix_tower_jet_isolation/wizards/cx_tower_plan_run_wizard.py

@@ -0,0 +1,55 @@
+from odoo import api, fields, models
+
+
+class CxTowerPlanRunWizardFilter(models.TransientModel):
+    _inherit = "cx.tower.plan.run.wizard"
+
+    is_restricted_context = fields.Boolean(compute="_compute_is_restricted_context")
+    isolated_tag_ids = fields.Many2many(
+        comodel_name="cx.tower.tag",
+        compute="_compute_isolated_tag_ids",
+        string="Forced Tags",
+    )
+
+    @api.depends("jet_ids")
+    def _compute_is_restricted_context(self):
+        is_global_manager = self.env.user.has_group("cetmix_tower_server.group_manager")
+        for record in self:
+            jets = record.jet_ids or self.env["cx.tower.jet"].browse(
+                self.env.context.get("default_jet_ids", [])
+            )
+
+            is_isolated = bool(
+                jets and any(j.jet_template_id.isolation_mode for j in jets)
+            )
+
+            if is_global_manager:
+                is_manager = True
+            elif jets and all(self.env.user in j.manager_ids for j in jets):
+                is_manager = True
+            else:
+                is_manager = False
+
+            record.is_restricted_context = is_isolated and not is_manager
+
+    @api.depends("tag_ids")
+    def _compute_isolated_tag_ids(self):
+        for record in self:
+            record.isolated_tag_ids = record.tag_ids
+
+    @api.model
+    def default_get(self, fields_list):
+        res = super().default_get(fields_list)
+        if "default_jet_ids" in self.env.context:
+            jet_ids = self.env["cx.tower.jet"].browse(
+                self.env.context["default_jet_ids"]
+            )
+            if jet_ids:
+                template = jet_ids[0].jet_template_id
+
+                if template.isolation_mode:
+                    if template.forced_applicability:
+                        res["applicability"] = template.forced_applicability
+                    if template.forced_plan_tag_ids:
+                        res["tag_ids"] = [(6, 0, template.forced_plan_tag_ids.ids)]
+        return res