From dcc66a18e0e7665b983c529e1e78ae20e8b87882 Mon Sep 17 00:00:00 2001
From: Holger Brunn <mail@hunki-enterprises.com>
Date: Mon, 25 Sep 2023 10:33:51 +0200
Subject: [PATCH] [FIX] #22 adapt hr.employee.public rules

fixes #22
---
 .../security/verdigado_attendance.xml          | 18 ++++++++++++++++--
 1 file changed, 16 insertions(+), 2 deletions(-)

diff --git a/verdigado_attendance/security/verdigado_attendance.xml b/verdigado_attendance/security/verdigado_attendance.xml
index 658b6b9..060af8b 100644
--- a/verdigado_attendance/security/verdigado_attendance.xml
+++ b/verdigado_attendance/security/verdigado_attendance.xml
@@ -30,8 +30,12 @@
         </field>
         <field name="model_id" ref="hr.model_hr_employee_public" />
         <field name="domain_force">
-            [('department_id', 'child_of', user.employee_id.department_id.id) if
-            user.employee_id.department_id else ('id', '=', user.employee_id.id)]
+            ['|', '|', ('department_id', 'child_of', user.employee_id.department_id.id)
+            if
+            user.employee_id.department_id else ('id', '=', user.employee_id.id),
+            ('employee_id','child_of',user.employee_ids.ids),
+            ('employee_id','parent_of',user.employee_ids.ids),
+            ]
         </field>
         <field name="perm_read" eval="True" />
         <field name="perm_write" eval="True" />
@@ -39,6 +43,16 @@
         <field name="perm_unlink" eval="True" />
         <field name="groups" eval="[(4, ref('base.group_user'))]" />
     </record>
+    <record id="rule_hr_employee_public_manager" model="ir.rule">
+        <field name="name">Lift restrictions for HR managers</field>
+        <field name="model_id" ref="hr.model_hr_employee_public" />
+        <field name="domain_force">[(1, '=', 1)]</field>
+        <field name="perm_read" eval="True" />
+        <field name="perm_write" eval="True" />
+        <field name="perm_create" eval="True" />
+        <field name="perm_unlink" eval="True" />
+        <field name="groups" eval="[(4, ref('hr.group_hr_manager'))]" />
+    </record>
 
     <!-- hr.attendance -->
     <record id="hr_attendance.hr_attendance_rule_attendance_manager" model="ir.rule">