Hello Alan, I think you misunderstood my comment. First of don't try again with record rule because record rule provides visibility based on particular record, So by using record rule either you are able to see the record or not.
Now comes to comment#4, I have suggested to take care about lp:983018 's suggestion because it's the easy way to do this things. Also this is not applied to employee object only but it's generalise way./ Again here I want to say that currently this kind of facility/feature doesn't available in OpenERP. So will be consider this on feature roadmaps. So don't hesitate on this issue. Thank you! -- You received this bug notification because you are a member of OpenERP Indian Team, which is subscribed to OpenERP Server. https://bugs.launchpad.net/bugs/969198 Title: Can not set a access rights on particular records. Currently we can set access rights based on a object Status in OpenERP Server: Confirmed Bug description: We are migrating a customer from 6.0 to 6.1. I raised this issue under their OpenERP Enterprise contract [573293] but the support team have asked me to report the bug here. In the hr.employee module *any* other employee on the system can create, read or DELETE attachments on any other employee's main page. This occurs in both Web and GTK Clients. In my opinion an Employee should be able to read *any* attachment on their own employee record only. They should be able to remove (delete) only those attachments which they themselves added. The HR Manager (& possibly HR User) should be able to add, read and remove attachments from any employees. Unfortunately, I do not believe this configuration is possible currently as the domain rules do not appear to have scope beyond a single object and the employee_id doesn't match their user_id. I think to achieve this you need to be able to read the res_id of the ir.attachment object then, if the res_model is hr.employee, get the user_id of the appropriate hr.employee record to match against. I was trying to create an Access Rule like this: [('user_id','=',user.id),('res_model','=','hr.employee'),('hr.employee[res_id].user_id','=',user.id)] But of course it doesn't work. To manage notifications about this bug go to: https://bugs.launchpad.net/openobject-server/+bug/969198/+subscriptions _______________________________________________ Mailing list: https://launchpad.net/~openerp-india Post to : [email protected] Unsubscribe : https://launchpad.net/~openerp-india More help : https://help.launchpad.net/ListHelp

