From 84cc63a0386786b8a5b653f53c0da10dc90e52f0 Mon Sep 17 00:00:00 2001
From: git_admin <gitea@local.domain>
Date: Fri, 1 May 2026 15:01:25 +0000
Subject: [PATCH] Tower: upload laundry_management 19.0.19.0.4 (via
 marketplace)

---
 .../laundry_management/security/ir_rule.xml   | 47 +++++++++++++++++++
 1 file changed, 47 insertions(+)
 create mode 100644 addons/laundry_management/security/ir_rule.xml

diff --git a/addons/laundry_management/security/ir_rule.xml b/addons/laundry_management/security/ir_rule.xml
new file mode 100644
index 0000000..1eddeaf
--- /dev/null
+++ b/addons/laundry_management/security/ir_rule.xml
@@ -0,0 +1,47 @@
+<?xml version="1.0" encoding="utf-8"?>
+<odoo>
+
+    <!-- ══════════════════════════════════════════════════════════════
+         RECORD RULES — Laundry Orders (laundry.order)
+
+         Company-restricted access per role.
+         Admin / superuser bypasses all ir.rule by design.
+    ══════════════════════════════════════════════════════════════ -->
+
+    <!-- Operator: read-only access to laundry orders in own company -->
+    <record id="rule_laundry_order_operator" model="ir.rule">
+        <field name="name">Laundry Order: Operator read own company</field>
+        <field name="model_id" ref="model_laundry_order"/>
+        <field name="domain_force">[('company_id', 'in', company_ids)]</field>
+        <field name="groups" eval="[(4, ref('group_laundry_operator'))]"/>
+        <field name="perm_read" eval="True"/>
+        <field name="perm_write" eval="False"/>
+        <field name="perm_create" eval="False"/>
+        <field name="perm_unlink" eval="False"/>
+    </record>
+
+    <!-- Cashier: read / write / create (no delete) -->
+    <record id="rule_laundry_order_cashier" model="ir.rule">
+        <field name="name">Laundry Order: Cashier read/write/create own company</field>
+        <field name="model_id" ref="model_laundry_order"/>
+        <field name="domain_force">[('company_id', 'in', company_ids)]</field>
+        <field name="groups" eval="[(4, ref('group_laundry_cashier'))]"/>
+        <field name="perm_read" eval="True"/>
+        <field name="perm_write" eval="True"/>
+        <field name="perm_create" eval="True"/>
+        <field name="perm_unlink" eval="False"/>
+    </record>
+
+    <!-- Manager: full CRUD -->
+    <record id="rule_laundry_order_manager" model="ir.rule">
+        <field name="name">Laundry Order: Manager full access own company</field>
+        <field name="model_id" ref="model_laundry_order"/>
+        <field name="domain_force">[('company_id', 'in', company_ids)]</field>
+        <field name="groups" eval="[(4, ref('group_laundry_manager'))]"/>
+        <field name="perm_read" eval="True"/>
+        <field name="perm_write" eval="True"/>
+        <field name="perm_create" eval="True"/>
+        <field name="perm_unlink" eval="True"/>
+    </record>
+
+</odoo>