Initial commit: Odoo 18.0-20251222 extra-addons

base_model_restrict_update/README.rst

@@ -0,0 +1,127 @@
+.. image:: https://odoo-community.org/readme-banner-image
+   :target: https://odoo-community.org/get-involved?utm_source=readme
+   :alt: Odoo Community Association
+
+=====================
+Update Restrict Model
+=====================
+
+.. 
+   !!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!
+   !! This file is generated by oca-gen-addon-readme !!
+   !! changes will be overwritten.                   !!
+   !!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!
+   !! source digest: sha256:a0a6bc8d798dea0412aeb5e7c9f5fe8f7aec4d6d0e40c7e0d2c19ffc07bbb2cb
+   !!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!
+
+.. |badge1| image:: https://img.shields.io/badge/maturity-Beta-yellow.png
+    :target: https://odoo-community.org/page/development-status
+    :alt: Beta
+.. |badge2| image:: https://img.shields.io/badge/license-LGPL--3-blue.png
+    :target: http://www.gnu.org/licenses/lgpl-3.0-standalone.html
+    :alt: License: LGPL-3
+.. |badge3| image:: https://img.shields.io/badge/github-OCA%2Fserver--tools-lightgray.png?logo=github
+    :target: https://github.com/OCA/server-tools/tree/18.0/base_model_restrict_update
+    :alt: OCA/server-tools
+.. |badge4| image:: https://img.shields.io/badge/weblate-Translate%20me-F47D42.png
+    :target: https://translation.odoo-community.org/projects/server-tools-18-0/server-tools-18-0-base_model_restrict_update
+    :alt: Translate me on Weblate
+.. |badge5| image:: https://img.shields.io/badge/runboat-Try%20me-875A7B.png
+    :target: https://runboat.odoo-community.org/builds?repo=OCA/server-tools&target_branch=18.0
+    :alt: Try me on Runboat
+
+|badge1| |badge2| |badge3| |badge4| |badge5|
+
+This module adds the following features:
+
+- The ability to limit the update permissions for a model to certain
+  groups
+- The ability to revoke update permissions for specific users
+
+**Table of contents**
+
+.. contents::
+   :local:
+
+Configuration
+=============
+
+When you want to limit the update permissions of a model to certain
+groups:
+
+1. Go to *Settings > Techinical > Database Structure > Models*
+2. Open the form view of the model, and select **Update Restrict Model**
+3. Assign the groups that should be exempt from the restriction to
+   **Update-allowed Groups**
+
+When you want revoke update permissions for a specific user:
+
+1. Go to *Settings > Users & Companies > Users*
+2. Open the user's form view and click the **Read-only** smart button
+3. In case you wish to exclude some models from being read-only, go to
+   *Settings > General Settings* and update **Excluded Models from
+   Read-only** under the Permissions section by listing the models
+   separated by commas (e.g., sale.order,sale.order.line).
+
+Bug Tracker
+===========
+
+Bugs are tracked on `GitHub Issues <https://github.com/OCA/server-tools/issues>`_.
+In case of trouble, please check there if your issue has already been reported.
+If you spotted it first, help us to smash it by providing a detailed and welcomed
+`feedback <https://github.com/OCA/server-tools/issues/new?body=module:%20base_model_restrict_update%0Aversion:%2018.0%0A%0A**Steps%20to%20reproduce**%0A-%20...%0A%0A**Current%20behavior**%0A%0A**Expected%20behavior**>`_.
+
+Do not contact contributors directly about support or help with technical issues.
+
+Credits
+=======
+
+Authors
+-------
+
+* Quartile
+
+Contributors
+------------
+
+- `Quartile <https://www.quartile.co>`__:
+
+  - Yoshi Tashiro <tashiro@quartile.co>
+
+- Ecosoft
+
+  - Kitti U. <kittiu@ecosoft.co.th>
+
+Other credits
+-------------
+
+- This module borrows the idea from 'Moises Lopez
+  <https://odoo-community.org/groups/contributors-15/contributors-161807>'
+
+Maintainers
+-----------
+
+This module is maintained by the OCA.
+
+.. image:: https://odoo-community.org/logo.png
+   :alt: Odoo Community Association
+   :target: https://odoo-community.org
+
+OCA, or the Odoo Community Association, is a nonprofit organization whose
+mission is to support the collaborative development of Odoo features and
+promote its widespread use.
+
+.. |maintainer-yostashiro| image:: https://github.com/yostashiro.png?size=40px
+    :target: https://github.com/yostashiro
+    :alt: yostashiro
+.. |maintainer-aungkokolin1997| image:: https://github.com/aungkokolin1997.png?size=40px
+    :target: https://github.com/aungkokolin1997
+    :alt: aungkokolin1997
+
+Current `maintainers <https://odoo-community.org/page/maintainer-role>`__:
+
+|maintainer-yostashiro| |maintainer-aungkokolin1997| 
+
+This module is part of the `OCA/server-tools <https://github.com/OCA/server-tools/tree/18.0/base_model_restrict_update>`_ project on GitHub.
+
+You are welcome to contribute. To learn how please visit https://odoo-community.org/page/Contribute.

base_model_restrict_update/__init__.py

@@ -0,0 +1 @@
+from . import models

base_model_restrict_update/__manifest__.py

@@ -0,0 +1,19 @@
+# Copyright 2021-2024 Quartile (https://www.quartile.co)
+# License LGPL-3.0 or later (https://www.gnu.org/licenses/lgpl).
+{
+    "name": "Update Restrict Model",
+    "version": "18.0.1.0.0",
+    "depends": ["base_setup"],
+    "website": "https://github.com/OCA/server-tools",
+    "author": "Odoo Community Association (OCA), Quartile",
+    "category": "Others",
+    "license": "LGPL-3",
+    "data": [
+        "data/config_parameter_data.xml",
+        "views/ir_model_views.xml",
+        "views/res_config_settings.xml",
+        "views/res_users_views.xml",
+    ],
+    "maintainers": ["yostashiro", "aungkokolin1997"],
+    "installable": True,
+}

base_model_restrict_update/data/config_parameter_data.xml

@@ -0,0 +1,9 @@
+<?xml version="1.0" encoding="utf-8" ?>
+<odoo noupdate="1">
+    <record id="excluded_models_from_readonly" model="ir.config_parameter">
+        <field
+            name="key"
+        >base_model_restrict_update.excluded_models_from_readonly</field>
+        <field name="value">bus.presence</field>
+    </record>
+</odoo>

base_model_restrict_update/i18n/base_model_restrict_update.pot

@@ -0,0 +1,105 @@
+# Translation of Odoo Server.
+# This file contains the translation of the following modules:
+# 	* base_model_restrict_update
+#
+msgid ""
+msgstr ""
+"Project-Id-Version: Odoo Server 18.0\n"
+"Report-Msgid-Bugs-To: \n"
+"Last-Translator: \n"
+"Language-Team: \n"
+"MIME-Version: 1.0\n"
+"Content-Type: text/plain; charset=UTF-8\n"
+"Content-Transfer-Encoding: \n"
+"Plural-Forms: \n"
+
+#. module: base_model_restrict_update
+#: model_terms:ir.ui.view,arch_db:base_model_restrict_update.view_users_form
+msgid "<span style=\"padding: 0 10px;\">Read-only</span>"
+msgstr ""
+
+#. module: base_model_restrict_update
+#: model:ir.model,name:base_model_restrict_update.model_res_config_settings
+msgid "Config Settings"
+msgstr ""
+
+#. module: base_model_restrict_update
+#: model_terms:ir.ui.view,arch_db:base_model_restrict_update.res_config_settings_view_form
+msgid "Excluded Models From Readonly"
+msgstr ""
+
+#. module: base_model_restrict_update
+#: model:ir.model.fields,field_description:base_model_restrict_update.field_res_config_settings__excluded_models_from_readonly
+msgid "Excluded Models from Read-only"
+msgstr ""
+
+#. module: base_model_restrict_update
+#: model:ir.model,name:base_model_restrict_update.model_ir_model_access
+msgid "Model Access"
+msgstr ""
+
+#. module: base_model_restrict_update
+#: model:ir.model,name:base_model_restrict_update.model_ir_model
+msgid "Models"
+msgstr ""
+
+#. module: base_model_restrict_update
+#: model:ir.model.fields,field_description:base_model_restrict_update.field_res_users__is_readonly_user
+msgid "Read-only User"
+msgstr ""
+
+#. module: base_model_restrict_update
+#: model:ir.model.fields,help:base_model_restrict_update.field_res_users__is_readonly_user
+msgid ""
+"Select this option to prevent the user from updating any business records."
+msgstr ""
+
+#. module: base_model_restrict_update
+#: model:ir.model.fields,field_description:base_model_restrict_update.field_ir_model__smart_search
+#: model:ir.model.fields,field_description:base_model_restrict_update.field_ir_model_access__smart_search
+#: model:ir.model.fields,field_description:base_model_restrict_update.field_res_config_settings__smart_search
+#: model:ir.model.fields,field_description:base_model_restrict_update.field_res_users__smart_search
+msgid "Smart Search"
+msgstr ""
+
+#. module: base_model_restrict_update
+#: model:ir.model.fields,help:base_model_restrict_update.field_res_config_settings__excluded_models_from_readonly
+#: model_terms:ir.ui.view,arch_db:base_model_restrict_update.res_config_settings_view_form
+msgid ""
+"Specified models, separated by commas, will be exempt from the read-only "
+"restriction for read-only users."
+msgstr ""
+
+#. module: base_model_restrict_update
+#: model:ir.model.fields,field_description:base_model_restrict_update.field_ir_model__restrict_update
+msgid "Update Restrict Model"
+msgstr ""
+
+#. module: base_model_restrict_update
+#: model:ir.model.fields,field_description:base_model_restrict_update.field_ir_model__update_allowed_group_ids
+msgid "Update-Allowed Groups"
+msgstr ""
+
+#. module: base_model_restrict_update
+#: model:ir.model,name:base_model_restrict_update.model_res_users
+msgid "User"
+msgstr ""
+
+#. module: base_model_restrict_update
+#: model:ir.model.fields,help:base_model_restrict_update.field_ir_model__restrict_update
+msgid ""
+"When selected, the model is restricted to read-only unless the user belongs "
+"to an Update-Allowed Group."
+msgstr ""
+
+#. module: base_model_restrict_update
+#. odoo-python
+#: code:addons/base_model_restrict_update/models/ir_model_access.py:0
+msgid "You are only allowed to read this record. (%(model)s - %(mode)s)"
+msgstr ""
+
+#. module: base_model_restrict_update
+#. odoo-python
+#: code:addons/base_model_restrict_update/models/res_users.py:0
+msgid "You cannot make the admin user read-only."
+msgstr ""

base_model_restrict_update/i18n/es.po

@@ -0,0 +1,134 @@
+# Translation of Odoo Server.
+# This file contains the translation of the following modules:
+# 	* base_model_restrict_update
+#
+msgid ""
+msgstr ""
+"Project-Id-Version: Odoo Server 15.0\n"
+"Report-Msgid-Bugs-To: \n"
+"PO-Revision-Date: 2023-11-09 19:36+0000\n"
+"Last-Translator: Ivorra78 <informatica@totmaterial.es>\n"
+"Language-Team: none\n"
+"Language: es\n"
+"MIME-Version: 1.0\n"
+"Content-Type: text/plain; charset=UTF-8\n"
+"Content-Transfer-Encoding: \n"
+"Plural-Forms: nplurals=2; plural=n != 1;\n"
+"X-Generator: Weblate 4.17\n"
+
+#. module: base_model_restrict_update
+#: model_terms:ir.ui.view,arch_db:base_model_restrict_update.view_users_form
+msgid "<span style=\"padding: 0 10px;\">Read-only</span>"
+msgstr "<span style=\"padding: 0 10px;\">Solo-Lectura</span>"
+
+#. module: base_model_restrict_update
+#: model:ir.model,name:base_model_restrict_update.model_res_config_settings
+msgid "Config Settings"
+msgstr ""
+
+#. module: base_model_restrict_update
+#: model_terms:ir.ui.view,arch_db:base_model_restrict_update.res_config_settings_view_form
+msgid "Excluded Models From Readonly"
+msgstr ""
+
+#. module: base_model_restrict_update
+#: model:ir.model.fields,field_description:base_model_restrict_update.field_res_config_settings__excluded_models_from_readonly
+msgid "Excluded Models from Read-only"
+msgstr ""
+
+#. module: base_model_restrict_update
+#: model:ir.model,name:base_model_restrict_update.model_ir_model_access
+msgid "Model Access"
+msgstr "Acceso Modelo"
+
+#. module: base_model_restrict_update
+#: model:ir.model,name:base_model_restrict_update.model_ir_model
+msgid "Models"
+msgstr "Modelos"
+
+#. module: base_model_restrict_update
+#: model:ir.model.fields,field_description:base_model_restrict_update.field_res_users__is_readonly_user
+#, fuzzy
+msgid "Read-only User"
+msgstr "Usuario listo"
+
+#. module: base_model_restrict_update
+#: model:ir.model.fields,help:base_model_restrict_update.field_res_users__is_readonly_user
+msgid ""
+"Select this option to prevent the user from updating any business records."
+msgstr ""
+
+#. module: base_model_restrict_update
+#: model:ir.model.fields,field_description:base_model_restrict_update.field_ir_model__smart_search
+#: model:ir.model.fields,field_description:base_model_restrict_update.field_ir_model_access__smart_search
+#: model:ir.model.fields,field_description:base_model_restrict_update.field_res_config_settings__smart_search
+#: model:ir.model.fields,field_description:base_model_restrict_update.field_res_users__smart_search
+msgid "Smart Search"
+msgstr ""
+
+#. module: base_model_restrict_update
+#: model:ir.model.fields,help:base_model_restrict_update.field_res_config_settings__excluded_models_from_readonly
+#: model_terms:ir.ui.view,arch_db:base_model_restrict_update.res_config_settings_view_form
+msgid ""
+"Specified models, separated by commas, will be exempt from the read-only "
+"restriction for read-only users."
+msgstr ""
+
+#. module: base_model_restrict_update
+#: model:ir.model.fields,field_description:base_model_restrict_update.field_ir_model__restrict_update
+msgid "Update Restrict Model"
+msgstr "Actualizar el modelo de restricciones"
+
+#. module: base_model_restrict_update
+#: model:ir.model.fields,field_description:base_model_restrict_update.field_ir_model__update_allowed_group_ids
+msgid "Update-Allowed Groups"
+msgstr ""
+
+#. module: base_model_restrict_update
+#: model:ir.model,name:base_model_restrict_update.model_res_users
+#, fuzzy
+msgid "User"
+msgstr "Usuarios"
+
+#. module: base_model_restrict_update
+#: model:ir.model.fields,help:base_model_restrict_update.field_ir_model__restrict_update
+#, fuzzy
+msgid ""
+"When selected, the model is restricted to read-only unless the user belongs "
+"to an Update-Allowed Group."
+msgstr ""
+"Cuando se selecciona, el modelo se restringe a sólo lectura a menos que el "
+"usuario tenga el permiso especial."
+
+#. module: base_model_restrict_update
+#. odoo-python
+#: code:addons/base_model_restrict_update/models/ir_model_access.py:0
+msgid "You are only allowed to read this record. (%(model)s - %(mode)s)"
+msgstr "Sólo puede leer este registro. (%(model)s - %(mode)s)"
+
+#. module: base_model_restrict_update
+#. odoo-python
+#: code:addons/base_model_restrict_update/models/res_users.py:0
+#, fuzzy
+msgid "You cannot make the admin user read-only."
+msgstr "No se puede establecer el usuario admin como usuario de sólo lectura."
+
+#~ msgid "<span style=\"padding: 0 10px;\">Unrestrict Update</span>"
+#~ msgstr ""
+#~ "<span style=\"padding: 0 10px;\">Actualización sin restricciones</span>"
+
+#~ msgid "Set to true and the user are readonly user on all models"
+#~ msgstr ""
+#~ "Establecer a true y el usuario son de sólo lectura en todos los modelos"
+
+#~ msgid "Set to true and the user can update restricted model."
+#~ msgstr ""
+#~ "Si se establece en true, el usuario puede actualizar el modelo "
+#~ "restringido."
+
+#~ msgid "Unrestrict Model Update"
+#~ msgstr "Actualización del modelo Sin restricciones"
+
+#, python-format
+#~ msgid "You are only allowed to read this record. ({} - {})"
+#~ msgstr "Sólo puede leer este registro. ({} - {})"

base_model_restrict_update/i18n/es_AR.po

@@ -0,0 +1,148 @@
+# Translation of Odoo Server.
+# This file contains the translation of the following modules:
+# 	* base_model_restrict_update
+#
+msgid ""
+msgstr ""
+"Project-Id-Version: Odoo Server 14.0\n"
+"Report-Msgid-Bugs-To: \n"
+"PO-Revision-Date: 2023-10-29 23:45+0000\n"
+"Last-Translator: Ignacio Buioli <ibuioli@gmail.com>\n"
+"Language-Team: none\n"
+"Language: es_AR\n"
+"MIME-Version: 1.0\n"
+"Content-Type: text/plain; charset=UTF-8\n"
+"Content-Transfer-Encoding: \n"
+"Plural-Forms: nplurals=2; plural=n != 1;\n"
+"X-Generator: Weblate 4.17\n"
+
+#. module: base_model_restrict_update
+#: model_terms:ir.ui.view,arch_db:base_model_restrict_update.view_users_form
+msgid "<span style=\"padding: 0 10px;\">Read-only</span>"
+msgstr "<span style=\"padding: 0 10px;\">Solo lectura</span>"
+
+#. module: base_model_restrict_update
+#: model:ir.model,name:base_model_restrict_update.model_res_config_settings
+msgid "Config Settings"
+msgstr ""
+
+#. module: base_model_restrict_update
+#: model_terms:ir.ui.view,arch_db:base_model_restrict_update.res_config_settings_view_form
+msgid "Excluded Models From Readonly"
+msgstr ""
+
+#. module: base_model_restrict_update
+#: model:ir.model.fields,field_description:base_model_restrict_update.field_res_config_settings__excluded_models_from_readonly
+msgid "Excluded Models from Read-only"
+msgstr ""
+
+#. module: base_model_restrict_update
+#: model:ir.model,name:base_model_restrict_update.model_ir_model_access
+msgid "Model Access"
+msgstr "Modelo de Acceso"
+
+#. module: base_model_restrict_update
+#: model:ir.model,name:base_model_restrict_update.model_ir_model
+msgid "Models"
+msgstr "Modelos"
+
+#. module: base_model_restrict_update
+#: model:ir.model.fields,field_description:base_model_restrict_update.field_res_users__is_readonly_user
+#, fuzzy
+msgid "Read-only User"
+msgstr "Usuario Listo"
+
+#. module: base_model_restrict_update
+#: model:ir.model.fields,help:base_model_restrict_update.field_res_users__is_readonly_user
+msgid ""
+"Select this option to prevent the user from updating any business records."
+msgstr ""
+
+#. module: base_model_restrict_update
+#: model:ir.model.fields,field_description:base_model_restrict_update.field_ir_model__smart_search
+#: model:ir.model.fields,field_description:base_model_restrict_update.field_ir_model_access__smart_search
+#: model:ir.model.fields,field_description:base_model_restrict_update.field_res_config_settings__smart_search
+#: model:ir.model.fields,field_description:base_model_restrict_update.field_res_users__smart_search
+msgid "Smart Search"
+msgstr ""
+
+#. module: base_model_restrict_update
+#: model:ir.model.fields,help:base_model_restrict_update.field_res_config_settings__excluded_models_from_readonly
+#: model_terms:ir.ui.view,arch_db:base_model_restrict_update.res_config_settings_view_form
+msgid ""
+"Specified models, separated by commas, will be exempt from the read-only "
+"restriction for read-only users."
+msgstr ""
+
+#. module: base_model_restrict_update
+#: model:ir.model.fields,field_description:base_model_restrict_update.field_ir_model__restrict_update
+msgid "Update Restrict Model"
+msgstr "Actualizar Modelo Restricto"
+
+#. module: base_model_restrict_update
+#: model:ir.model.fields,field_description:base_model_restrict_update.field_ir_model__update_allowed_group_ids
+msgid "Update-Allowed Groups"
+msgstr ""
+
+#. module: base_model_restrict_update
+#: model:ir.model,name:base_model_restrict_update.model_res_users
+#, fuzzy
+msgid "User"
+msgstr "Usuarios"
+
+#. module: base_model_restrict_update
+#: model:ir.model.fields,help:base_model_restrict_update.field_ir_model__restrict_update
+#, fuzzy
+msgid ""
+"When selected, the model is restricted to read-only unless the user belongs "
+"to an Update-Allowed Group."
+msgstr ""
+"Cuando está seleccionado, el modelo está restringido a solo lectura a menos "
+"que el usuario tenga permisos especiales."
+
+#. module: base_model_restrict_update
+#. odoo-python
+#: code:addons/base_model_restrict_update/models/ir_model_access.py:0
+msgid "You are only allowed to read this record. (%(model)s - %(mode)s)"
+msgstr "Está permitido solo a leer este registro. (%(model)s - %(mode)s)"
+
+#. module: base_model_restrict_update
+#. odoo-python
+#: code:addons/base_model_restrict_update/models/res_users.py:0
+#, fuzzy
+msgid "You cannot make the admin user read-only."
+msgstr ""
+"No puede configurar al usuario administrador como un usuario de sólo lectura."
+
+#~ msgid "<span style=\"padding: 0 10px;\">Unrestrict Update</span>"
+#~ msgstr "<span style=\"padding: 0 10px;\">Actualización Irrestricta</span>"
+
+#~ msgid "Set to true and the user are readonly user on all models"
+#~ msgstr ""
+#~ "Establezcalo como verdadero y el usuario es un usuario de solo lectura en "
+#~ "todos los modelos"
+
+#~ msgid "Set to true and the user can update restricted model."
+#~ msgstr ""
+#~ "Establezcalo como verdadero y bel usuario podrá actualizar el modelo "
+#~ "restringido."
+
+#~ msgid "Unrestrict Model Update"
+#~ msgstr "Actualización del Modelo sin Restricciones"
+
+#, python-format
+#~ msgid "You are only allowed to read this record. ({} - {})"
+#~ msgstr "Solo le está permitido leer este registro. ({} - {})"
+
+#~ msgid "Display Name"
+#~ msgstr "Mostrar Nombre"
+
+#~ msgid "ID"
+#~ msgstr "ID"
+
+#~ msgid "Last Modified on"
+#~ msgstr "Última modificación en"
+
+#, python-format
+#~ msgid "You are only allowed to read this record. (%s - %s)"
+#~ msgstr "No está permitido para leer este registro. (%s - %s)"

base_model_restrict_update/i18n/it.po

@@ -0,0 +1,114 @@
+# Translation of Odoo Server.
+# This file contains the translation of the following modules:
+# 	* base_model_restrict_update
+#
+msgid ""
+msgstr ""
+"Project-Id-Version: Odoo Server 18.0\n"
+"Report-Msgid-Bugs-To: \n"
+"PO-Revision-Date: 2025-09-29 17:43+0000\n"
+"Last-Translator: mymage <stefano.consolaro@mymage.it>\n"
+"Language-Team: none\n"
+"Language: it\n"
+"MIME-Version: 1.0\n"
+"Content-Type: text/plain; charset=UTF-8\n"
+"Content-Transfer-Encoding: \n"
+"Plural-Forms: nplurals=2; plural=n != 1;\n"
+"X-Generator: Weblate 5.10.4\n"
+
+#. module: base_model_restrict_update
+#: model_terms:ir.ui.view,arch_db:base_model_restrict_update.view_users_form
+msgid "<span style=\"padding: 0 10px;\">Read-only</span>"
+msgstr "<span style=\"padding: 0 10px;\">Solo lettura</span>"
+
+#. module: base_model_restrict_update
+#: model:ir.model,name:base_model_restrict_update.model_res_config_settings
+msgid "Config Settings"
+msgstr "Impostazioni configurazione"
+
+#. module: base_model_restrict_update
+#: model_terms:ir.ui.view,arch_db:base_model_restrict_update.res_config_settings_view_form
+msgid "Excluded Models From Readonly"
+msgstr "Modelli esclusi da solo lettura"
+
+#. module: base_model_restrict_update
+#: model:ir.model.fields,field_description:base_model_restrict_update.field_res_config_settings__excluded_models_from_readonly
+msgid "Excluded Models from Read-only"
+msgstr "Moduli esclusi da sola lettura"
+
+#. module: base_model_restrict_update
+#: model:ir.model,name:base_model_restrict_update.model_ir_model_access
+msgid "Model Access"
+msgstr "Accesso modello"
+
+#. module: base_model_restrict_update
+#: model:ir.model,name:base_model_restrict_update.model_ir_model
+msgid "Models"
+msgstr "Modelli"
+
+#. module: base_model_restrict_update
+#: model:ir.model.fields,field_description:base_model_restrict_update.field_res_users__is_readonly_user
+msgid "Read-only User"
+msgstr "Utente sola lettura"
+
+#. module: base_model_restrict_update
+#: model:ir.model.fields,help:base_model_restrict_update.field_res_users__is_readonly_user
+msgid ""
+"Select this option to prevent the user from updating any business records."
+msgstr ""
+"Selezionare questa opzione per prevenire che l'utente aggiorni i record "
+"aziendali."
+
+#. module: base_model_restrict_update
+#: model:ir.model.fields,field_description:base_model_restrict_update.field_ir_model__smart_search
+#: model:ir.model.fields,field_description:base_model_restrict_update.field_ir_model_access__smart_search
+#: model:ir.model.fields,field_description:base_model_restrict_update.field_res_config_settings__smart_search
+#: model:ir.model.fields,field_description:base_model_restrict_update.field_res_users__smart_search
+msgid "Smart Search"
+msgstr "Ricerca intelligente"
+
+#. module: base_model_restrict_update
+#: model:ir.model.fields,help:base_model_restrict_update.field_res_config_settings__excluded_models_from_readonly
+#: model_terms:ir.ui.view,arch_db:base_model_restrict_update.res_config_settings_view_form
+msgid ""
+"Specified models, separated by commas, will be exempt from the read-only "
+"restriction for read-only users."
+msgstr ""
+"I modelli indicati, separati da virgola, saranno esonerati dalla restrizione "
+"di sola lettura per gli utenti di sola lettura."
+
+#. module: base_model_restrict_update
+#: model:ir.model.fields,field_description:base_model_restrict_update.field_ir_model__restrict_update
+msgid "Update Restrict Model"
+msgstr "Aggiorna modello limitato"
+
+#. module: base_model_restrict_update
+#: model:ir.model.fields,field_description:base_model_restrict_update.field_ir_model__update_allowed_group_ids
+msgid "Update-Allowed Groups"
+msgstr "Gruppi Aggiornamento-Abilitato"
+
+#. module: base_model_restrict_update
+#: model:ir.model,name:base_model_restrict_update.model_res_users
+msgid "User"
+msgstr "Utente"
+
+#. module: base_model_restrict_update
+#: model:ir.model.fields,help:base_model_restrict_update.field_ir_model__restrict_update
+msgid ""
+"When selected, the model is restricted to read-only unless the user belongs "
+"to an Update-Allowed Group."
+msgstr ""
+"Quando selezionata, il modello è limitato a solo lettura fino a che l'utente "
+"appartiene ad un gruppo Aggiornamento-Abilitato."
+
+#. module: base_model_restrict_update
+#. odoo-python
+#: code:addons/base_model_restrict_update/models/ir_model_access.py:0
+msgid "You are only allowed to read this record. (%(model)s - %(mode)s)"
+msgstr "Si è abilitati solo a leggere questo record. (%(model)s - %(mode)s)"
+
+#. module: base_model_restrict_update
+#. odoo-python
+#: code:addons/base_model_restrict_update/models/res_users.py:0
+msgid "You cannot make the admin user read-only."
+msgstr "L'utente admin non può essere sola lettura."

base_model_restrict_update/i18n/ja_JP.po

@@ -0,0 +1,110 @@
+# Translation of Odoo Server.
+# This file contains the translation of the following modules:
+# 	* base_model_restrict_update
+#
+msgid ""
+msgstr ""
+"Project-Id-Version: Odoo Server 16.0+e\n"
+"Report-Msgid-Bugs-To: \n"
+"POT-Creation-Date: 2024-12-08 15:24+0000\n"
+"PO-Revision-Date: 2024-12-08 15:24+0000\n"
+"Last-Translator: \n"
+"Language-Team: \n"
+"Language: \n"
+"MIME-Version: 1.0\n"
+"Content-Type: text/plain; charset=UTF-8\n"
+"Content-Transfer-Encoding: \n"
+"Plural-Forms: \n"
+
+#. module: base_model_restrict_update
+#: model_terms:ir.ui.view,arch_db:base_model_restrict_update.view_users_form
+msgid "<span style=\"padding: 0 10px;\">Read-only</span>"
+msgstr "<span style=\"padding: 0 10px;\">読取専用</span>"
+
+#. module: base_model_restrict_update
+#: model:ir.model,name:base_model_restrict_update.model_res_config_settings
+msgid "Config Settings"
+msgstr ""
+
+#. module: base_model_restrict_update
+#: model_terms:ir.ui.view,arch_db:base_model_restrict_update.res_config_settings_view_form
+msgid "Excluded Models From Readonly"
+msgstr ""
+
+#. module: base_model_restrict_update
+#: model:ir.model.fields,field_description:base_model_restrict_update.field_res_config_settings__excluded_models_from_readonly
+msgid "Excluded Models from Read-only"
+msgstr ""
+
+#. module: base_model_restrict_update
+#: model:ir.model,name:base_model_restrict_update.model_ir_model_access
+msgid "Model Access"
+msgstr "モデルアクセス"
+
+#. module: base_model_restrict_update
+#: model:ir.model,name:base_model_restrict_update.model_ir_model
+msgid "Models"
+msgstr "モデル"
+
+#. module: base_model_restrict_update
+#: model:ir.model.fields,field_description:base_model_restrict_update.field_res_users__is_readonly_user
+msgid "Read-only User"
+msgstr "読取専用ユーザ"
+
+#. module: base_model_restrict_update
+#: model:ir.model.fields,help:base_model_restrict_update.field_res_users__is_readonly_user
+msgid ""
+"Select this option to prevent the user from updating any business records."
+msgstr "選択すると、ユーザがビジネスレコードを更新できなくなります。"
+
+#. module: base_model_restrict_update
+#: model:ir.model.fields,field_description:base_model_restrict_update.field_ir_model__smart_search
+#: model:ir.model.fields,field_description:base_model_restrict_update.field_ir_model_access__smart_search
+#: model:ir.model.fields,field_description:base_model_restrict_update.field_res_config_settings__smart_search
+#: model:ir.model.fields,field_description:base_model_restrict_update.field_res_users__smart_search
+msgid "Smart Search"
+msgstr ""
+
+#. module: base_model_restrict_update
+#: model:ir.model.fields,help:base_model_restrict_update.field_res_config_settings__excluded_models_from_readonly
+#: model_terms:ir.ui.view,arch_db:base_model_restrict_update.res_config_settings_view_form
+msgid ""
+"Specified models, separated by commas, will be exempt from the read-only "
+"restriction for read-only users."
+msgstr ""
+
+#. module: base_model_restrict_update
+#: model:ir.model.fields,field_description:base_model_restrict_update.field_ir_model__restrict_update
+msgid "Update Restrict Model"
+msgstr "更新制限モデル"
+
+#. module: base_model_restrict_update
+#: model:ir.model.fields,field_description:base_model_restrict_update.field_ir_model__update_allowed_group_ids
+msgid "Update-Allowed Groups"
+msgstr "更新許可グループ"
+
+#. module: base_model_restrict_update
+#: model:ir.model,name:base_model_restrict_update.model_res_users
+msgid "User"
+msgstr "ユーザ"
+
+#. module: base_model_restrict_update
+#: model:ir.model.fields,help:base_model_restrict_update.field_ir_model__restrict_update
+msgid ""
+"When selected, the model is restricted to read-only unless the user belongs "
+"to an Update-Allowed Group."
+msgstr ""
+"有効化すると、更新許可グループに属するユーザのみモデルレコードを更新できま"
+"す。"
+
+#. module: base_model_restrict_update
+#. odoo-python
+#: code:addons/base_model_restrict_update/models/ir_model_access.py:0
+msgid "You are only allowed to read this record. (%(model)s - %(mode)s)"
+msgstr "このレコードの更新は許可されていません。(%(model)s - %(mode)s)"
+
+#. module: base_model_restrict_update
+#. odoo-python
+#: code:addons/base_model_restrict_update/models/res_users.py:0
+msgid "You cannot make the admin user read-only."
+msgstr "管理者ユーザは読取専用にできません。"

base_model_restrict_update/models/__init__.py

@@ -0,0 +1,4 @@
+from . import ir_model_access
+from . import ir_model
+from . import res_config_settings
+from . import res_users

base_model_restrict_update/models/ir_model.py

@@ -0,0 +1,19 @@
+# Copyright 2021-2024 Quartile (https://www.quartile.co)
+# License LGPL-3.0 or later (https://www.gnu.org/licenses/lgpl).
+
+from odoo import fields, models
+
+
+class IrModel(models.Model):
+    _inherit = "ir.model"
+
+    restrict_update = fields.Boolean(
+        "Update Restrict Model",
+        help="When selected, the model is restricted to read-only unless the "
+        "user belongs to an Update-Allowed Group.",
+    )
+    update_allowed_group_ids = fields.Many2many(
+        "res.groups",
+        "ir_model_res_groups_update_allowed_rel",
+        string="Update-Allowed Groups",
+    )

base_model_restrict_update/models/ir_model_access.py

@@ -0,0 +1,78 @@
+# Copyright 2021-2024 Quartile (https://www.quartile.co)
+# License LGPL-3.0 or later (https://www.gnu.org/licenses/lgpl).
+
+from odoo import api, models
+from odoo.exceptions import AccessError
+from odoo.tools.translate import _
+
+
+class IrModelAccess(models.Model):
+    _inherit = "ir.model.access"
+
+    @api.model
+    def _readonly_exclude_models(self):
+        """Models update/create by system, and should be excluded from checking"""
+        self.env.cr.execute(
+            """
+            SELECT m.model
+            FROM ir_model_access ma
+            JOIN ir_model m ON ma.model_id = m.id
+            WHERE ma.group_id IS NULL
+              AND (
+                ma.perm_write = TRUE
+                OR ma.perm_create = TRUE
+                OR ma.perm_unlink = TRUE
+              )
+            """,
+        )
+        return self.env.cr.fetchall()
+
+    @api.model
+    def _test_readonly(self, model):
+        if not self.env.user.is_readonly_user:
+            return False
+        if (model,) in self._readonly_exclude_models():
+            return False
+        models_to_exclude = (
+            self.env["ir.config_parameter"]
+            .sudo()
+            .get_param("base_model_restrict_update.excluded_models_from_readonly", "")
+        )
+        if model in models_to_exclude:
+            return False
+        return True
+
+    @api.model
+    def _test_restrict_update(self, model):
+        # Get the IDs of unresticted users for the model if it's restricted
+        self.env.cr.execute(
+            """
+            SELECT gurel.uid
+            FROM ir_model m
+            LEFT JOIN ir_model_res_groups_update_allowed_rel mgrel
+              ON m.id = mgrel.ir_model_id
+            LEFT JOIN res_groups_users_rel gurel
+              ON mgrel.res_groups_id = gurel.gid
+            WHERE m.model = %s
+              AND m.restrict_update = true
+            """,
+            (model,),
+        )
+        query_res = self.env.cr.fetchall()
+        return bool(query_res) and (self.env.uid,) not in query_res
+
+    @api.model
+    def check(self, model, mode="read", raise_exception=True):
+        if self.env.su:
+            return True
+        res = super().check(model, mode=mode, raise_exception=raise_exception)
+        if mode == "read":
+            return res
+        if self._test_readonly(model) or self._test_restrict_update(model):
+            if not raise_exception:
+                return False
+            raise AccessError(
+                _("You are only allowed to read this record. (%(model)s - %(mode)s)")
+                % {"model": model, "mode": mode}
+            )
+        return res

base_model_restrict_update/models/res_config_settings.py

@@ -0,0 +1,15 @@
+# Copyright 2024 Quartile (https://www.quartile.co)
+# License LGPL-3.0 or later (https://www.gnu.org/licenses/lgpl).
+
+from odoo import fields, models
+
+
+class ResConfigSettings(models.TransientModel):
+    _inherit = "res.config.settings"
+
+    excluded_models_from_readonly = fields.Char(
+        "Excluded Models from Read-only",
+        help="Specified models, separated by commas, will be exempt from the read-only "
+        "restriction for read-only users.",
+        config_parameter="base_model_restrict_update.excluded_models_from_readonly",
+    )

base_model_restrict_update/models/res_users.py

@@ -0,0 +1,21 @@
+# Copyright 2021-2024 Quartile (https://www.quartile.co)
+# License LGPL-3.0 or later (https://www.gnu.org/licenses/lgpl).
+
+from odoo import _, api, fields, models
+from odoo.exceptions import UserError
+
+
+class ResUsers(models.Model):
+    _inherit = "res.users"
+
+    is_readonly_user = fields.Boolean(
+        "Read-only User",
+        help="Select this option to prevent the user from updating any business "
+        "records.",
+    )
+
+    @api.constrains("is_readonly_user", "groups_id")
+    def _check_is_readonly_user(self):
+        for user in self:
+            if user.has_group("base.group_system") and user.is_readonly_user:
+                raise UserError(_("You cannot make the admin user read-only."))

base_model_restrict_update/pyproject.toml

@@ -0,0 +1,3 @@
+[build-system]
+requires = ["whool"]
+build-backend = "whool.buildapi"

base_model_restrict_update/readme/CONFIGURE.md

@@ -0,0 +1,17 @@
+When you want to limit the update permissions of a model to certain
+groups:
+
+1.  Go to *Settings \> Techinical \> Database Structure \> Models*
+2.  Open the form view of the model, and select **Update Restrict
+    Model**
+3.  Assign the groups that should be exempt from the restriction to
+    **Update-allowed Groups**
+
+When you want revoke update permissions for a specific user:
+
+1.  Go to *Settings \> Users & Companies \> Users*
+2.  Open the user's form view and click the **Read-only** smart button
+3.  In case you wish to exclude some models from being read-only, go to
+    *Settings \> General Settings* and update **Excluded Models from
+    Read-only** under the Permissions section by listing the models
+    separated by commas (e.g., sale.order,sale.order.line).

base_model_restrict_update/readme/CONTRIBUTORS.md

@@ -0,0 +1,4 @@
+- [Quartile](https://www.quartile.co):
+  - Yoshi Tashiro \<<tashiro@quartile.co>\>
+- Ecosoft
+  - Kitti U. \<<kittiu@ecosoft.co.th>\>

base_model_restrict_update/readme/CREDITS.md

@@ -0,0 +1,2 @@
+- This module borrows the idea from 'Moises Lopez
+  \<<https://odoo-community.org/groups/contributors-15/contributors-161807>\>'

base_model_restrict_update/readme/DESCRIPTION.md

@@ -0,0 +1,5 @@
+This module adds the following features:
+
+- The ability to limit the update permissions for a model to certain
+  groups
+- The ability to revoke update permissions for specific users

base_model_restrict_update/static/description/index.html

@@ -0,0 +1,472 @@
+<!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Transitional//EN" "http://www.w3.org/TR/xhtml1/DTD/xhtml1-transitional.dtd">
+<html xmlns="http://www.w3.org/1999/xhtml" xml:lang="en" lang="en">
+<head>
+<meta http-equiv="Content-Type" content="text/html; charset=utf-8" />
+<meta name="generator" content="Docutils: https://docutils.sourceforge.io/" />
+<title>README.rst</title>
+<style type="text/css">
+
+/*
+:Author: David Goodger (goodger@python.org)
+:Id: $Id: html4css1.css 9511 2024-01-13 09:50:07Z milde $
+:Copyright: This stylesheet has been placed in the public domain.
+
+Default cascading style sheet for the HTML output of Docutils.
+Despite the name, some widely supported CSS2 features are used.
+
+See https://docutils.sourceforge.io/docs/howto/html-stylesheets.html for how to
+customize this style sheet.
+*/
+
+/* used to remove borders from tables and images */
+.borderless, table.borderless td, table.borderless th {
+  border: 0 }
+
+table.borderless td, table.borderless th {
+  /* Override padding for "table.docutils td" with "! important".
+     The right padding separates the table cells. */
+  padding: 0 0.5em 0 0 ! important }
+
+.first {
+  /* Override more specific margin styles with "! important". */
+  margin-top: 0 ! important }
+
+.last, .with-subtitle {
+  margin-bottom: 0 ! important }
+
+.hidden {
+  display: none }
+
+.subscript {
+  vertical-align: sub;
+  font-size: smaller }
+
+.superscript {
+  vertical-align: super;
+  font-size: smaller }
+
+a.toc-backref {
+  text-decoration: none ;
+  color: black }
+
+blockquote.epigraph {
+  margin: 2em 5em ; }
+
+dl.docutils dd {
+  margin-bottom: 0.5em }
+
+object[type="image/svg+xml"], object[type="application/x-shockwave-flash"] {
+  overflow: hidden;
+}
+
+/* Uncomment (and remove this text!) to get bold-faced definition list terms
+dl.docutils dt {
+  font-weight: bold }
+*/
+
+div.abstract {
+  margin: 2em 5em }
+
+div.abstract p.topic-title {
+  font-weight: bold ;
+  text-align: center }
+
+div.admonition, div.attention, div.caution, div.danger, div.error,
+div.hint, div.important, div.note, div.tip, div.warning {
+  margin: 2em ;
+  border: medium outset ;
+  padding: 1em }
+
+div.admonition p.admonition-title, div.hint p.admonition-title,
+div.important p.admonition-title, div.note p.admonition-title,
+div.tip p.admonition-title {
+  font-weight: bold ;
+  font-family: sans-serif }
+
+div.attention p.admonition-title, div.caution p.admonition-title,
+div.danger p.admonition-title, div.error p.admonition-title,
+div.warning p.admonition-title, .code .error {
+  color: red ;
+  font-weight: bold ;
+  font-family: sans-serif }
+
+/* Uncomment (and remove this text!) to get reduced vertical space in
+   compound paragraphs.
+div.compound .compound-first, div.compound .compound-middle {
+  margin-bottom: 0.5em }
+
+div.compound .compound-last, div.compound .compound-middle {
+  margin-top: 0.5em }
+*/
+
+div.dedication {
+  margin: 2em 5em ;
+  text-align: center ;
+  font-style: italic }
+
+div.dedication p.topic-title {
+  font-weight: bold ;
+  font-style: normal }
+
+div.figure {
+  margin-left: 2em ;
+  margin-right: 2em }
+
+div.footer, div.header {
+  clear: both;
+  font-size: smaller }
+
+div.line-block {
+  display: block ;
+  margin-top: 1em ;
+  margin-bottom: 1em }
+
+div.line-block div.line-block {
+  margin-top: 0 ;
+  margin-bottom: 0 ;
+  margin-left: 1.5em }
+
+div.sidebar {
+  margin: 0 0 0.5em 1em ;
+  border: medium outset ;
+  padding: 1em ;
+  background-color: #ffffee ;
+  width: 40% ;
+  float: right ;
+  clear: right }
+
+div.sidebar p.rubric {
+  font-family: sans-serif ;
+  font-size: medium }
+
+div.system-messages {
+  margin: 5em }
+
+div.system-messages h1 {
+  color: red }
+
+div.system-message {
+  border: medium outset ;
+  padding: 1em }
+
+div.system-message p.system-message-title {
+  color: red ;
+  font-weight: bold }
+
+div.topic {
+  margin: 2em }
+
+h1.section-subtitle, h2.section-subtitle, h3.section-subtitle,
+h4.section-subtitle, h5.section-subtitle, h6.section-subtitle {
+  margin-top: 0.4em }
+
+h1.title {
+  text-align: center }
+
+h2.subtitle {
+  text-align: center }
+
+hr.docutils {
+  width: 75% }
+
+img.align-left, .figure.align-left, object.align-left, table.align-left {
+  clear: left ;
+  float: left ;
+  margin-right: 1em }
+
+img.align-right, .figure.align-right, object.align-right, table.align-right {
+  clear: right ;
+  float: right ;
+  margin-left: 1em }
+
+img.align-center, .figure.align-center, object.align-center {
+  display: block;
+  margin-left: auto;
+  margin-right: auto;
+}
+
+table.align-center {
+  margin-left: auto;
+  margin-right: auto;
+}
+
+.align-left {
+  text-align: left }
+
+.align-center {
+  clear: both ;
+  text-align: center }
+
+.align-right {
+  text-align: right }
+
+/* reset inner alignment in figures */
+div.align-right {
+  text-align: inherit }
+
+/* div.align-center * { */
+/*   text-align: left } */
+
+.align-top    {
+  vertical-align: top }
+
+.align-middle {
+  vertical-align: middle }
+
+.align-bottom {
+  vertical-align: bottom }
+
+ol.simple, ul.simple {
+  margin-bottom: 1em }
+
+ol.arabic {
+  list-style: decimal }
+
+ol.loweralpha {
+  list-style: lower-alpha }
+
+ol.upperalpha {
+  list-style: upper-alpha }
+
+ol.lowerroman {
+  list-style: lower-roman }
+
+ol.upperroman {
+  list-style: upper-roman }
+
+p.attribution {
+  text-align: right ;
+  margin-left: 50% }
+
+p.caption {
+  font-style: italic }
+
+p.credits {
+  font-style: italic ;
+  font-size: smaller }
+
+p.label {
+  white-space: nowrap }
+
+p.rubric {
+  font-weight: bold ;
+  font-size: larger ;
+  color: maroon ;
+  text-align: center }
+
+p.sidebar-title {
+  font-family: sans-serif ;
+  font-weight: bold ;
+  font-size: larger }
+
+p.sidebar-subtitle {
+  font-family: sans-serif ;
+  font-weight: bold }
+
+p.topic-title {
+  font-weight: bold }
+
+pre.address {
+  margin-bottom: 0 ;
+  margin-top: 0 ;
+  font: inherit }
+
+pre.literal-block, pre.doctest-block, pre.math, pre.code {
+  margin-left: 2em ;
+  margin-right: 2em }
+
+pre.code .ln { color: gray; } /* line numbers */
+pre.code, code { background-color: #eeeeee }
+pre.code .comment, code .comment { color: #5C6576 }
+pre.code .keyword, code .keyword { color: #3B0D06; font-weight: bold }
+pre.code .literal.string, code .literal.string { color: #0C5404 }
+pre.code .name.builtin, code .name.builtin { color: #352B84 }
+pre.code .deleted, code .deleted { background-color: #DEB0A1}
+pre.code .inserted, code .inserted { background-color: #A3D289}
+
+span.classifier {
+  font-family: sans-serif ;
+  font-style: oblique }
+
+span.classifier-delimiter {
+  font-family: sans-serif ;
+  font-weight: bold }
+
+span.interpreted {
+  font-family: sans-serif }
+
+span.option {
+  white-space: nowrap }
+
+span.pre {
+  white-space: pre }
+
+span.problematic, pre.problematic {
+  color: red }
+
+span.section-subtitle {
+  /* font-size relative to parent (h1..h6 element) */
+  font-size: 80% }
+
+table.citation {
+  border-left: solid 1px gray;
+  margin-left: 1px }
+
+table.docinfo {
+  margin: 2em 4em }
+
+table.docutils {
+  margin-top: 0.5em ;
+  margin-bottom: 0.5em }
+
+table.footnote {
+  border-left: solid 1px black;
+  margin-left: 1px }
+
+table.docutils td, table.docutils th,
+table.docinfo td, table.docinfo th {
+  padding-left: 0.5em ;
+  padding-right: 0.5em ;
+  vertical-align: top }
+
+table.docutils th.field-name, table.docinfo th.docinfo-name {
+  font-weight: bold ;
+  text-align: left ;
+  white-space: nowrap ;
+  padding-left: 0 }
+
+/* "booktabs" style (no vertical lines) */
+table.docutils.booktabs {
+  border: 0px;
+  border-top: 2px solid;
+  border-bottom: 2px solid;
+  border-collapse: collapse;
+}
+table.docutils.booktabs * {
+  border: 0px;
+}
+table.docutils.booktabs th {
+  border-bottom: thin solid;
+  text-align: left;
+}
+
+h1 tt.docutils, h2 tt.docutils, h3 tt.docutils,
+h4 tt.docutils, h5 tt.docutils, h6 tt.docutils {
+  font-size: 100% }
+
+ul.auto-toc {
+  list-style-type: none }
+
+</style>
+</head>
+<body>
+<div class="document">
+
+
+<a class="reference external image-reference" href="https://odoo-community.org/get-involved?utm_source=readme">
+<img alt="Odoo Community Association" src="https://odoo-community.org/readme-banner-image" />
+</a>
+<div class="section" id="update-restrict-model">
+<h1>Update Restrict Model</h1>
+<!-- !!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!
+!! This file is generated by oca-gen-addon-readme !!
+!! changes will be overwritten.                   !!
+!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!
+!! source digest: sha256:a0a6bc8d798dea0412aeb5e7c9f5fe8f7aec4d6d0e40c7e0d2c19ffc07bbb2cb
+!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!! -->
+<p><a class="reference external image-reference" href="https://odoo-community.org/page/development-status"><img alt="Beta" src="https://img.shields.io/badge/maturity-Beta-yellow.png" /></a> <a class="reference external image-reference" href="http://www.gnu.org/licenses/lgpl-3.0-standalone.html"><img alt="License: LGPL-3" src="https://img.shields.io/badge/license-LGPL--3-blue.png" /></a> <a class="reference external image-reference" href="https://github.com/OCA/server-tools/tree/18.0/base_model_restrict_update"><img alt="OCA/server-tools" src="https://img.shields.io/badge/github-OCA%2Fserver--tools-lightgray.png?logo=github" /></a> <a class="reference external image-reference" href="https://translation.odoo-community.org/projects/server-tools-18-0/server-tools-18-0-base_model_restrict_update"><img alt="Translate me on Weblate" src="https://img.shields.io/badge/weblate-Translate%20me-F47D42.png" /></a> <a class="reference external image-reference" href="https://runboat.odoo-community.org/builds?repo=OCA/server-tools&amp;target_branch=18.0"><img alt="Try me on Runboat" src="https://img.shields.io/badge/runboat-Try%20me-875A7B.png" /></a></p>
+<p>This module adds the following features:</p>
+<ul class="simple">
+<li>The ability to limit the update permissions for a model to certain
+groups</li>
+<li>The ability to revoke update permissions for specific users</li>
+</ul>
+<p><strong>Table of contents</strong></p>
+<div class="contents local topic" id="contents">
+<ul class="simple">
+<li><a class="reference internal" href="#configuration" id="toc-entry-1">Configuration</a></li>
+<li><a class="reference internal" href="#bug-tracker" id="toc-entry-2">Bug Tracker</a></li>
+<li><a class="reference internal" href="#credits" id="toc-entry-3">Credits</a><ul>
+<li><a class="reference internal" href="#authors" id="toc-entry-4">Authors</a></li>
+<li><a class="reference internal" href="#contributors" id="toc-entry-5">Contributors</a></li>
+<li><a class="reference internal" href="#other-credits" id="toc-entry-6">Other credits</a></li>
+<li><a class="reference internal" href="#maintainers" id="toc-entry-7">Maintainers</a></li>
+</ul>
+</li>
+</ul>
+</div>
+<div class="section" id="configuration">
+<h2><a class="toc-backref" href="#toc-entry-1">Configuration</a></h2>
+<p>When you want to limit the update permissions of a model to certain
+groups:</p>
+<ol class="arabic simple">
+<li>Go to <em>Settings &gt; Techinical &gt; Database Structure &gt; Models</em></li>
+<li>Open the form view of the model, and select <strong>Update Restrict Model</strong></li>
+<li>Assign the groups that should be exempt from the restriction to
+<strong>Update-allowed Groups</strong></li>
+</ol>
+<p>When you want revoke update permissions for a specific user:</p>
+<ol class="arabic simple">
+<li>Go to <em>Settings &gt; Users &amp; Companies &gt; Users</em></li>
+<li>Open the user’s form view and click the <strong>Read-only</strong> smart button</li>
+<li>In case you wish to exclude some models from being read-only, go to
+<em>Settings &gt; General Settings</em> and update <strong>Excluded Models from
+Read-only</strong> under the Permissions section by listing the models
+separated by commas (e.g., sale.order,sale.order.line).</li>
+</ol>
+</div>
+<div class="section" id="bug-tracker">
+<h2><a class="toc-backref" href="#toc-entry-2">Bug Tracker</a></h2>
+<p>Bugs are tracked on <a class="reference external" href="https://github.com/OCA/server-tools/issues">GitHub Issues</a>.
+In case of trouble, please check there if your issue has already been reported.
+If you spotted it first, help us to smash it by providing a detailed and welcomed
+<a class="reference external" href="https://github.com/OCA/server-tools/issues/new?body=module:%20base_model_restrict_update%0Aversion:%2018.0%0A%0A**Steps%20to%20reproduce**%0A-%20...%0A%0A**Current%20behavior**%0A%0A**Expected%20behavior**">feedback</a>.</p>
+<p>Do not contact contributors directly about support or help with technical issues.</p>
+</div>
+<div class="section" id="credits">
+<h2><a class="toc-backref" href="#toc-entry-3">Credits</a></h2>
+<div class="section" id="authors">
+<h3><a class="toc-backref" href="#toc-entry-4">Authors</a></h3>
+<ul class="simple">
+<li>Quartile</li>
+</ul>
+</div>
+<div class="section" id="contributors">
+<h3><a class="toc-backref" href="#toc-entry-5">Contributors</a></h3>
+<ul class="simple">
+<li><a class="reference external" href="https://www.quartile.co">Quartile</a>:<ul>
+<li>Yoshi Tashiro &lt;<a class="reference external" href="mailto:tashiro&#64;quartile.co">tashiro&#64;quartile.co</a>&gt;</li>
+</ul>
+</li>
+<li>Ecosoft<ul>
+<li>Kitti U. &lt;<a class="reference external" href="mailto:kittiu&#64;ecosoft.co.th">kittiu&#64;ecosoft.co.th</a>&gt;</li>
+</ul>
+</li>
+</ul>
+</div>
+<div class="section" id="other-credits">
+<h3><a class="toc-backref" href="#toc-entry-6">Other credits</a></h3>
+<ul class="simple">
+<li>This module borrows the idea from ‘Moises Lopez
+&lt;<a class="reference external" href="https://odoo-community.org/groups/contributors-15/contributors-161807">https://odoo-community.org/groups/contributors-15/contributors-161807</a>&gt;’</li>
+</ul>
+</div>
+<div class="section" id="maintainers">
+<h3><a class="toc-backref" href="#toc-entry-7">Maintainers</a></h3>
+<p>This module is maintained by the OCA.</p>
+<a class="reference external image-reference" href="https://odoo-community.org">
+<img alt="Odoo Community Association" src="https://odoo-community.org/logo.png" />
+</a>
+<p>OCA, or the Odoo Community Association, is a nonprofit organization whose
+mission is to support the collaborative development of Odoo features and
+promote its widespread use.</p>
+<p>Current <a class="reference external" href="https://odoo-community.org/page/maintainer-role">maintainers</a>:</p>
+<p><a class="reference external image-reference" href="https://github.com/yostashiro"><img alt="yostashiro" src="https://github.com/yostashiro.png?size=40px" /></a> <a class="reference external image-reference" href="https://github.com/aungkokolin1997"><img alt="aungkokolin1997" src="https://github.com/aungkokolin1997.png?size=40px" /></a></p>
+<p>This module is part of the <a class="reference external" href="https://github.com/OCA/server-tools/tree/18.0/base_model_restrict_update">OCA/server-tools</a> project on GitHub.</p>
+<p>You are welcome to contribute. To learn how please visit <a class="reference external" href="https://odoo-community.org/page/Contribute">https://odoo-community.org/page/Contribute</a>.</p>
+</div>
+</div>
+</div>
+</div>
+</body>
+</html>

base_model_restrict_update/tests/__init__.py

@@ -0,0 +1 @@
+from . import test_base_model_restrict_update

base_model_restrict_update/tests/test_base_model_restrict_update.py

@@ -0,0 +1,91 @@
+# Copyright 2021-2024 Quartile (https://www.quartile.co)
+# License LGPL-3.0 or later (https://www.gnu.org/licenses/lgpl).
+
+from odoo.exceptions import AccessError, UserError
+from odoo.fields import Command
+from odoo.tests import common, tagged
+
+
+@tagged("post_install", "-at_install")
+class TestBaseModelRestrictUpdate(common.TransactionCase):
+    @classmethod
+    def setUpClass(cls):
+        super().setUpClass()
+        cls.model_partner = cls.env["ir.model"].search([("model", "=", "res.partner")])
+        cls.group_partner_update = cls.env["res.groups"].create(
+            {"name": "Partner Update Group"}
+        )
+        cls.test_user = cls.env["res.users"].create({"name": "test", "login": "test"})
+        cls.partner_model_with_test_user = cls.env["res.partner"].with_user(
+            cls.test_user.id
+        )
+        cls.test_partner_with_test_user = (
+            cls.env["res.partner"].with_user(cls.test_user.id).create({"name": "foo"})
+        )
+
+    def test_no_restriction(self):
+        self.partner_model_with_test_user.create({"name": "bar"})
+        self.test_partner_with_test_user.write({"name": "baz"})
+        self.test_partner_with_test_user.unlink()
+
+    def test_with_model_restriction(self):
+        self.model_partner.restrict_update = True
+        with self.assertRaises(AccessError):
+            self.partner_model_with_test_user.create({"name": "bar"})
+        with self.assertRaises(AccessError):
+            self.test_partner_with_test_user.write({"name": "baz"})
+        with self.assertRaises(AccessError):
+            self.test_partner_with_test_user.unlink()
+        self.model_partner.update_allowed_group_ids = self.group_partner_update
+        with self.assertRaises(AccessError):
+            self.partner_model_with_test_user.create({"name": "bar"})
+        with self.assertRaises(AccessError):
+            self.test_partner_with_test_user.write({"name": "baz"})
+        with self.assertRaises(AccessError):
+            self.test_partner_with_test_user.unlink()
+        self.test_user.groups_id = [Command.link(self.group_partner_update.id)]
+        self.partner_model_with_test_user.create({"name": "bar"})
+        self.test_partner_with_test_user.write({"name": "baz"})
+        self.test_partner_with_test_user.unlink()
+
+    def test_with_user_readonly(self):
+        self.test_user.is_readonly_user = True
+        with self.assertRaises(AccessError):
+            self.partner_model_with_test_user.create({"name": "bar"})
+        with self.assertRaises(AccessError):
+            self.test_partner_with_test_user.write({"name": "baz"})
+        with self.assertRaises(AccessError):
+            self.test_partner_with_test_user.unlink()
+        # To confirm that is_readonly_user prevails
+        self.model_partner.restrict_update = True
+        self.model_partner.update_allowed_group_ids = self.group_partner_update
+        self.test_user.groups_id = [Command.link(self.group_partner_update.id)]
+        with self.assertRaises(AccessError):
+            self.partner_model_with_test_user.create({"name": "bar"})
+        with self.assertRaises(AccessError):
+            self.test_partner_with_test_user.write({"name": "baz"})
+        with self.assertRaises(AccessError):
+            self.test_partner_with_test_user.unlink()
+        self.test_user.is_readonly_user = False
+        self.partner_model_with_test_user.create({"name": "bar"})
+        self.test_partner_with_test_user.write({"name": "baz"})
+        self.test_user.is_readonly_user = True
+        with self.assertRaises(AccessError):
+            self.test_partner_with_test_user.write({"name": "qux"})
+        with self.assertRaises(AccessError):
+            self.test_partner_with_test_user.unlink()
+        self.env["ir.config_parameter"].sudo().set_param(
+            "base_model_restrict_update.excluded_models_from_readonly", "res.partner"
+        )
+        self.test_partner_with_test_user.write({"name": "qux"})
+        self.test_partner_with_test_user.unlink()
+
+    def test_set_user_readonly(self):
+        group_system_id = self.env.ref("base.group_system").id
+        self.test_user.groups_id = [Command.link(group_system_id)]
+        with self.assertRaises(UserError):
+            self.test_user.is_readonly_user = True
+        self.test_user.groups_id = [Command.unlink(group_system_id)]
+        self.test_user.is_readonly_user = True
+        with self.assertRaises(UserError):
+            self.test_user.groups_id = [Command.link(group_system_id)]

base_model_restrict_update/views/ir_model_views.xml

@@ -0,0 +1,18 @@
+<?xml version="1.0" encoding="utf-8" ?>
+<odoo>
+    <record id="view_model_form" model="ir.ui.view">
+        <field name="name">ir.model form</field>
+        <field name="model">ir.model</field>
+        <field name="inherit_id" ref="base.view_model_form" />
+        <field name="arch" type="xml">
+            <field name="transient" position="after">
+                <field name="restrict_update" />
+                <field
+                    name="update_allowed_group_ids"
+                    invisible="restrict_update == False"
+                    widget="many2many_tags"
+                />
+            </field>
+        </field>
+    </record>
+</odoo>

base_model_restrict_update/views/res_config_settings.xml

@@ -0,0 +1,22 @@
+<?xml version="1.0" encoding="utf-8" ?>
+<odoo>
+    <record id="res_config_settings_view_form" model="ir.ui.view">
+        <field
+            name="name"
+        >res.config.settings.view.form.inherit.base.model.restrict.update</field>
+        <field name="model">res.config.settings</field>
+        <field name="inherit_id" ref="base_setup.res_config_settings_view_form" />
+        <field name="arch" type="xml">
+            <xpath expr="//block[@id='user_default_rights']" position="inside">
+                <setting
+                    string="Excluded Models From Readonly"
+                    help="Specified models, separated by commas, will be exempt from the read-only restriction for read-only users."
+                    title="Excluded Models From Readonly"
+                    id="exclude_models_from_readonly"
+                >
+                    <field name="excluded_models_from_readonly" class="o_light_label" />
+                </setting>
+            </xpath>
+        </field>
+    </record>
+</odoo>

base_model_restrict_update/views/res_users_views.xml

@@ -0,0 +1,20 @@
+<?xml version="1.0" encoding="utf-8" ?>
+<odoo>
+    <record id="view_users_form" model="ir.ui.view">
+        <field name="name">res.users.form</field>
+        <field name="model">res.users</field>
+        <field name="inherit_id" ref="base.view_users_form" />
+        <field name="arch" type="xml">
+            <div class="oe_button_box" name="button_box" position="inside">
+                <div
+                    name="toggle_is_readonly_user"
+                    class="btn-group btn oe_stat_button"
+                    style="align-items: center;"
+                >
+                    <span style="padding: 0 10px;">Read-only</span>
+                    <field name="is_readonly_user" widget="boolean_toggle" />
+                </div>
+            </div>
+        </field>
+    </record>
+</odoo>