[18.0][ADD] base_archive_manager

base_archive_manager/README.rst

@@ -0,0 +1,108 @@
+===============
+Archive Manager
+===============
+
+.. 
+   !!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!
+   !! This file is generated by oca-gen-addon-readme !!
+   !! changes will be overwritten.                   !!
+   !!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!
+   !! source digest: sha256:2346ac753b8e3940aa35c3ea94dbd53152c6d64b6cdb1f10d20d7af3edee9342
+   !!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!
+
+.. |badge1| image:: https://img.shields.io/badge/maturity-Beta-yellow.png
+    :target: https://odoo-community.org/page/development-status
+    :alt: Beta
+.. |badge2| image:: https://img.shields.io/badge/licence-AGPL--3-blue.png
+    :target: http://www.gnu.org/licenses/agpl-3.0-standalone.html
+    :alt: License: AGPL-3
+.. |badge3| image:: https://img.shields.io/badge/github-OCA%2Fserver--ux-lightgray.png?logo=github
+    :target: https://github.com/OCA/server-ux/tree/18.0/base_archive_manager
+    :alt: OCA/server-ux
+.. |badge4| image:: https://img.shields.io/badge/weblate-Translate%20me-F47D42.png
+    :target: https://translation.odoo-community.org/projects/server-ux-18-0/server-ux-18-0-base_archive_manager
+    :alt: Translate me on Weblate
+.. |badge5| image:: https://img.shields.io/badge/runboat-Try%20me-875A7B.png
+    :target: https://runboat.odoo-community.org/builds?repo=OCA/server-ux&target_branch=18.0
+    :alt: Try me on Runboat
+
+|badge1| |badge2| |badge3| |badge4| |badge5|
+
+This module allows administrators to control who can archive and
+unarchive records in Odoo. By default, Odoo only provides a ``write``
+permission, which implicitly allows any user with write access to
+archive and unarchive records. This module introduces specific
+``Archive Access`` and ``Unarchive Access`` permissions on the Access
+Rights (``ir.model.access``) level.
+
+**Table of contents**
+
+.. contents::
+   :local:
+
+Configuration
+=============
+
+To configure this module, you need to:
+
+1. Go to *Settings > Technical > Security > Access Rights*.
+2. Open any access right record.
+3. You will see two new checkboxes: **Archive Access**
+   (``perm_archive``) and **Unarchive Access** (``perm_unarchive``).
+4. Check or uncheck these boxes to grant or deny archive/unarchive
+   permissions for the corresponding group and model.
+
+Usage
+=====
+
+Once configured, the module automatically controls the visibility of the
+Archive and Unarchive actions across the system:
+
+- In Form views, the ``Active`` stat button will be hidden if the user
+  lacks the required permission to toggle it (e.g., if a record is
+  active and the user lacks archive permission, the button is hidden).
+- In List and Kanban views, the ``Archive`` and ``Unarchive`` action
+  menu items will be hidden depending on the user's permissions.
+
+Bug Tracker
+===========
+
+Bugs are tracked on `GitHub Issues <https://github.com/OCA/server-ux/issues>`_.
+In case of trouble, please check there if your issue has already been reported.
+If you spotted it first, help us to smash it by providing a detailed and welcomed
+`feedback <https://github.com/OCA/server-ux/issues/new?body=module:%20base_archive_manager%0Aversion:%2018.0%0A%0A**Steps%20to%20reproduce**%0A-%20...%0A%0A**Current%20behavior**%0A%0A**Expected%20behavior**>`_.
+
+Do not contact contributors directly about support or help with technical issues.
+
+Credits
+=======
+
+Authors
+-------
+
+* Solomon Prabu
+* CIT Services
+
+Contributors
+------------
+
+- `CIT-Services <cit-services.eu>`__
+
+  - Solomon Prabu s.prabu@cit-services.eu
+
+Maintainers
+-----------
+
+This module is maintained by the OCA.
+
+.. image:: https://odoo-community.org/logo.png
+   :alt: Odoo Community Association
+   :target: https://odoo-community.org
+
+OCA, or the Odoo Community Association, is a nonprofit organization whose
+mission is to support the collaborative development of Odoo features and
+promote its widespread use.
+
+This module is part of the `OCA/server-ux <https://github.com/OCA/server-ux/tree/18.0/base_archive_manager>`_ project on GitHub.
+
+You are welcome to contribute. To learn how please visit https://odoo-community.org/page/Contribute.

base_archive_manager/__init__.py

@@ -0,0 +1,4 @@
+# Copyright 2026 CIT Services
+# License AGPL-3.0 or later (http://www.gnu.org/licenses/agpl).
+
+from . import models

base_archive_manager/__manifest__.py

@@ -0,0 +1,22 @@
+# Copyright CIT Services 2026-27
+# License AGPL-3.0 or later (http://www.gnu.org/licenses/agpl.html).
+
+{
+    "name": "Archive Manager",
+    "summary": "Manage model archive/unarchive accesses",
+    "category": "Personalization",
+    "version": "18.0.1.0.0",
+    "depends": ["web"],
+    "author": "Solomon Prabu, CIT Services, Odoo Community Association (OCA)",
+    "website": "https://github.com/OCA/server-ux",
+    "assets": {
+        "web.assets_backend": [
+            "base_archive_manager/static/src/js/listController.esm.js",
+            "base_archive_manager/static/src/js/formController.esm.js",
+            "base_archive_manager/static/src/js/kanbanController.esm.js",
+        ],
+    },
+    "data": ["views/ir_model_access.xml", "views/res_groups.xml"],
+    "license": "AGPL-3",
+    "installable": True,
+}

base_archive_manager/models/__init__.py

@@ -0,0 +1,5 @@
+# Copyright 2026 CIT Services
+# License AGPL-3.0 or later (http://www.gnu.org/licenses/agpl).
+
+from . import ir_model_access
+from . import ir_ui_view

base_archive_manager/models/ir_model_access.py

@@ -0,0 +1,64 @@
+# Copyright 2026 CIT Services
+# License AGPL-3.0 or later (http://www.gnu.org/licenses/agpl).
+
+from odoo import api, fields, models, tools
+from odoo.exceptions import AccessError
+
+
+class IrModelAccess(models.Model):
+    _inherit = "ir.model.access"
+
+    perm_archive = fields.Boolean("Archive Access", default=True)
+    perm_unarchive = fields.Boolean("Unarchive Access", default=True)
+
+    @api.model
+    @tools.ormcache("self.env.uid", "model_name")
+    def _check_archive_access_cached(self, model_name):
+        group_ids = self.env.user._get_group_ids()
+        domain = [
+            ("model_id.model", "=", model_name),
+            ("perm_archive", "=", True),
+            "|",
+            ("group_id", "=", False),
+            ("group_id", "in", group_ids),
+        ]
+        return self.sudo().search_count(domain)
+
+    @api.model
+    def _check_archive_access(self, model_name, raise_exception=True):
+        """Check if the current user has permission to archive records of model_name."""
+        if self.env.su:
+            return True
+        has_archive = self._check_archive_access_cached(model_name)
+        if not has_archive and raise_exception:
+            raise AccessError(
+                self.env._("You are not allowed to archive records of model %s.")
+                % model_name
+            )
+        return has_archive
+
+    @api.model
+    @tools.ormcache("self.env.uid", "model_name")
+    def _check_unarchive_access_cached(self, model_name):
+        group_ids = self.env.user._get_group_ids()
+        domain = [
+            ("model_id.model", "=", model_name),
+            ("perm_unarchive", "=", True),
+            "|",
+            ("group_id", "=", False),
+            ("group_id", "in", group_ids),
+        ]
+        return self.sudo().search_count(domain)
+
+    @api.model
+    def _check_unarchive_access(self, model_name, raise_exception=True):
+        """Check if the current user has permission to unarchive records of model_name."""
+        if self.env.su:
+            return True
+        has_unarchive = self._check_unarchive_access_cached(model_name)
+        if not has_unarchive and raise_exception:
+            raise AccessError(
+                self.env._("You are not allowed to unarchive records of model %s.")
+                % model_name
+            )
+        return has_unarchive

base_archive_manager/models/ir_ui_view.py

@@ -0,0 +1,31 @@
+# Copyright 2026 CIT Services
+# License LGPL-3.0 or later (http://www.gnu.org/licenses/lgpl).
+
+from odoo import models
+
+
+class IrUiView(models.Model):
+    _inherit = "ir.ui.view"
+
+    def _postprocess_access_rights(self, tree):
+        """Restrict the 'Archive/Unarchive' action based
+        on the user's model access rights."""
+        target_model = tree.get("model_access_rights")
+        tree = super()._postprocess_access_rights(tree)
+        if (
+            not target_model
+            or tree.tag not in ("list", "form", "kanban")
+            or self.env.su
+        ):
+            return tree
+        can_archive = self.env["ir.model.access"]._check_archive_access(
+            target_model, raise_exception=False
+        )
+        can_unarchive = self.env["ir.model.access"]._check_unarchive_access(
+            target_model, raise_exception=False
+        )
+        if not can_archive:
+            tree.set("archive", "0")
+        if not can_unarchive:
+            tree.set("unarchive", "0")
+        return tree

base_archive_manager/pyproject.toml

@@ -0,0 +1,3 @@
+[build-system]
+requires = ["whool"]
+build-backend = "whool.buildapi"

base_archive_manager/readme/CONFIGURE.md

@@ -0,0 +1,6 @@
+To configure this module, you need to:
+
+1. Go to *Settings > Technical > Security > Access Rights*.
+2. Open any access right record.
+3. You will see two new checkboxes: **Archive Access** (`perm_archive`) and **Unarchive Access** (`perm_unarchive`).
+4. Check or uncheck these boxes to grant or deny archive/unarchive permissions for the corresponding group and model.

base_archive_manager/readme/CONTRIBUTORS.md

@@ -0,0 +1,2 @@
+- [CIT-Services](cit-services.eu)
+  - Solomon Prabu <s.prabu@cit-services.eu>

base_archive_manager/readme/DESCRIPTION.md

@@ -0,0 +1 @@
+This module allows administrators to control who can archive and unarchive records in Odoo. By default, Odoo only provides a `write` permission, which implicitly allows any user with write access to archive and unarchive records. This module introduces specific `Archive Access` and `Unarchive Access` permissions on the Access Rights (`ir.model.access`) level.

base_archive_manager/readme/USAGE.md

@@ -0,0 +1,4 @@
+Once configured, the module automatically controls the visibility of the Archive and Unarchive actions across the system:
+
+* In Form views, the `Active` stat button will be hidden if the user lacks the required permission to toggle it (e.g., if a record is active and the user lacks archive permission, the button is hidden).
+* In List and Kanban views, the `Archive` and `Unarchive` action menu items will be hidden depending on the user's permissions.