different permissions based on workflow state
I need to set up different permission on an object based on its workflow state. For instance, 'manager group' can edit the object only if state=draft but 'super manager group' can edit it also if state=validated. It seems that's not possible using ir.model.access and I'm evaluating if it could be done using ir.rule . It seems not... Is there a official way to get this or do I need to implement this feature (maybe by adding a condition into ir.model.access machinery). odony This is not possible by default with ir.model.access , because this permission model is designed to act like simple Unix