# Security

Agencies defines 3 group(s), 4 access right(s) and 4 record rule(s). This page states who can see and edit what, in plain language, with the exact rules underneath. Generated from the installed database on 2026-10-14 for version 19.0.2.1.9.

**Agencies defines 3 group(s), 4 access right(s) and 4 record rule(s). This page states who can see and edit what, in plain language, with the exact rules underneath. Generated from the installed database on 2026-10-14 for version 19.0.2.1.9.**

## Groups

### Agencies (`j_law_agent.res_groups_privilege_j_agent`) {#group-j-law-agent-res-groups-privilege-j-agent}

A privilege: the heading under which the groups below appear on the user form.

### Manager: All Documents (`j_law_agent.group_j_agent_manager`) {#group-j-law-agent-group-j-agent-manager}

Implies: Agencies / User: Own Documents (`j_law_agent.group_j_agent_user`)

### Read-only (`j_law_agent.group_j_agent_readonly`) {#group-j-law-agent-group-j-agent-readonly}

Implies: Role / User (`base.group_user`)

### User: Own Documents (`j_law_agent.group_j_agent_user`) {#group-j-law-agent-group-j-agent-user}

Implies: Agencies / Read-only (`j_law_agent.group_j_agent_readonly`)

## Access rights

### Legal Agency (`j.agent`) {#access-j-agent}

| Group | Read | Write | Create | Delete |
|---|---|---|---|---|
| Role / Portal (`base.group_portal`) | yes | no | no | no |
| Agencies / Manager: All Documents (`j_law_agent.group_j_agent_manager`) | yes | yes | yes | yes |
| Agencies / Read-only (`j_law_agent.group_j_agent_readonly`) | yes | no | no | no |
| Agencies / User: Own Documents (`j_law_agent.group_j_agent_user`) | yes | yes | yes | no |

## Record rules

### Agency: company isolation (`j_law_agent.rule_j_agent_company`) {#rule-j-law-agent-rule-j-agent-company}

On Legal Agency (`j.agent`) for everyone: read, write, create, delete.

Records where "__jdocsvar8__" is one of the user's companies.

```python
[('company_id', 'in', company_ids)]
```

### Agency: all documents (manager) (`j_law_agent.rule_j_agent_manager_all`) {#rule-j-law-agent-rule-j-agent-manager-all}

On Legal Agency (`j.agent`) for Agencies / Manager: All Documents (`j_law_agent.group_j_agent_manager`): read, write, create, delete.

Records where every record.

```python
[(1, '=', 1)]
```

### Agency: portal scoped to principal (`j_law_agent.rule_j_agent_portal`) {#rule-j-law-agent-rule-j-agent-portal}

On Legal Agency (`j.agent`) for Role / Portal (`base.group_portal`): read, write, create, delete.

```python

                ['|',
                    ('client_id', '=', user.partner_id.id),
                    ('client_ids', 'in', user.partner_id.ids)]
            
```

### Agency: own documents (user) (`j_law_agent.rule_j_agent_user_own`) {#rule-j-law-agent-rule-j-agent-user-own}

On Legal Agency (`j.agent`) for Agencies / User: Own Documents (`j_law_agent.group_j_agent_user`): read, write, create, delete.

```python

                ['|',
                    ('agent_ids', 'in', user.partner_id.ids),
                    ('message_partner_ids', 'in', user.partner_id.ids)]
            
```

---

- Source: https://jaah.app/docs/law-agency/security
- Updated: 2026-10-14
- Version: Agencies 19.0.2.1.9