# Security

Consultations defines 3 group(s), 15 access right(s) and 4 record rule(s). This page states who can see and edit what, in plain language, with the exact rules underneath. Generated from the installed database on 2026-10-14 for version 19.0.1.0.28.

**Consultations defines 3 group(s), 15 access right(s) and 4 record rule(s). This page states who can see and edit what, in plain language, with the exact rules underneath. Generated from the installed database on 2026-10-14 for version 19.0.1.0.28.**

## Groups

### Consulting (`j_law_consulting.res_groups_privilege_j_consulting`) {#group-j-law-consulting-res-groups-privilege-j-consulting}

A privilege: the heading under which the groups below appear on the user form.

### Manager: All Documents (`j_law_consulting.group_j_consulting_manager`) {#group-j-law-consulting-group-j-consulting-manager}

Implies: Consulting / User: Own Documents (`j_law_consulting.group_j_consulting_user`)

### Read-only (`j_law_consulting.group_j_consulting_readonly`) {#group-j-law-consulting-group-j-consulting-readonly}


### User: Own Documents (`j_law_consulting.group_j_consulting_user`) {#group-j-law-consulting-group-j-consulting-user}

Implies: Consulting / Read-only (`j_law_consulting.group_j_consulting_readonly`)

## Access rights

### Consulting (`j.consulting`) {#access-j-consulting}

| Group | Read | Write | Create | Delete |
|---|---|---|---|---|
| Role / Portal (`base.group_portal`) | yes | no | no | no |
| Consulting / Manager: All Documents (`j_law_consulting.group_j_consulting_manager`) | yes | yes | yes | yes |
| Consulting / Read-only (`j_law_consulting.group_j_consulting_readonly`) | yes | no | no | no |
| Consulting / User: Own Documents (`j_law_consulting.group_j_consulting_user`) | yes | yes | yes | no |

### Consulting Reject Reason (`j.consulting.reject.reason`) {#access-j-consulting-reject-reason}

| Group | Read | Write | Create | Delete |
|---|---|---|---|---|
| Consulting / Manager: All Documents (`j_law_consulting.group_j_consulting_manager`) | yes | yes | yes | yes |
| Consulting / Read-only (`j_law_consulting.group_j_consulting_readonly`) | yes | no | no | no |
| Consulting / User: Own Documents (`j_law_consulting.group_j_consulting_user`) | yes | yes | yes | no |

### Consulting Reject Wizard (`j.consulting.reject.wizard`) {#access-j-consulting-reject-wizard}

| Group | Read | Write | Create | Delete |
|---|---|---|---|---|
| Consulting / Manager: All Documents (`j_law_consulting.group_j_consulting_manager`) | yes | yes | yes | yes |
| Consulting / User: Own Documents (`j_law_consulting.group_j_consulting_user`) | yes | yes | yes | yes |

### Consulting State Tag (filter helper) (`j.consulting.state.tag`) {#access-j-consulting-state-tag}

| Group | Read | Write | Create | Delete |
|---|---|---|---|---|
| Consulting / Manager: All Documents (`j_law_consulting.group_j_consulting_manager`) | yes | yes | yes | yes |
| Consulting / Read-only (`j_law_consulting.group_j_consulting_readonly`) | yes | no | no | no |

### List Report Wizard (`j.list.report.wizard`) {#access-j-list-report-wizard}

| Group | Read | Write | Create | Delete |
|---|---|---|---|---|
| Consulting / Read-only (`j_law_consulting.group_j_consulting_readonly`) | yes | no | no | no |
| Consulting / User: Own Documents (`j_law_consulting.group_j_consulting_user`) | yes | yes | yes | yes |

### Neglected Report Wizard (`j.neglected.report.wizard`) {#access-j-neglected-report-wizard}

| Group | Read | Write | Create | Delete |
|---|---|---|---|---|
| Consulting / Read-only (`j_law_consulting.group_j_consulting_readonly`) | yes | no | no | no |
| Consulting / User: Own Documents (`j_law_consulting.group_j_consulting_user`) | yes | yes | yes | yes |

## Record rules

### Consulting: company isolation (`j_law_consulting.rule_j_consulting_company`) {#rule-j-law-consulting-rule-j-consulting-company}

On Consulting (`j.consulting`) for everyone: read, write, create, delete.

Records where "__jdocsvar8__" is one of the user's companies.

```python
[('company_id', 'in', company_ids)]
```

### Consulting: all documents (manager) (`j_law_consulting.rule_j_consulting_manager_all`) {#rule-j-law-consulting-rule-j-consulting-manager-all}

On Consulting (`j.consulting`) for Consulting / Manager: All Documents (`j_law_consulting.group_j_consulting_manager`): read, write, create, delete.

Records where every record.

```python
[(1, '=', 1)]
```

### Consulting: portal — privacy-controlled (`j_law_consulting.rule_j_consulting_portal`) {#rule-j-law-consulting-rule-j-consulting-portal}

On Consulting (`j.consulting`) for Role / Portal (`base.group_portal`): read, write, create, delete.

Records where Followers (Partners) is one of the current user's contact and Privacy Visibility is one of invited, portal.

```python
[
            '&',
            ('privacy_visibility', 'in', ['invited', 'portal']),
            ('message_partner_ids', 'in', [user.partner_id.id]),
        ]
```

### Consulting: own documents (user) (`j_law_consulting.rule_j_consulting_user_own`) {#rule-j-law-consulting-rule-j-consulting-user-own}

On Consulting (`j.consulting`) for Consulting / User: Own Documents (`j_law_consulting.group_j_consulting_user`): read, write, create, delete.

```python
[
            '|',
            ('lawyer_ids.user_id', '=', user.id),
            ('message_partner_ids', 'in', user.partner_id.ids),
        ]
```

---

- Source: https://jaah.app/docs/law-consulting/security
- Updated: 2026-10-13
- Version: Consultations 19.0.1.0.28