<?xml version="1.0" encoding="utf-8"?>
<odoo>
    <data>

        <record id="module_category_jb_mail_inbox" model="ir.module.category">
            <field name="name">Mail Inbox</field>
            <field name="description">JB Mail Inbox module security category.</field>
            <field name="sequence">25</field>
        </record>

        <record id="group_mail_inbox_user" model="res.groups">
            <field name="name">Mail Inbox User</field>
            <field name="category_id" ref="module_category_jb_mail_inbox"/>
            <field name="implied_ids" eval="[(4, ref('base.group_user'))]"/>
            <field name="comment">Can view and update synced inbox messages.</field>
        </record>

        <record id="group_mail_inbox_manager" model="res.groups">
            <field name="name">Mail Inbox Manager</field>
            <field name="category_id" ref="module_category_jb_mail_inbox"/>
            <field name="implied_ids" eval="[(4, ref('jb_mail_inbox.group_mail_inbox_user'))]"/>
            <field name="comment">Can configure IMAP servers and manage all inbox messages.</field>
        </record>

        <!-- Shared inbox: all users in the group see all synced messages -->
        <record id="rule_mail_sync_message_user" model="ir.rule">
            <field name="name">Mail Inbox: All Messages</field>
            <field name="model_id" ref="model_mail_sync_message"/>
            <field name="domain_force">[(1, '=', 1)]</field>
            <field name="groups" eval="[(4, ref('jb_mail_inbox.group_mail_inbox_user'))]"/>
            <field name="perm_read" eval="True"/>
            <field name="perm_write" eval="True"/>
            <field name="perm_create" eval="False"/>
            <field name="perm_unlink" eval="False"/>
        </record>

        <record id="rule_mail_sync_message_manager" model="ir.rule">
            <field name="name">Mail Inbox: Manager Full Access</field>
            <field name="model_id" ref="model_mail_sync_message"/>
            <field name="domain_force">[(1, '=', 1)]</field>
            <field name="groups" eval="[(4, ref('jb_mail_inbox.group_mail_inbox_manager'))]"/>
            <field name="perm_read" eval="True"/>
            <field name="perm_write" eval="True"/>
            <field name="perm_create" eval="True"/>
            <field name="perm_unlink" eval="True"/>
        </record>

        <record id="rule_mail_sync_server_manager" model="ir.rule">
            <field name="name">Mail Inbox: Server Config</field>
            <field name="model_id" ref="model_mail_sync_server"/>
            <field name="domain_force">[(1, '=', 1)]</field>
            <field name="groups" eval="[(4, ref('jb_mail_inbox.group_mail_inbox_manager'))]"/>
            <field name="perm_read" eval="True"/>
            <field name="perm_write" eval="True"/>
            <field name="perm_create" eval="True"/>
            <field name="perm_unlink" eval="True"/>
        </record>

    </data>
</odoo>
