[16.0][FIX]fieldservice_stage_validation: allow fieldservice manager to change fields

[PicchiSeba]

In 14.0 a user in the group fieldservice.manager could change the "Field to Validate" in Field Service > Configuration > Stages.

In 16.0 this is not the case anymore, because the group is missing the read permissions on ir.model and ir.model.fields

In this PR we restore read permissions while setting some rules to limit them to the relevant tables only.

[OCA-git-bot]

Hi @max3903, @brian10048,
some modules you are maintaining are being modified, check this out!

[PicchiSeba]

question: @max3903 @brian10048 if this PR looks fine to you we should also create a new bridge module between fieldservice_stage_validation and fsm_route to allow the addition of fsm.route to the new ir.rules.

Are you ok with this solution?

[max3903]

question: @max3903 @brian10048 if this PR looks fine to you we should also create a new bridge module between fieldservice_stage_validation and fsm_route to allow the addition of fsm.route to the new ir.rules.

Are you ok with this solution?

Yes

[aleuffre]

Issue:

Steps to reproduce:

1. Login as Mitchell Admin
2. Grant Marc Demo the "Field service: user" access right
3. Fieldservice -> Configuration -> Stages -> Order -> Confirmed: Add "Actual duration" to "Fields to validate"
4. Login as Marc Demo
5. Fieldservice: Drag the "Demo Order" from "New" to "Confirmed"

Access Error

You are not allowed to access 'Fields' (ir.model.fields) records.

This operation is allowed for the following groups:
	- Administration/Access Rights
	- Field Service/Manager

Contact your administrator to request access if necessary.

[PicchiSeba]

Issue:

Steps to reproduce:

1. Login as Mitchell Admin

2. Grant Marc Demo the "Field service: user" access right

3. Fieldservice -> Configuration -> Stages -> Order -> Confirmed: Add "Actual duration" to "Fields to validate"

4. Login as Marc Demo

5. Fieldservice: Drag the "Demo Order" from "New" to "Confirmed"

Access Error

You are not allowed to access 'Fields' (ir.model.fields) records.

This operation is allowed for the following groups:
	- Administration/Access Rights
	- Field Service/Manager

Contact your administrator to request access if necessary.

I tested this exact workflow and it works with the latest changes

[aleuffre]

Code and functional review, LGTM

[PicchiSeba]

I also added the new bridge module with an additional commit

[aleuffre]

I was too quick to approve, apologies