From 1ee3c7930a8a230c27df8aa5def62bfadf0b0096 Mon Sep 17 00:00:00 2001
From: Alessandro Uffreduzzi <alessandro.uffreduzzi@pytech.it>
Date: Tue, 26 Mar 2024 17:56:01 +0100
Subject: [PATCH] [IMP] base_rest: show first-level menu to admins only

---
 base_rest/README.rst                    | 4 +++-
 base_rest/readme/DESCRIPTION.rst        | 4 +++-
 base_rest/static/description/index.html | 4 +++-
 base_rest/views/base_rest_view.xml      | 2 +-
 4 files changed, 10 insertions(+), 4 deletions(-)

diff --git a/base_rest/README.rst b/base_rest/README.rst
index f36ad418e..27c1fbde6 100644
--- a/base_rest/README.rst
+++ b/base_rest/README.rst
@@ -42,7 +42,9 @@ systems, therefore increasing maintenance costs.
 Once developed, an `OpenApi <https://spec.openapis.org/oas/v3.0.3>`_ documentation
 is generated from the source code and available via a
 `Swagger UI <https://swagger.io/tools/swagger-ui/>`_ served by your odoo server
-at `https://my_odoo_server/api-docs`.
+at `https://my_odoo_server/api-docs`. There is also a convenience menu
+visible by users with permission "Administration: Settings", but the
+docs endpoint itself is public.
 
 **Table of contents**
 
diff --git a/base_rest/readme/DESCRIPTION.rst b/base_rest/readme/DESCRIPTION.rst
index 96f88c974..d9b70ef78 100644
--- a/base_rest/readme/DESCRIPTION.rst
+++ b/base_rest/readme/DESCRIPTION.rst
@@ -12,4 +12,6 @@ systems, therefore increasing maintenance costs.
 Once developed, an `OpenApi <https://spec.openapis.org/oas/v3.0.3>`_ documentation
 is generated from the source code and available via a
 `Swagger UI <https://swagger.io/tools/swagger-ui/>`_ served by your odoo server
-at `https://my_odoo_server/api-docs`.
+at `https://my_odoo_server/api-docs`. There is also a convenience menu
+visible by users with permission "Administration: Settings", but the
+docs endpoint itself is public.
diff --git a/base_rest/static/description/index.html b/base_rest/static/description/index.html
index 928eb317f..383726ac0 100644
--- a/base_rest/static/description/index.html
+++ b/base_rest/static/description/index.html
@@ -381,7 +381,9 @@ <h1 class="title">Base Rest</h1>
 <p>Once developed, an <a class="reference external" href="https://spec.openapis.org/oas/v3.0.3">OpenApi</a> documentation
 is generated from the source code and available via a
 <a class="reference external" href="https://swagger.io/tools/swagger-ui/">Swagger UI</a> served by your odoo server
-at <cite>https://my_odoo_server/api-docs</cite>.</p>
+at <cite>https://my_odoo_server/api-docs</cite>. There is also a convenience menu
+visible by users with permission “Administration: Settings”, but the
+docs endpoint itself is public.</p>
 <p><strong>Table of contents</strong></p>
 <div class="contents local topic" id="contents">
 <ul class="simple">
diff --git a/base_rest/views/base_rest_view.xml b/base_rest/views/base_rest_view.xml
index f78f9a86e..b3e51108b 100644
--- a/base_rest/views/base_rest_view.xml
+++ b/base_rest/views/base_rest_view.xml
@@ -2,11 +2,11 @@
 <!-- Copyright 2018 ACSONE SA/NV
      License AGPL-3.0 or later (http://www.gnu.org/licenses/agpl). -->
 <odoo>
-
     <record id="menu_rest_api_root" model="ir.ui.menu">
         <field name="name">REST API</field>
         <field name="sequence" eval="400" />
         <field name="web_icon">base_rest,static/description/icon.png</field>
+        <field name="groups_id" eval="[(4, ref('base.group_system'))]" />
     </record>
 
     <record id="action_rest_api_docs" model="ir.actions.act_url">