From d2cbebef3e7d4803067c8809fc3f9cb3de0122b1 Mon Sep 17 00:00:00 2001
From: "copilot-swe-agent[bot]" <198982749+Copilot@users.noreply.github.com>
Date: Sat, 9 May 2026 15:41:57 +0000
Subject: [PATCH 1/2] Initial plan


From fb2e4d7c215aafbf828613f48556de8b64a17826 Mon Sep 17 00:00:00 2001
From: "copilot-swe-agent[bot]" <198982749+Copilot@users.noreply.github.com>
Date: Sat, 9 May 2026 15:44:30 +0000
Subject: [PATCH 2/2] fix: consolidate APEX permissions into a single selection
 dropdown
MIME-Version: 1.0
Content-Type: text/plain; charset=UTF-8
Content-Transfer-Encoding: 8bit

- Uncomment implied_ids on group_aps_teacher so Teacher implies Student,
  completing the linear chain Manager > Teacher > Student. With all three
  groups sharing the same module_category_aps category, Odoo now renders
  them as a single dropdown selector on the user form instead of individual
  checkboxes.
- Add sequence fields (10 / 20 / 30) so the dropdown order is
  Student → Teacher → Manager.
- Update README security section to document the new dropdown behaviour
  and permission inheritance chain.

Agent-Logs-Url: https://github.com/agrogers/aps_sis/sessions/d0761179-07fd-4e34-8268-98e362186fd6

Co-authored-by: agrogers <13920678+agrogers@users.noreply.github.com>
---
 README.md           | 14 +++++++++-----
 security/groups.xml | 12 ++++++++++--
 2 files changed, 19 insertions(+), 7 deletions(-)

diff --git a/README.md b/README.md
index e1f118a..56e4f8e 100644
--- a/README.md
+++ b/README.md
@@ -178,11 +178,15 @@ Records a **single student attempt** at a resource. This is the primary data sou
 
 ### Groups (`security/groups.xml`)
 
-| Group | XML ID | Description |
-|-------|--------|-------------|
-| Student | `group_aps_student` | View assigned resources, submit attempts, view own dashboard |
-| Teacher | `group_aps_teacher` | Manage resources, grade submissions, view all dashboards |
-| Manager | `group_aps_manager` | Full admin access (implies Teacher) |
+All three groups belong to the **APEX** category (`module_category_aps`). Because they share the same category and form a linear implied-group chain, Odoo renders them as a **single selection dropdown** on the user permissions form instead of individual checkboxes.
+
+| Group | XML ID | Implies | Description |
+|-------|--------|---------|-------------|
+| Student | `group_aps_student` | — | View assigned resources, submit attempts, view own dashboard |
+| Teacher | `group_aps_teacher` | Student | Manage resources, grade submissions, view all dashboards |
+| Manager | `group_aps_manager` | Teacher (→ Student) | Full administrative access to all APEX features |
+
+Permissions are **inherited**: a Manager has all Teacher permissions, and a Teacher has all Student permissions.
 
 ### ACL rules (`security/ir.model.access.csv`)
 
diff --git a/security/groups.xml b/security/groups.xml
index 1728474..da16786 100644
--- a/security/groups.xml
+++ b/security/groups.xml
@@ -9,23 +9,31 @@
             <field name="sequence">20</field>
         </record>
 
-        <!-- APS SIS Security Groups (hierarchy: Student → Teacher → Manager) -->
+        <!-- APS SIS Security Groups (hierarchy: Student → Teacher → Manager)
+             All groups share module_category_aps so Odoo renders them as a
+             single selection dropdown on the user form instead of checkboxes.
+             implied_ids creates the inheritance chain so that a Teacher also
+             has all Student permissions, and a Manager also has all Teacher
+             (and Student) permissions. -->
         <record id="group_aps_student" model="res.groups">
             <field name="name">Student</field>
             <field name="category_id" ref="module_category_aps"/>
+            <field name="sequence">10</field>
             <field name="comment">Students can view their assigned resources and submit attempts</field>
         </record>
 
         <record id="group_aps_teacher" model="res.groups">
             <field name="name">Teacher</field>
             <field name="category_id" ref="module_category_aps"/>
-            <!-- <field name="implied_ids" eval="[(4, ref('group_aps_student'))]"/> -->
+            <field name="sequence">20</field>
+            <field name="implied_ids" eval="[(4, ref('group_aps_student'))]"/>
             <field name="comment">Teachers can manage resources, tasks, and view student progress</field>
         </record>
 
         <record id="group_aps_manager" model="res.groups">
             <field name="name">Manager</field>
             <field name="category_id" ref="module_category_aps"/>
+            <field name="sequence">30</field>
             <field name="implied_ids" eval="[(4, ref('group_aps_teacher'))]"/>
             <field name="comment">Full administrative access to all APEX features</field>
         </record>