Default ACLs for administrators

The rest is per-project, up to implementers to enlarge them as needed.

NEWS.rst

@@ -2,6 +2,8 @@
 ==========
 
 * Migrate to Odoo 13.0.
+* Default ACL to let administrators configure attached documents. The rest is
+  per-project, up to implementers to enlarge them as needed.
 
 10.0.1.0.0
 ===========

security/ir.model.access.csv

@@ -2,5 +2,8 @@
 access_document_attachment_type,access_document_attachment_type,model_document_attachment_type,base.group_user,1,0,0,0
 access_document_attachment_type_list,access_document_attachment_type_list,model_document_attachment_type_list,base.group_user,1,0,0,0
 access_document_attachment,access_document_attachment,model_document_attachment,base.group_user,1,0,0,0
+document_attachment_admin_access,document_attachment_admin_access,model_document_attachment,base.group_system,1,1,1,1
+document_attachment_type_admin_access,document_attachment_type_admin_access,model_document_attachment_type,base.group_system,1,1,1,1
+document_attachment_type_list_admin_access,document_attachment_type_list_admin_access,model_document_attachment_type_list,base.group_system,1,1,1,1
 mail_template_doc_to_attach_any_access,mail_template_doc_to_attach_any_access,model_mail_template_doc_to_attach,,1,0,0,0
 mail_template_doc_to_attach_admin_access,mail_template_doc_to_attach_admin_access,model_mail_template_doc_to_attach,base.group_system,1,1,1,1