Partner category security

This module controls who is allowed to manage contact tags (the labels used to classify contacts). It creates a new permission area called 'Contact Tags' with two levels:

• Publisher: can only read the tags; the tag field on the contact form is shown as read-only for these users.
• Manager: can read, create, edit and delete tags. The administrator and the superuser are placed in this group by default.

Users without the Publisher level see the tag field on the contact form locked, so they cannot change a contact's tags by accident.

In Odoo, a new 'Contact Tags' menu entry appears under the Contacts menu for Managers, opening the tag list. The standard tag menu is restricted to Managers, and a workaround hides the extra menu for administrators and sales managers so they do not see a duplicate entry.

The module touches the contact model res.partner (only to make the tag field read-only) and the tag model base.model_res_partner_category for the access rights. Existing partner managers keep read-only access to tags.