From 2c0793d981d7ecdf432d0e071cfd942354646e71 Mon Sep 17 00:00:00 2001
From: "Lucas Perais (lpe)" <lpe@odoo.com>
Date: Wed, 17 Jan 2018 16:09:15 +0100
Subject: [PATCH] [FIX] website_portal_purchase: allow user to see relevant PO

Before this commit, on the portal the user could see only the count of PO
not the po's themselves.

After this commit, he can.

OPW 805080
---
 .../security/website_portal_purchase_security.xml             | 4 ++--
 1 file changed, 2 insertions(+), 2 deletions(-)

diff --git a/addons/website_portal_purchase/security/website_portal_purchase_security.xml b/addons/website_portal_purchase/security/website_portal_purchase_security.xml
index d689d887377..4acfc7dc3e0 100644
--- a/addons/website_portal_purchase/security/website_portal_purchase_security.xml
+++ b/addons/website_portal_purchase/security/website_portal_purchase_security.xml
@@ -5,7 +5,7 @@
         <record id="portal_purchase_order_user_rule" model="ir.rule">
             <field name="name">Portal Purchase Orders</field>
             <field name="model_id" ref="purchase.model_purchase_order"/>
-            <field name="domain_force">[('message_partner_ids','child_of',[user.commercial_partner_id.id])]</field>
+            <field name="domain_force">['|', ('message_partner_ids','child_of',[user.commercial_partner_id.id]),('partner_id', 'child_of', [user.commercial_partner_id.id])]</field>
             <field name="groups" eval="[(4, ref('base.group_portal'))]"/>
             <field name="perm_unlink" eval="1"/>
             <field name="perm_write" eval="1"/>
@@ -16,7 +16,7 @@
         <record id="portal_purchase_order_line_rule" model="ir.rule">
             <field name="name">Portal Purhcase Orders Line</field>
             <field name="model_id" ref="purchase.model_purchase_order_line"/>
-            <field name="domain_force">[('order_id.message_partner_ids','child_of',[user.commercial_partner_id.id])]</field>
+            <field name="domain_force">['|',('order_id.message_partner_ids','child_of',[user.commercial_partner_id.id]),('order_id.partner_id','child_of',[user.commercial_partner_id.id])]</field>
             <field name="groups" eval="[(4, ref('base.group_portal'))]"/>
         </record>