From 3be79c69895a189f5a98906b1af756bc91aba8a1 Mon Sep 17 00:00:00 2001
From: RomainLibert <rli@odoo.com>
Date: Fri, 26 Jul 2019 09:20:28 +0000
Subject: [PATCH] [FIX] lunch: add rule on lunch order

User should not change the order once it is ordered

closes odoo/odoo#35212

Signed-off-by: Romain Libert (rli) <rli@odoo.com>
---
 addons/lunch/security/lunch_security.xml | 20 ++++++++++++++++++++
 1 file changed, 20 insertions(+)

diff --git a/addons/lunch/security/lunch_security.xml b/addons/lunch/security/lunch_security.xml
index bd7835a4a36..fc23a55b21c 100644
--- a/addons/lunch/security/lunch_security.xml
+++ b/addons/lunch/security/lunch_security.xml
@@ -40,6 +40,26 @@
             <field name="groups" eval="[(4,ref('lunch.group_lunch_user'))]"/>
         </record>
 
+        <record id="lunch_order_rule_write" model="ir.rule">
+            <field name="name">lunch.order: Don't change confirmed order</field>
+            <field name="model_id" ref="lunch.model_lunch_order"/>
+            <field name="domain_force">[('state', '!=', 'confirmed'), ('user_id', '=', user.id)]</field>
+            <field name="perm_read" eval="0"/>
+            <field name="perm_create" eval="0"/>
+            <field name="perm_unlink" eval="0"/>
+            <field name="groups" eval="[(4, ref('base.group_user'))]"/>
+        </record>
+
+        <record id="lunch_order_rule_write_manager" model="ir.rule">
+            <field name="name">manager can do whatever</field>
+            <field name="model_id" ref="lunch.model_lunch_order"/>
+            <field name="domain_force">[(1, '=', 1)]</field>
+            <field name="perm_read" eval="0"/>
+            <field name="perm_create" eval="0"/>
+            <field name="perm_unlink" eval="0"/>
+            <field name="groups" eval="[(4, ref('lunch.group_lunch_manager'))]"/>
+        </record>
+
     <data noupdate="1">
         <record id="base.default_user" model="res.users">
             <field name="groups_id" eval="[(4,ref('lunch.group_lunch_manager'))]"/>