From 47e324e6207112e717d57cc668438bb0d425d9ba Mon Sep 17 00:00:00 2001
From: Christophe Matthieu <chm@openerp.com>
Date: Tue, 8 Oct 2013 17:33:02 +0200
Subject: [PATCH] [FIX] website_sale: access rules

bzr revid: chm@openerp.com-20131008153302-09coejmzrcjns36u
---
 addons/website_sale/security/website_sale.xml | 4 ++--
 1 file changed, 2 insertions(+), 2 deletions(-)

diff --git a/addons/website_sale/security/website_sale.xml b/addons/website_sale/security/website_sale.xml
index 71b4e5f7787..b7dead9e7ce 100644
--- a/addons/website_sale/security/website_sale.xml
+++ b/addons/website_sale/security/website_sale.xml
@@ -25,7 +25,7 @@
     <record id="sale_order_personal_rule_public" model="ir.rule">
         <field name="name">Public Personal Orders</field>
         <field ref="model_sale_order" name="model_id"/>
-        <field name="domain_force">[('state','=','draft'), ('website_session_id','!=',False), ('website_session_id','!=',session.get('website_session_id'))]</field>
+        <field name="domain_force">[('state','=','draft'), ('website_session_id','!=',False), ('website_session_id','=',session.get('website_session_id'))]</field>
         <field name="groups" eval="[(4, ref('base.group_public'))]"/>
         <field name="perm_read" eval="True"/>
         <field name="perm_write" eval="False"/>
@@ -35,7 +35,7 @@
     <record id="sale_order_lines_personal_rule_public" model="ir.rule">
         <field name="name">Public Personal Order lines</field>
         <field ref="model_sale_order_line" name="model_id"/>
-        <field name="domain_force">[('state','=','draft'), ('order_id.website_session_id','!=',False), ('order_id.website_session_id','!=',session.get('website_session_id'))]</field>
+        <field name="domain_force">[('state','=','draft'), ('order_id.website_session_id','!=',False), ('order_id.website_session_id','=',session.get('website_session_id'))]</field>
         <field name="groups" eval="[(4, ref('base.group_public'))]"/>
         <field name="perm_read" eval="True"/>
         <field name="perm_write" eval="False"/>