From 5567caa27d3dcb6e9024dee23d4d7a5052b8444d Mon Sep 17 00:00:00 2001
From: "ajay javiya (OpenERP)" <aja@tinyerp.com>
Date: Wed, 18 Dec 2013 11:26:45 +0530
Subject: [PATCH] [IMP]: overwrite record rule to allow public user to read
 sale.order data

bzr revid: aja@tinyerp.com-20131218055645-fb9izyc3029jtz0k
---
 .../website_sale/security/ir.model.access.csv |  2 +-
 addons/website_sale_quote/__openerp__.py      |  1 +
 addons/website_sale_quote/sale_quote_demo.xml |  4 +++
 .../security/ir.model.access.csv              |  1 -
 .../security/website_sale_quote.xml           | 25 +++++++++++++++++++
 5 files changed, 31 insertions(+), 2 deletions(-)
 create mode 100644 addons/website_sale_quote/security/website_sale_quote.xml

diff --git a/addons/website_sale/security/ir.model.access.csv b/addons/website_sale/security/ir.model.access.csv
index 4723d66b5c5..c9e88c29da9 100644
--- a/addons/website_sale/security/ir.model.access.csv
+++ b/addons/website_sale/security/ir.model.access.csv
@@ -12,4 +12,4 @@ access_sale_order_line_public,sale.order.line.public,model_sale_order_line,base.
 access_product_attribute,product.attribute.public,website_sale.model_product_attribute,,1,0,0,0
 access_product_attribute_value,product.attribute.value.public,website_sale.model_product_attribute_value,,1,0,0,0
 access_product_attribute_product,product.attribute.product.public,website_sale.model_product_attribute_product,,1,0,0,0
-access_website_product_style,website.product.style.public,website_sale.model_website_product_style,,1,0,0,0
\ No newline at end of file
+access_website_product_style,website.product.style.public,website_sale.model_website_product_style,,1,0,0,0
diff --git a/addons/website_sale_quote/__openerp__.py b/addons/website_sale_quote/__openerp__.py
index b35a305fd48..788ab54140b 100644
--- a/addons/website_sale_quote/__openerp__.py
+++ b/addons/website_sale_quote/__openerp__.py
@@ -15,6 +15,7 @@ OpenERP Sale Quote Roller
         'sale_quote_view.xml',
         'sale_quote_data.xml',
         'security/ir.model.access.csv',
+        'security/website_sale_quote.xml',
     ],
     'demo': [
         'sale_quote_demo.xml'
diff --git a/addons/website_sale_quote/sale_quote_demo.xml b/addons/website_sale_quote/sale_quote_demo.xml
index 8e5e15f3cd0..6fd63f96685 100644
--- a/addons/website_sale_quote/sale_quote_demo.xml
+++ b/addons/website_sale_quote/sale_quote_demo.xml
@@ -14,6 +14,7 @@
         </record>
 
         <record id="product_product_quote_1" model="product.product">
+            <field name="website_published" eval="True"/>
             <field name="product_tmpl_id" ref="product_template_quote_1"/>
             <field name="default_code">QF11</field>
         </record>
@@ -31,6 +32,7 @@
         </record>
 
         <record id="product_product_quote_2" model="product.product">
+            <field name="website_published" eval="True"/>
             <field name="product_tmpl_id" ref="product_template_quote_2"/>
             <field name="default_code">QF12</field>
         </record>
@@ -48,6 +50,7 @@
         </record>
 
         <record id="product_product_quote_3" model="product.product">
+            <field name="website_published" eval="True"/>
             <field name="product_tmpl_id" ref="product_template_quote_3"/>
             <field name="default_code">QF13</field>
         </record>
@@ -65,6 +68,7 @@
         </record>
 
         <record id="product_product_quote_4" model="product.product">
+            <field name="website_published" eval="True"/>
             <field name="product_tmpl_id" ref="product_template_quote_4"/>
             <field name="default_code">QF14</field>
         </record>
diff --git a/addons/website_sale_quote/security/ir.model.access.csv b/addons/website_sale_quote/security/ir.model.access.csv
index dfe466ca18f..97dd8b917b8 100644
--- a/addons/website_sale_quote/security/ir.model.access.csv
+++ b/addons/website_sale_quote/security/ir.model.access.csv
@@ -1,2 +1 @@
 id,name,model_id:id,group_id:id,perm_read,perm_write,perm_create,perm_unlink
-access_sale_order_quote,sale.order.quote,sale.model_sale_order,base.group_sale_quote_user,1,1,1,0
diff --git a/addons/website_sale_quote/security/website_sale_quote.xml b/addons/website_sale_quote/security/website_sale_quote.xml
new file mode 100644
index 00000000000..a49bccc2b03
--- /dev/null
+++ b/addons/website_sale_quote/security/website_sale_quote.xml
@@ -0,0 +1,25 @@
+<?xml version="1.0" encoding="utf-8"?>
+<openerp>
+<data>
+    <!--    FIXME: Do not overwrite record rule -->
+    <record id="website_sale.sale_order_personal_rule_public" model="ir.rule">
+        <field name="name">Public Personal Orders</field>
+        <field ref="model_sale_order" name="model_id"/>
+        <field name="domain_force">[]</field>
+        <field name="groups" eval="[(4, ref('base.group_public')), (4, ref('base.group_portal'))]"/>
+        <field name="perm_read" eval="True"/>
+        <field name="perm_write" eval="False"/>
+        <field name="perm_create" eval="False"/>
+        <field name="perm_unlink" eval="False"/>
+    </record>
+    <record model="ir.rule" id="base.res_partner_portal_public_rule">
+        <field name="name">res_partner: portal/public: read access on my commercial partner</field>
+        <field name="model_id" ref="base.model_res_partner"/>
+        <field name="domain_force">[]</field>
+        <field name="groups" eval="[(4, ref('base.group_portal')), (4, ref('base.group_public'))]"/>
+        <field name="perm_create" eval="False"/>
+        <field name="perm_unlink" eval="False"/>
+        <field name="perm_write" eval="False"/>
+    </record>
+</data>
+</openerp>