From c19d3c6f12f39ffd47145dc16e90373192d86e49 Mon Sep 17 00:00:00 2001
From: Christophe Simonis <chs@odoo.com>
Date: Thu, 23 Jun 2016 11:25:41 +0200
Subject: [PATCH] [FIX] point_of_sale: restrict field `pos_order_count` to
 users in `POS/User` group

---
 addons/point_of_sale/models/res_partner.py      | 6 +++++-
 addons/point_of_sale/views/res_partner_view.xml | 2 ++
 2 files changed, 7 insertions(+), 1 deletion(-)

diff --git a/addons/point_of_sale/models/res_partner.py b/addons/point_of_sale/models/res_partner.py
index c0906a9034d..f779e51ee60 100644
--- a/addons/point_of_sale/models/res_partner.py
+++ b/addons/point_of_sale/models/res_partner.py
@@ -7,7 +7,11 @@ class ResPartner(models.Model):
     _inherit = 'res.partner'
 
     barcode = fields.Char(string='Barcode', help="BarCode", oldname='ean13')
-    pos_order_count = fields.Integer(compute='_compute_pos_order', help="The number of point of sale orders related to this customer")
+    pos_order_count = fields.Integer(
+        compute='_compute_pos_order',
+        help="The number of point of sale orders related to this customer",
+        groups="point_of_sale.group_pos_user",
+    )
 
     def _compute_pos_order(self):
         partners_data = self.env['pos.order'].read_group([('partner_id', 'in', self.ids)], ['partner_id'], ['partner_id'])
diff --git a/addons/point_of_sale/views/res_partner_view.xml b/addons/point_of_sale/views/res_partner_view.xml
index 854631798ef..ff69e133f12 100644
--- a/addons/point_of_sale/views/res_partner_view.xml
+++ b/addons/point_of_sale/views/res_partner_view.xml
@@ -4,6 +4,7 @@
             <field name="name">res.partner.pos.form.inherit</field>
             <field name="model">res.partner</field>
             <field name="inherit_id" ref="sale.res_partner_view_buttons"/>
+            <field name="groups_id" eval="[(4, ref('group_pos_user'))]"/>
             <field name="arch" type="xml">
                 <xpath expr="//field[@name='sale_order_count']" position="after">
                     <button class="oe_stat_button" type="action" name="%(point_of_sale.action_pos_pos_form)d" 
@@ -24,6 +25,7 @@
             <field name="name">res.partner.pos.kanban.inherit</field>
             <field name="model">res.partner</field>
             <field name="inherit_id" ref="sale.crm_lead_partner_kanban_view"/>
+            <field name="groups_id" eval="[(4, ref('group_pos_user'))]"/>
             <field name="arch" type="xml">
                 <xpath expr="//field[@name='sale_order_count']" position="after">
                     <field name="pos_order_count"/>