From ce941818b65888d0884c72ab28e3591cea8a294b Mon Sep 17 00:00:00 2001
From: "vta vta@openerp.com" <>
Date: Tue, 20 Nov 2012 09:03:48 +0100
Subject: [PATCH] [FIX] Fixed portal_sale security.

bzr revid: vta@openerp.com-20121120080348-g522bf3rkl8f0wu3
---
 .../portal_project_issue_view.xml             | 28 ++-----------------
 .../portal_sale/security/ir.model.access.csv  | 13 ---------
 .../portal_sale/security/portal_security.xml  | 14 ----------
 3 files changed, 3 insertions(+), 52 deletions(-)

diff --git a/addons/portal_project_issue/portal_project_issue_view.xml b/addons/portal_project_issue/portal_project_issue_view.xml
index b5145898a7d..76ffbe3d1fd 100644
--- a/addons/portal_project_issue/portal_project_issue_view.xml
+++ b/addons/portal_project_issue/portal_project_issue_view.xml
@@ -31,31 +31,9 @@
                                             <field name="categ_ids"/>
                                         </div>
                                     </div>
-                                    <t t-if="record.stage_id.raw_value[1] == 'Analysis' or record.stage_id.raw_value[1] == 'Specification'">
-                                        <div class="oe_text_right" style="color:blue;">
-                                            <h1><field name="stage_id" readonly="1"/></h1>
-                                        </div>
-                                    </t>
-                                    <t t-if="record.stage_id.raw_value[1] == 'Design' or record.stage_id.raw_value[1] == 'Development' or record.stage_id.raw_value[1] == 'Testing'">
-                                        <div class="oe_text_right" style="color:#c7ffd5;">
-                                            <h1><field name="stage_id" readonly="1"/></h1>
-                                        </div>
-                                    </t>
-                                    <t t-if="record.stage_id.raw_value[1] == 'Merge'">
-                                        <div class="oe_text_right" style="color:red;">
-                                            <h1><field name="stage_id" readonly="1"/></h1>
-                                        </div>
-                                    </t>
-                                    <t t-if="record.stage_id.raw_value[1] == 'done'">
-                                        <div class="oe_text_right" style="color:black;">
-                                            <h1><field name="stage_id" readonly="1"/></h1>
-                                        </div>
-                                    </t>
-                                    <t t-if="record.stage_id.raw_value[1] == 'Cancelled'">
-                                        <div class="oe_text_right" style="color:gray;">
-                                            <h1><field name="stage_id" readonly="1"/></h1>
-                                        </div>
-                                    </t>
+                                    <div class="oe_text_right">
+                                        <h1><field name="stage_id" readonly="1"/></h1>
+                                    </div>
                                     <div class="oe_clear"></div>
                                     <div class="oe_right">                                        
                                         Creation: <field name="create_date"/>
diff --git a/addons/portal_sale/security/ir.model.access.csv b/addons/portal_sale/security/ir.model.access.csv
index 751c0b9baff..bbbdbfdd246 100644
--- a/addons/portal_sale/security/ir.model.access.csv
+++ b/addons/portal_sale/security/ir.model.access.csv
@@ -1,10 +1,6 @@
 id,name,model_id:id,group_id:id,perm_read,perm_write,perm_create,perm_unlink
 access_sale_order,sale.order,sale.model_sale_order,portal.group_portal,1,0,0,0
 access_sale_order_line,sale.order.line,sale.model_sale_order_line,portal.group_portal,1,0,0,0
-access_stock_picking,stock.picking,stock.model_stock_picking,portal.group_portal,1,0,0,0
-access_stock_picking.out,stock.picking.out,stock.model_stock_picking_out,portal.group_portal,1,0,0,0
-access_stock_move,stock.move,stock.model_stock_move,portal.group_portal,1,0,0,0
-access_stock_warehouse_orderpoint,stock.warehouse.orderpoint,procurement.model_stock_warehouse_orderpoint,portal.group_portal,1,0,0,0
 access_account_invoice,account.invoice,account.model_account_invoice,portal.group_portal,1,0,0,0
 access_account_invoice_tax,account.invoice.tax,account.model_account_invoice_tax,portal.group_portal,1,0,0,0
 access_account_invoice_line,account.invoice.line,account.model_account_invoice_line,portal.group_portal,1,0,0,0
@@ -16,18 +12,9 @@ access_account_move_line,account.move.line,account.model_account_move_line,porta
 access_account_move_reconcile,account.move.reconcile,account.model_account_move_reconcile,portal.group_portal,1,0,0,0
 access_account_fiscalyear,account.sequence.fiscalyear,account.model_account_sequence_fiscalyear,portal.group_portal,1,0,0,0
 access_sale_shop,sale.shop,sale.model_sale_shop,portal.group_portal,1,0,0,0
-access_product_list,product.pricelist,product.model_product_pricelist,portal.group_portal,1,0,0,0
-access_product,product.product,product.model_product_product,portal.group_portal,1,0,0,0
 access_res_partner,res.partner,base.model_res_partner,portal.group_portal,1,0,0,0
-access_product_uom,product.uom,product.model_product_uom,portal.group_portal,1,0,0,0
 access_account_tax,account.tax,account.model_account_tax,portal.group_portal,1,0,0,0
-access_mrp_property,mrp.property,procurement.model_mrp_property,portal.group_portal,1,0,0,0
-access_product_template,product.template,product.model_product_template,portal.group_portal,1,0,0,0
-access_stock_warehouse,stock.warehouse,stock.model_stock_warehouse,portal.group_portal,1,0,0,0
-access_stock_location,stock.location,stock.model_stock_location,portal.group_portal,1,0,0,0
 access_account_fiscalyear,account.fiscalyear,account.model_account_fiscalyear,portal.group_portal,1,0,0,0
 access_res_partner_category,res.partner.category,base.model_res_partner_category,portal.group_portal,1,0,0,0
-access_product_supplierinfo,product.supplierinfo,product.model_product_supplierinfo,portal.group_portal,1,0,0,0
-access_product_packaging,product.packaging,product.model_product_packaging,portal.group_portal,1,0,0,0
 access_account_period,account.period,account.model_account_period,portal.group_portal,1,0,0,0
 access_account_account,account.account,account.model_account_account,portal.group_portal,1,0,0,0
diff --git a/addons/portal_sale/security/portal_security.xml b/addons/portal_sale/security/portal_security.xml
index 19d44947f03..08e83bf3daa 100644
--- a/addons/portal_sale/security/portal_security.xml
+++ b/addons/portal_sale/security/portal_security.xml
@@ -14,20 +14,6 @@
             <field eval="0" name="perm_create"/>
         </record>
 
-        <record id="portal_stock_picking_user_rule" model="ir.rule">
-            <field name="name">Portal Personal Delivery Orders</field>
-            <field name="model_id" ref="stock.model_stock_picking"/>
-            <field name="domain_force">[('message_follower_ids','in',[user.partner_id.id])]</field>
-            <field name="groups" eval="[(4, ref('portal.group_portal'))]"/>
-        </record>
-
-        <record id="portal_stock_picking_user_rule" model="ir.rule">
-            <field name="name">Portal Personal Delivery Orders Out</field>
-            <field name="model_id" ref="stock.model_stock_picking_out"/>
-            <field name="domain_force">[('message_follower_ids','in',[user.partner_id.id])]</field>
-            <field name="groups" eval="[(4, ref('portal.group_portal'))]"/>
-        </record>
-
         <record id="portal_account_invoice_user_rule" model="ir.rule">
             <field name="name">Portal Personal Account Invoices</field>
             <field name="model_id" ref="account.model_account_invoice"/>