From e2c28ed3d624874a4f82a6c378cb2ed7b8c6c46c Mon Sep 17 00:00:00 2001
From: Olivier Colson <oco@odoo.com>
Date: Tue, 18 Sep 2018 16:20:09 +0200
Subject: [PATCH] [FIX] account don't make administrator part of account users
 group by default

Before that, the administrator could use accounting features by default. This is not what we want, the group only gets assigned by default when installing account_accountant, on enterprise.
---
 addons/account/security/account_security.xml | 3 +--
 1 file changed, 1 insertion(+), 2 deletions(-)

diff --git a/addons/account/security/account_security.xml b/addons/account/security/account_security.xml
index 1f577711a6c..0e59175b614 100644
--- a/addons/account/security/account_security.xml
+++ b/addons/account/security/account_security.xml
@@ -41,9 +41,8 @@
         <field name="implied_ids" eval="[(4, ref('group_account_invoice'))]"/>
     </record>
 
-    <!-- Grant full accounting features to admin -->
     <record id="base.user_admin" model="res.users">
-        <field name="groups_id" eval="[(4, ref('account.group_account_user'))]"/>
+        <field name="groups_id" eval="[(4, ref('account.group_account_invoice')), (4, ref('account.group_account_manager'))]"/>
     </record>
 
     <record id="base.group_system" model="res.groups">