pengyuthon/odoo_source
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity

[FIX] sale: do not grant access to purchase invoices by default

Browse Source 
Sales people should only access customer invoices by default.

Notice that [the equivalent rule in the `purchase` module][1] makes more sense.

[1] https://github.com/odoo/odoo/blob/e2247a860d3d4931d641928a6313bef4649e0edf/addons/purchase/security/purchase_security.xml#L62

@Tecnativa TT30228

closes odoo/odoo#72002

X-original-commit: dde96d6601d6b63762c6a57a8e0260eabad81289
Signed-off-by: Laurent Smet <smetl@users.noreply.github.com>
This commit is contained in:
Jairo Llopis
2021-06-10 16:08:07 +00:00
committed by Laurent Smet
parent 435a9fd314
commit e7f22391ef
1 changed files with 6 additions and 6 deletions
Download Patch File Download Diff File Expand all files Collapse all files
addons/sale/security/sale_security.xml
+6 -6
View File
@@ -156,42 +156,42 @@
<record id="account_invoice_rule_see_personal" model="ir.rule">
<field name="name">Personal Invoices</field>
<field name="model_id" ref="model_account_move"/>
<field name="domain_force">[('move_type', 'in', ('out_invoice', 'out_refund', 'in_invoice', 'in_refund')), '|', ('invoice_user_id', '=', user.id), ('invoice_user_id', '=', False)]</field>
<field name="domain_force">[('move_type', 'in', ('out_invoice', 'out_refund')), '|', ('invoice_user_id', '=', user.id), ('invoice_user_id', '=', False)]</field>
<field name="groups" eval="[(4, ref('sales_team.group_sale_salesman'))]"/>
</record>
<record id="account_invoice_rule_see_all" model="ir.rule">
<field name="name">All Invoices</field>
<field name="model_id" ref="model_account_move"/>
<field name="domain_force">[('move_type', 'in', ('out_invoice', 'out_refund', 'in_invoice', 'in_refund'))]</field>
<field name="domain_force">[('move_type', 'in', ('out_invoice', 'out_refund'))]</field>
<field name="groups" eval="[(4, ref('sales_team.group_sale_salesman_all_leads'))]"/>
</record>
<record id="account_invoice_line_rule_see_personal" model="ir.rule">
<field name="name">Personal Invoice Lines</field>
<field name="model_id" ref="model_account_move_line"/>
<field name="domain_force">[('move_id.move_type', 'in', ('out_invoice', 'out_refund', 'in_invoice', 'in_refund')), '|', ('move_id.invoice_user_id', '=', user.id), ('move_id.invoice_user_id', '=', False)]</field>
<field name="domain_force">[('move_id.move_type', 'in', ('out_invoice', 'out_refund')), '|', ('move_id.invoice_user_id', '=', user.id), ('move_id.invoice_user_id', '=', False)]</field>
<field name="groups" eval="[(4, ref('sales_team.group_sale_salesman'))]"/>
</record>
<record id="account_invoice_line_rule_see_all" model="ir.rule">
<field name="name">All Invoice Lines</field>
<field name="model_id" ref="model_account_move_line"/>
<field name="domain_force">[('move_id.move_type', 'in', ('out_invoice', 'out_refund', 'in_invoice', 'in_refund'))]</field>
<field name="domain_force">[('move_id.move_type', 'in', ('out_invoice', 'out_refund'))]</field>
<field name="groups" eval="[(4, ref('sales_team.group_sale_salesman_all_leads'))]"/>
</record>
<record id="account_invoice_send_rule_see_personal" model="ir.rule">
<field name="name">Personal Invoice Send and Print</field>
<field name="model_id" ref="account.model_account_invoice_send"/>
<field name="domain_force">[('invoice_ids.move_type', 'in', ('out_invoice', 'out_refund', 'in_invoice', 'in_refund')), '|', ('invoice_ids.invoice_user_id', '=', user.id), ('invoice_ids.invoice_user_id', '=', False)]</field>
<field name="domain_force">[('invoice_ids.move_type', 'in', ('out_invoice', 'out_refund')), '|', ('invoice_ids.invoice_user_id', '=', user.id), ('invoice_ids.invoice_user_id', '=', False)]</field>
<field name="groups" eval="[(4, ref('sales_team.group_sale_salesman'))]"/>
</record>
<record id="account_invoice_send_rule_see_all" model="ir.rule">
<field name="name">All Invoice Send and Print</field>
<field name="model_id" ref="account.model_account_invoice_send"/>
<field name="domain_force">[('invoice_ids.move_type', 'in', ('out_invoice', 'out_refund', 'in_invoice', 'in_refund'))]</field>
<field name="domain_force">[('invoice_ids.move_type', 'in', ('out_invoice', 'out_refund'))]</field>
<field name="groups" eval="[(4, ref('sales_team.group_sale_salesman_all_leads'))]"/>
</record>