From f222afe2719be36e07280187e05b44f6c1f4c2c8 Mon Sep 17 00:00:00 2001
From: Mantavya Gajjar <mga@tinyerp.com>
Date: Tue, 25 Mar 2008 11:52:12 +0000
Subject: [PATCH] Tested security datas and make it working as security access

bzr revid: mga@tinyerp.com-b977baa1fe04a6d65d874fb07495470d6539dbe5
---
 addons/hr/hr_security.xml             |  37 ++++----
 addons/mrp/mrp_security.xml           |  74 +++++++++-------
 addons/mrp/mrp_view.xml               |  26 +++---
 addons/product/product_security.xml   |  32 ++++---
 addons/purchase/purchase_security.xml |  50 +++++++++--
 addons/sale/sale_security.xml         | 118 ++++++++++++++++++++++++--
 6 files changed, 248 insertions(+), 89 deletions(-)

diff --git a/addons/hr/hr_security.xml b/addons/hr/hr_security.xml
index c3f6efdc688..0825e7a29f2 100644
--- a/addons/hr/hr_security.xml
+++ b/addons/hr/hr_security.xml
@@ -1,19 +1,26 @@
 <?xml version="1.0"?>
 <terp>
 	<data noupdate="1">
-	
+
 		<record model="res.groups" id="group_hr_manager">
 			<field name="name">HR Manager</field>
 		</record>
-		
+
 		<record model="res.groups" id="group_hr_employee">
 			<field name="name">Employee</field>
 		</record>
-		
+
 		<record model="res.groups" id="base.group_admin">
 			<field name="groups_id" eval="[(6, 0, [ref('base.group_admin'), ref('group_hr_employee'),ref('group_hr_manager')])]"/>
 		</record>
-		
+
+		<record id="hr.group_hr_employee" model="res.groups">
+			<field eval="[(6,0,[ref('hr.menu_open_view_employee_tree'),ref('hr.menu_open_view_employee_list'),ref('hr.menu_open_view_employee_new'),ref('hr.menu_view_employee_category_form')])]" name="menu_access"/>
+		</record>
+
+		<record id="hr.group_hr_manager" model="res.groups">
+			<field eval="[(6,0,[ref('hr.menu_open_view_employee_tree'),ref('hr.menu_open_view_employee_list'),ref('hr.menu_open_view_employee_new'),ref('hr.menu_view_employee_category_form')])]" name="menu_access"/>
+		</record>
 		<!-- Department security -->
 		<record model="ir.model.access" id="access_hr_department">
 			<field name="name">HR Department</field>
@@ -33,7 +40,7 @@
 			<field name="perm_create" eval="True"/>
 			<field name="perm_unlink" eval="True"/>
 		</record>
-				
+
 		<!-- Timesheet Group security -->
 		<record model="ir.model.access" id="access_hr_timesheet">
 			<field name="name">HR Timesheet Group</field>
@@ -53,7 +60,7 @@
 			<field name="perm_create" eval="True"/>
 			<field name="perm_unlink" eval="True"/>
 		</record>
-		
+
 		<!-- Employee Category security -->
 		<record model="ir.model.access" id="access_hr_employee_category">
 			<field name="name">HR Employee Category</field>
@@ -73,7 +80,7 @@
 			<field name="perm_create" eval="True"/>
 			<field name="perm_unlink" eval="True"/>
 		</record>
-				
+
 		<!-- Employee security -->
 		<record model="ir.model.access" id="access_hr_employee">
 			<field name="name">HR Employee</field>
@@ -93,7 +100,7 @@
 			<field name="perm_create" eval="True"/>
 			<field name="perm_unlink" eval="True"/>
 		</record>
-		
+
 		<record model="ir.model.access" id="access_hr_employee_employee">
 			<field name="name">HR Employee</field>
 			<field name="model_id" model="ir.model" search="[('model', '=', 'hr.employee')]"/>
@@ -103,7 +110,7 @@
 			<field name="perm_create" eval="False"/>
 			<field name="perm_unlink" eval="False"/>
 		</record>
-		
+
 		<!-- Employee security -->
 		<record model="ir.model.access" id="access_hr_timesheet">
 			<field name="name">HR Employee Timesheet</field>
@@ -123,7 +130,7 @@
 			<field name="perm_create" eval="True"/>
 			<field name="perm_unlink" eval="True"/>
 		</record>
-				
+
 		<record model="ir.model.access" id="access_hr_timesheet_employee">
 			<field name="name">HR Employee Timesheet</field>
 			<field name="model_id" model="ir.model" search="[('model', '=', 'hr.timesheet')]"/>
@@ -133,7 +140,7 @@
 			<field name="perm_create" eval="True"/>
 			<field name="perm_unlink" eval="True"/>
 		</record>
-		
+
 		<!-- Action Reason security -->
 		<record model="ir.model.access" id="access_hr_action_reason">
 			<field name="name">HR Timesheet Action Reason</field>
@@ -153,7 +160,7 @@
 			<field name="perm_create" eval="True"/>
 			<field name="perm_unlink" eval="True"/>
 		</record>
-				
+
 		<!-- Timesheet Attendance security -->
 		<record model="ir.model.access" id="access_hr_attendance">
 			<field name="name">HR Attendance</field>
@@ -173,7 +180,7 @@
 			<field name="perm_create" eval="True"/>
 			<field name="perm_unlink" eval="True"/>
 		</record>
-				
+
 		<record model="ir.model.access" id="access_hr_attendance_employee">
 			<field name="name">HR Attendance</field>
 			<field name="model_id" model="ir.model" search="[('model', '=', 'hr.attendance')]"/>
@@ -183,7 +190,7 @@
 			<field name="perm_create" eval="True"/>
 			<field name="perm_unlink" eval="True"/>
 		</record>
-		
+
 		<!-- Holiday Status security -->
 		<record model="ir.model.access" id="access_hr_holiday_status">
 			<field name="name">HR Holiday Status</field>
@@ -203,7 +210,7 @@
 			<field name="perm_create" eval="True"/>
 			<field name="perm_unlink" eval="True"/>
 		</record>
-				
+
 		<!-- Holidays security -->
 		<record model="ir.model.access" id="access_hr_holiday">
 			<field name="name">HR Holidays</field>
diff --git a/addons/mrp/mrp_security.xml b/addons/mrp/mrp_security.xml
index fa01ecea791..8e39dcfdf57 100644
--- a/addons/mrp/mrp_security.xml
+++ b/addons/mrp/mrp_security.xml
@@ -1,19 +1,27 @@
 <?xml version="1.0"?>
 <terp>
 	<data>
-	
+
 		<record model="res.groups" id="group_production_manager">
 			<field name="name">Production Manager</field>
 		</record>
-		
+
 		<record model="res.groups" id="group_production_worker">
 			<field name="name">Workers</field>
 		</record>
-		
-		<record model="res.users" id="base.user_admin">
-			<field name="groups_id" eval="[(4,ref('group_production_worker')), (4,ref('group_production_manager'))]"/>
+
+		<record id="base.user_admin" model="res.users">
+			<field eval="[(6,0,[ref('base.group_admin'),ref('group_production_manager'),ref('group_production_worker')])]" name="groups_id"/>
 		</record>
-		
+
+		<record id="mrp.group_production_manager" model="res.groups">
+			<field eval="[(6,0,[ref('mrp.menu_mrp_root'),ref('mrp.menu_mrp_configuration'),ref('mrp.menu_mrp_production_action'),ref('mrp.menu_production_orders_start'),ref('mrp.menu_mrp_production_action3'),ref('mrp.menu_production_orders_waiting4'),ref('mrp.menu_mrp_bom_form_action'),ref('mrp.menu_mrp_routing_action'),ref('mrp.menu_mrp_workcenter_action'),ref('mrp.menu_bom_tree'),ref('mrp.menu_mrp_bom_form_action2'),ref('mrp.menu_mrp_property_group_action'),ref('mrp.menu_mrp_property_action'),ref('mrp.menu_mrp_procurement_action'),ref('mrp.menu_mrp_procurement_action2'),ref('mrp.menu_mrp_procurement_action3'),ref('mrp.menu_mrp_procurement_action11'),ref('mrp.menu_wiz_mrp_proc1'),ref('mrp.menu_mrp_procurement_action')])]" name="menu_access"/>
+		</record>
+
+		<record id="mrp.group_production_worker" model="res.groups">
+			<field eval="[(6,0,[ref('mrp.menu_mrp_root'),ref('mrp.menu_mrp_configuration'),ref('mrp.menu_mrp_production_action'),ref('mrp.menu_production_orders_start'),ref('mrp.menu_mrp_production_action3'),ref('mrp.menu_production_orders_waiting4'),ref('mrp.menu_mrp_bom_form_action'),ref('mrp.menu_mrp_routing_action'),ref('mrp.menu_mrp_workcenter_action'),ref('mrp.menu_bom_tree'),ref('mrp.menu_mrp_bom_form_action2'),ref('mrp.menu_mrp_property_group_action'),ref('mrp.menu_mrp_property_action'),ref('mrp.menu_mrp_procurement_action'),ref('mrp.menu_mrp_procurement_action2'),ref('mrp.menu_mrp_procurement_action3'),ref('mrp.menu_mrp_procurement_action11'),ref('mrp.menu_wiz_mrp_proc1'),ref('mrp.menu_mrp_procurement_action')])]" name="menu_access"/>
+		</record>
+
 		<!-- Workcenter security -->
 		<record model="ir.model.access" id="mrp_workcenter">
 			<field name="name">Workcenter</field>
@@ -23,7 +31,7 @@
 			<field name="perm_create" eval="False"/>
 			<field name="perm_unlink" eval="False"/>
 		</record>
-		
+
 		<record model="ir.model.access" id="mrp_workcenter_manager">
 			<field name="name">Workcenter</field>
 			<field name="model_id" model="ir.model" search="[('model', '=', 'mrp.workcenter')]"/>
@@ -33,7 +41,7 @@
 			<field name="perm_create" eval="True"/>
 			<field name="perm_unlink" eval="True"/>
 		</record>
-		
+
 		<record model="ir.model.access" id="mrp_workcenter_worker">
 			<field name="name">Workcenter</field>
 			<field name="model_id" model="ir.model" search="[('model', '=', 'mrp.workcenter')]"/>
@@ -43,7 +51,7 @@
 			<field name="perm_create" eval="False"/>
 			<field name="perm_unlink" eval="False"/>
 		</record>
-		
+
 		<!-- Property security -->
 		<record model="ir.model.access" id="mrp_property">
 			<field name="name">Property</field>
@@ -53,7 +61,7 @@
 			<field name="perm_create" eval="False"/>
 			<field name="perm_unlink" eval="False"/>
 		</record>
-		
+
 		<record model="ir.model.access" id="mrp_property_manager">
 			<field name="name">Property</field>
 			<field name="model_id" model="ir.model" search="[('model', '=', 'mrp.property')]"/>
@@ -63,7 +71,7 @@
 			<field name="perm_create" eval="True"/>
 			<field name="perm_unlink" eval="True"/>
 		</record>
-		
+
 		<record model="ir.model.access" id="mrp_property_worker">
 			<field name="name">Property</field>
 			<field name="model_id" model="ir.model" search="[('model', '=', 'mrp.property')]"/>
@@ -73,7 +81,7 @@
 			<field name="perm_create" eval="False"/>
 			<field name="perm_unlink" eval="False"/>
 		</record>
-		
+
 		<!-- Property Group security -->
 		<record model="ir.model.access" id="mrp_property_group">
 			<field name="name">Property Group</field>
@@ -83,7 +91,7 @@
 			<field name="perm_create" eval="False"/>
 			<field name="perm_unlink" eval="False"/>
 		</record>
-		
+
 		<record model="ir.model.access" id="mrp_property_group_manager">
 			<field name="name">Property Group</field>
 			<field name="model_id" model="ir.model" search="[('model', '=', 'mrp.property.group')]"/>
@@ -93,7 +101,7 @@
 			<field name="perm_create" eval="True"/>
 			<field name="perm_unlink" eval="True"/>
 		</record>
-		
+
 		<record model="ir.model.access" id="mrp_property_group_worker">
 			<field name="name">Property Group</field>
 			<field name="model_id" model="ir.model" search="[('model', '=', 'mrp.property.group')]"/>
@@ -103,7 +111,7 @@
 			<field name="perm_create" eval="False"/>
 			<field name="perm_unlink" eval="False"/>
 		</record>
-		
+
 		<!-- Routing security -->
 		<record model="ir.model.access" id="mrp_routing">
 			<field name="name">Routing</field>
@@ -113,7 +121,7 @@
 			<field name="perm_create" eval="False"/>
 			<field name="perm_unlink" eval="False"/>
 		</record>
-		
+
 		<record model="ir.model.access" id="mrp_routing_manager">
 			<field name="name">Routing</field>
 			<field name="model_id" model="ir.model" search="[('model', '=', 'mrp.routing')]"/>
@@ -123,7 +131,7 @@
 			<field name="perm_create" eval="True"/>
 			<field name="perm_unlink" eval="True"/>
 		</record>
-		
+
 		<record model="ir.model.access" id="mrp_routing_worker">
 			<field name="name">Routing</field>
 			<field name="model_id" model="ir.model" search="[('model', '=', 'mrp.routing')]"/>
@@ -133,7 +141,7 @@
 			<field name="perm_create" eval="False"/>
 			<field name="perm_unlink" eval="False"/>
 		</record>
-		
+
 		<!-- Workcenter Routing security -->
 		<record model="ir.model.access" id="mrp_routing_workcenter">
 			<field name="name">Workcenter Routing</field>
@@ -143,7 +151,7 @@
 			<field name="perm_create" eval="False"/>
 			<field name="perm_unlink" eval="False"/>
 		</record>
-		
+
 		<record model="ir.model.access" id="mrp_routing_workcenter_manager">
 			<field name="name">Workcenter Routing</field>
 			<field name="model_id" model="ir.model" search="[('model', '=', 'mrp.routing.workcenter')]"/>
@@ -153,7 +161,7 @@
 			<field name="perm_create" eval="True"/>
 			<field name="perm_unlink" eval="True"/>
 		</record>
-		
+
 		<record model="ir.model.access" id="mrp_routing_workcenter_worker">
 			<field name="name">Workcenter Routing</field>
 			<field name="model_id" model="ir.model" search="[('model', '=', 'mrp.routing.workcenter')]"/>
@@ -163,7 +171,7 @@
 			<field name="perm_create" eval="False"/>
 			<field name="perm_unlink" eval="False"/>
 		</record>
-		
+
 		<!-- BOM security -->
 		<record model="ir.model.access" id="mrp_bom">
 			<field name="name">Bill of Material</field>
@@ -173,7 +181,7 @@
 			<field name="perm_create" eval="False"/>
 			<field name="perm_unlink" eval="False"/>
 		</record>
-		
+
 		<record model="ir.model.access" id="mrp_bom_manager">
 			<field name="name">Bill of Material</field>
 			<field name="model_id" model="ir.model" search="[('model', '=', 'mrp.bom')]"/>
@@ -183,7 +191,7 @@
 			<field name="perm_create" eval="True"/>
 			<field name="perm_unlink" eval="True"/>
 		</record>
-		
+
 		<record model="ir.model.access" id="mrp_bom_worker">
 			<field name="name">Bill of Material</field>
 			<field name="model_id" model="ir.model" search="[('model', '=', 'mrp.bom')]"/>
@@ -193,7 +201,7 @@
 			<field name="perm_create" eval="False"/>
 			<field name="perm_unlink" eval="False"/>
 		</record>
-		
+
 		<!-- BOM Revision security -->
 		<record model="ir.model.access" id="mrp_bom_revision">
 			<field name="name">Bom Revision</field>
@@ -203,7 +211,7 @@
 			<field name="perm_create" eval="False"/>
 			<field name="perm_unlink" eval="False"/>
 		</record>
-		
+
 		<record model="ir.model.access" id="mrp_bom_revision_manager">
 			<field name="name">Bom Revision</field>
 			<field name="model_id" model="ir.model" search="[('model', '=', 'mrp.bom.revision')]"/>
@@ -213,7 +221,7 @@
 			<field name="perm_create" eval="True"/>
 			<field name="perm_unlink" eval="True"/>
 		</record>
-		
+
 		<record model="ir.model.access" id="mrp_bom_worker">
 			<field name="name">Bom Revision</field>
 			<field name="model_id" model="ir.model" search="[('model', '=', 'mrp.bom.revision')]"/>
@@ -223,7 +231,7 @@
 			<field name="perm_create" eval="False"/>
 			<field name="perm_unlink" eval="False"/>
 		</record>
-		
+
 		<!-- Production security -->
 		<record model="ir.model.access" id="mrp_production">
 			<field name="name">Production</field>
@@ -253,7 +261,7 @@
 			<field name="perm_create" eval="False"/>
 			<field name="perm_unlink" eval="False"/>
 		</record>
-		
+
 		<!-- Procurement security -->
 		<record model="ir.model.access" id="mrp_procurement">
 			<field name="name">Procurement</field>
@@ -283,7 +291,7 @@
 			<field name="perm_create" eval="False"/>
 			<field name="perm_unlink" eval="False"/>
 		</record>
-		
+
 		<!-- Production Product Line security -->
 		<record model="ir.model.access" id="mrp_production_product_line">
 			<field name="name">Production Product Line</field>
@@ -313,7 +321,7 @@
 			<field name="perm_create" eval="False"/>
 			<field name="perm_unlink" eval="False"/>
 		</record>
-		
+
 		<!-- Production Workcenter Line security -->
 		<record model="ir.model.access" id="mrp_production_workcenter_line">
 			<field name="name">Production Product Line</field>
@@ -343,7 +351,7 @@
 			<field name="perm_create" eval="False"/>
 			<field name="perm_unlink" eval="False"/>
 		</record>
-		
+
 		<!-- Stock Movement Security -->
 		<record model="ir.model.access" id="mrp_stock_move">
 			<field name="name">Stock Move</field>
@@ -373,8 +381,8 @@
 			<field name="perm_create" eval="False"/>
 			<field name="perm_unlink" eval="False"/>
 		</record>
-		
-		
+
+
 		<!-- Order Point Security -->
 		<record model="ir.model.access" id="mrp_order_point">
 			<field name="name">Stock Move</field>
diff --git a/addons/mrp/mrp_view.xml b/addons/mrp/mrp_view.xml
index ee198cb76bc..bf2355dc610 100644
--- a/addons/mrp/mrp_view.xml
+++ b/addons/mrp/mrp_view.xml
@@ -26,7 +26,7 @@
 		<field name="view_type">form</field>
 		<field name="view_mode">tree,form</field>
 	</record>
-	<menuitem name="Production Management/Configuration"
+	<menuitem name="Production Management/Configuration" id="menu_mrp_configuration"
 		groups="base.group_admin"/>
 	<menuitem name="Production Management/Configuration/Properties/Property Categories" id="menu_mrp_property_group_action" action="mrp_property_group_action"/>
 
@@ -127,9 +127,9 @@
 	</record>
 	<menuitem name="Production Management/Configuration/Workcenters" id="menu_mrp_workcenter_action" action="mrp_workcenter_action"/>
 
-	<!-- 
+	<!--
 	Routings
-	--> 
+	-->
 
 	<record model="ir.ui.view" id="mrp_routing_workcenter_tree.view">
 		<field name="name">mrp.routing.workcenter.tree</field>
@@ -200,9 +200,9 @@
 	</record>
 	<menuitem name="Production Management/Configuration/Routings" id="menu_mrp_routing_action" action="mrp_routing_action"/>
 
-	<!-- 
+	<!--
 	Bill of Materials
-	--> 
+	-->
 
 	<record model="ir.ui.view" id="mrp_bom_form_view">
 		<field name="name">mrp.bom.form</field>
@@ -333,9 +333,9 @@
 		</field>
 	</record>
 
-	<!-- 
+	<!--
 	Production Management
-	--> 
+	-->
 
 	<record model="ir.ui.view" id="mrp_production_tree_view">
 		<field name="name">mrp.production.tree</field>
@@ -657,9 +657,9 @@
 		<field name="view_mode">tree,form</field>
 		<field name="domain">[('state','=','exception'), ('message', '&lt;&gt;', '')]</field>
 	</record>
-	<menuitem 
-		name="Production Management/Procurement Orders/All Exceptions/Exceptions to Fix" 
-		id="menu_mrp_procurement_action4" 
+	<menuitem
+		name="Production Management/Procurement Orders/All Exceptions/Exceptions to Fix"
+		id="menu_mrp_procurement_action4"
 		action="mrp_procurement_action4"/>
 
 	<record model="ir.actions.act_window" id="mrp_procurement_action11">
@@ -670,9 +670,9 @@
 		<field name="view_mode">tree,form</field>
 		<field name="domain">[('state','=','exception'), ('message', '=', '')]</field>
 	</record>
-	<menuitem 
-		name="Production Management/Procurement Orders/All Exceptions/Temporary Procurement Exceptions" 
-		id="menu_mrp_procurement_action11" 
+	<menuitem
+		name="Production Management/Procurement Orders/All Exceptions/Temporary Procurement Exceptions"
+		id="menu_mrp_procurement_action11"
 		action="mrp_procurement_action11"/>
 
 	=============================
diff --git a/addons/product/product_security.xml b/addons/product/product_security.xml
index b1304e1dcf8..b01c7dfdc59 100644
--- a/addons/product/product_security.xml
+++ b/addons/product/product_security.xml
@@ -1,15 +1,19 @@
 <?xml version="1.0"?>
 <terp>
 	<data noupdate="1">
-	
+
 		<record model="res.groups" id="group_product_manager">
 			<field name="name">Product Manager</field>
 		</record>
-		
+
 		<record model="res.users" id="base.user_admin">
 			<field name="groups_id" eval="[(6, 0, [ref('base.group_admin'), ref('group_product_manager')])]"/>
 		</record>
-		
+
+		<record id="product.group_product_manager" model="res.groups">
+			<field eval="[(6,0,[ref('product.menu_main_product'),ref('product.menu_products'),ref('product.menu_product_category_action'),ref('product.menu_product_category_action_form'),ref('stock.menu_action_production_lot_form'),ref('mrp.menu_mrp_root'),ref('mrp.menu_mrp_production_action'),ref('mrp.menu_production_orders_start'),ref('mrp.menu_mrp_production_action3'),ref('mrp.menu_production_orders_waiting4'),ref('product.menu_product_template_action'),ref('product.menu_product_variant_action')])]" name="menu_access"/>
+		</record>
+
 		<!-- Product security -->
 		<record model="ir.model.access" id="access_product">
 			<field name="name">Product</field>
@@ -19,7 +23,7 @@
 			<field name="perm_create" eval="False"/>
 			<field name="perm_unlink" eval="False"/>
 		</record>
-		
+
 		<record model="ir.model.access" id="access_product_manager">
 			<field name="name">Product</field>
 			<field name="model_id" model="ir.model" search="[('model', '=', 'product.product')]"/>
@@ -29,7 +33,7 @@
 			<field name="perm_create" eval="True"/>
 			<field name="perm_unlink" eval="True"/>
 		</record>
-			
+
 		<!-- Product Template security -->
 		<record model="ir.model.access" id="access_product_template">
 			<field name="name">Product Template</field>
@@ -39,7 +43,7 @@
 			<field name="perm_create" eval="False"/>
 			<field name="perm_unlink" eval="False"/>
 		</record>
-		
+
 		<record model="ir.model.access" id="access_product_template_manager">
 			<field name="name">Product Template</field>
 			<field name="model_id" model="ir.model" search="[('model', '=', 'product.template')]"/>
@@ -49,7 +53,7 @@
 			<field name="perm_create" eval="True"/>
 			<field name="perm_unlink" eval="True"/>
 		</record>
-				
+
 		<!-- Pricelist security -->
 		<record model="ir.model.access" id="access_product_pricelist">
 			<field name="name">Product Pricelist</field>
@@ -59,7 +63,7 @@
 			<field name="perm_create" eval="False"/>
 			<field name="perm_unlink" eval="False"/>
 		</record>
-		
+
 		<record model="ir.model.access" id="access_product_pricelist_manager">
 			<field name="name">Product Pricelist</field>
 			<field name="model_id" model="ir.model" search="[('model', '=', 'product.pricelist')]"/>
@@ -69,7 +73,7 @@
 			<field name="perm_create" eval="True"/>
 			<field name="perm_unlink" eval="True"/>
 		</record>
-				
+
 		<!-- Pricelist Version security -->
 		<record model="ir.model.access" id="access_product_pricelist_version">
 			<field name="name">Product Pricelist Version</field>
@@ -79,7 +83,7 @@
 			<field name="perm_create" eval="False"/>
 			<field name="perm_unlink" eval="False"/>
 		</record>
-		
+
 		<record model="ir.model.access" id="access_product_pricelist_version_manager">
 			<field name="name">Product Pricelist Version</field>
 			<field name="model_id" model="ir.model" search="[('model', '=', 'product.pricelist.version')]"/>
@@ -89,7 +93,7 @@
 			<field name="perm_create" eval="True"/>
 			<field name="perm_unlink" eval="True"/>
 		</record>
-				
+
 		<!-- Pricelist Item security -->
 		<record model="ir.model.access" id="access_product_pricelist_item_version">
 			<field name="name">Product Pricelist Item</field>
@@ -99,7 +103,7 @@
 			<field name="perm_create" eval="False"/>
 			<field name="perm_unlink" eval="False"/>
 		</record>
-		
+
 		<record model="ir.model.access" id="access_product_pricelist_item_manager">
 			<field name="name">Product Pricelist Item</field>
 			<field name="model_id" model="ir.model" search="[('model', '=', 'product.pricelist.item')]"/>
@@ -109,7 +113,7 @@
 			<field name="perm_create" eval="True"/>
 			<field name="perm_unlink" eval="True"/>
 		</record>
-		
+
 	</data>
 </terp>
-		
+
diff --git a/addons/purchase/purchase_security.xml b/addons/purchase/purchase_security.xml
index 9ad1b398475..17758574c1c 100644
--- a/addons/purchase/purchase_security.xml
+++ b/addons/purchase/purchase_security.xml
@@ -1,15 +1,55 @@
 <?xml version="1.0"?>
 <terp>
 	<data>
-	
+
 		<record model="res.groups" id="group_purchase_manager">
 			<field name="name">Purchase Manager</field>
 		</record>
-		
+
 		<record model="res.users" id="base.user_admin">
 			<field name="groups_id" eval="[(6, 0, [ref('base.group_admin'),ref('group_purchase_manager')])]"/>
 		</record>
-		
+
+		<record id="ir_model_access_stockmove0" model="ir.model.access">
+			<field model="ir.model" name="model_id" search="[('name','=','Stock Move')]"/>
+			<field eval="1" name="perm_read"/>
+			<field eval="&quot;Stock Move&quot;" name="name"/>
+			<field eval="0" name="perm_unlink"/>
+			<field eval="1" name="perm_write"/>
+			<field eval="1" name="perm_create"/>
+			<field name="group_id" ref="purchase.group_purchase_manager"/>
+		</record>
+
+		<record id="ir_model_access_accountinvoice0" model="ir.model.access">
+			<field model="ir.model" name="model_id" search="[('name','=','Invoice')]"/>
+			<field eval="1" name="perm_read"/>
+			<field eval="&quot;Account Invoice&quot;" name="name"/>
+			<field eval="0" name="perm_unlink"/>
+			<field eval="1" name="perm_write"/>
+			<field eval="1" name="perm_create"/>
+			<field name="group_id" ref="purchase.group_purchase_manager"/>
+		</record>
+
+		<record id="ir_model_access_accountinvoiceline0" model="ir.model.access">
+			<field model="ir.model" name="model_id" search="[('name','=','Invoice line')]"/>
+			<field eval="1" name="perm_read"/>
+			<field eval="&quot;Account Invoice Line&quot;" name="name"/>
+			<field eval="0" name="perm_unlink"/>
+			<field eval="0" name="perm_write"/>
+			<field eval="1" name="perm_create"/>
+			<field name="group_id" ref="purchase.group_purchase_manager"/>
+		</record>
+
+		<record id="ir_model_access_accountinvoicetax0" model="ir.model.access">
+			<field model="ir.model" name="model_id" search="[('name','=','Invoice Tax')]"/>
+			<field eval="1" name="perm_read"/>
+			<field eval="&quot;Account Invoice tax&quot;" name="name"/>
+			<field eval="0" name="perm_unlink"/>
+			<field eval="0" name="perm_write"/>
+			<field eval="1" name="perm_create"/>
+			<field name="group_id" ref="purchase.group_purchase_manager"/>
+		</record>
+
 		<!-- Purchase order security -->
 		<record model="ir.model.access" id="access_purchase_order">
 			<field name="name">Purchase Order</field>
@@ -19,7 +59,7 @@
 			<field name="perm_create" eval="False"/>
 			<field name="perm_unlink" eval="False"/>
 		</record>
-				
+
 		<record model="ir.model.access" id="access_purchase_order_purchase_manager">
 			<field name="name">Purchase Order</field>
 			<field name="model_id" model="ir.model" search="[('model', '=', 'purchase.order')]"/>
@@ -29,7 +69,7 @@
 			<field name="perm_create" eval="True"/>
 			<field name="perm_unlink" eval="True"/>
 		</record>
-		
+
 		<!-- Purchase order line security -->
 		<record model="ir.model.access" id="access_purchase_order_line">
 			<field name="name">Purchase Order Line</field>
diff --git a/addons/sale/sale_security.xml b/addons/sale/sale_security.xml
index 8ea75c2f5f5..bc859d0df36 100644
--- a/addons/sale/sale_security.xml
+++ b/addons/sale/sale_security.xml
@@ -1,18 +1,118 @@
 <?xml version="1.0"?>
 <terp>
 	<data>
-	
+
 		<record model="res.groups" id="group_sale_manager">
 			<field name="name">Sale Manager</field>
 		</record>
 		<record model="res.groups" id="group_sale_salesman">
 			<field name="name">Salesman</field>
 		</record>
-		
+
 		<record model="res.users" id="base.user_admin">
 			<field name="groups_id" eval="[(6, 0, [ref('base.group_admin'),ref('group_sale_manager'),ref('group_sale_salesman')])]"/>
 		</record>
-		
+
+		<record id="ir_model_access_stockmove0" model="ir.model.access">
+			<field model="ir.model" name="model_id" search="[('name','=','Stock Move')]"/>
+			<field eval="1" name="perm_read"/>
+			<field eval="&quot;Stock Move&quot;" name="name"/>
+			<field eval="0" name="perm_unlink"/>
+			<field eval="1" name="perm_write"/>
+			<field eval="1" name="perm_create"/>
+			<field name="group_id" ref="group_sale_manager"/>
+		</record>
+
+		<record id="ir_model_access_accountinvoice0" model="ir.model.access">
+			<field model="ir.model" name="model_id" search="[('name','=','Invoice')]"/>
+			<field eval="1" name="perm_read"/>
+			<field eval="&quot;Account Invoice&quot;" name="name"/>
+			<field eval="0" name="perm_unlink"/>
+			<field eval="1" name="perm_write"/>
+			<field eval="1" name="perm_create"/>
+			<field name="group_id" ref="group_sale_manager"/>
+		</record>
+
+		<record id="ir_model_access_accountinvoiceline0" model="ir.model.access">
+			<field model="ir.model" name="model_id" search="[('name','=','Invoice line')]"/>
+			<field eval="1" name="perm_read"/>
+			<field eval="&quot;Account Invoice Line&quot;" name="name"/>
+			<field eval="0" name="perm_unlink"/>
+			<field eval="0" name="perm_write"/>
+			<field eval="1" name="perm_create"/>
+			<field name="group_id" ref="group_sale_manager"/>
+		</record>
+
+		<record id="ir_model_access_accountinvoicetax0" model="ir.model.access">
+			<field model="ir.model" name="model_id" search="[('name','=','Invoice Tax')]"/>
+			<field eval="1" name="perm_read"/>
+			<field eval="&quot;Account Invoice tax&quot;" name="name"/>
+			<field eval="0" name="perm_unlink"/>
+			<field eval="0" name="perm_write"/>
+			<field eval="1" name="perm_create"/>
+			<field name="group_id" ref="group_sale_manager"/>
+		</record>
+
+		<record model="ir.model.access" id="access_mrp_procurement">
+			<field name="name">Mrp procurement</field>
+			<field name="model_id" model="ir.model" search="[('model', '=', 'mrp.procurement')]"/>
+			<field name="group_id" ref="group_sale_manager"/>
+			<field name="perm_read" eval="True"/>
+			<field name="perm_write" eval="True"/>
+			<field name="perm_create" eval="True"/>
+			<field name="perm_unlink" eval="False"/>
+		</record>
+
+		<record id="ir_model_access_stockmove0" model="ir.model.access">
+			<field model="ir.model" name="model_id" search="[('name','=','Stock Move')]"/>
+			<field eval="1" name="perm_read"/>
+			<field eval="&quot;Stock Move&quot;" name="name"/>
+			<field eval="0" name="perm_unlink"/>
+			<field eval="1" name="perm_write"/>
+			<field eval="1" name="perm_create"/>
+			<field name="group_id" ref="group_sale_salesman"/>
+		</record>
+
+		<record id="ir_model_access_accountinvoice0" model="ir.model.access">
+			<field model="ir.model" name="model_id" search="[('name','=','Invoice')]"/>
+			<field eval="1" name="perm_read"/>
+			<field eval="&quot;Account Invoice&quot;" name="name"/>
+			<field eval="0" name="perm_unlink"/>
+			<field eval="1" name="perm_write"/>
+			<field eval="1" name="perm_create"/>
+			<field name="group_id" ref="group_sale_salesman"/>
+		</record>
+
+		<record id="ir_model_access_accountinvoiceline0" model="ir.model.access">
+			<field model="ir.model" name="model_id" search="[('name','=','Invoice line')]"/>
+			<field eval="1" name="perm_read"/>
+			<field eval="&quot;Account Invoice Line&quot;" name="name"/>
+			<field eval="0" name="perm_unlink"/>
+			<field eval="0" name="perm_write"/>
+			<field eval="1" name="perm_create"/>
+			<field name="group_id" ref="group_sale_salesman"/>
+		</record>
+
+		<record id="ir_model_access_accountinvoicetax0" model="ir.model.access">
+			<field model="ir.model" name="model_id" search="[('name','=','Invoice Tax')]"/>
+			<field eval="1" name="perm_read"/>
+			<field eval="&quot;Account Invoice tax&quot;" name="name"/>
+			<field eval="0" name="perm_unlink"/>
+			<field eval="0" name="perm_write"/>
+			<field eval="1" name="perm_create"/>
+			<field name="group_id" ref="group_sale_salesman"/>
+		</record>
+
+		<record model="ir.model.access" id="access_mrp_procurement">
+			<field name="name">Mrp procurement</field>
+			<field name="model_id" model="ir.model" search="[('model', '=', 'mrp.procurement')]"/>
+			<field name="group_id" ref="group_sale_salesman"/>
+			<field name="perm_read" eval="True"/>
+			<field name="perm_write" eval="True"/>
+			<field name="perm_create" eval="True"/>
+			<field name="perm_unlink" eval="False"/>
+		</record>
+
 		<!-- Sales order security -->
 		<record model="ir.model.access" id="access_sale_order">
 			<field name="name">Sale Order</field>
@@ -22,7 +122,7 @@
 			<field name="perm_create" eval="False"/>
 			<field name="perm_unlink" eval="False"/>
 		</record>
-		
+
 		<record model="ir.model.access" id="access_sale_order_sale_manager">
 			<field name="name">Sale Order</field>
 			<field name="model_id" model="ir.model" search="[('model', '=', 'sale.order')]"/>
@@ -32,7 +132,7 @@
 			<field name="perm_create" eval="True"/>
 			<field name="perm_unlink" eval="True"/>
 		</record>
-		
+
 		<record model="ir.model.access" id="access_sale_order_salesman">
 			<field name="name">Sale Order</field>
 			<field name="model_id" model="ir.model" search="[('model', '=', 'sale.order')]"/>
@@ -42,7 +142,7 @@
 			<field name="perm_create" eval="True"/>
 			<field name="perm_unlink" eval="True"/>
 		</record>
-		
+
 		<!-- Sales order line security -->
 		<record model="ir.model.access" id="access_sale_order_line">
 			<field name="name">Sale Order Line</field>
@@ -52,7 +152,7 @@
 			<field name="perm_create" eval="False"/>
 			<field name="perm_unlink" eval="False"/>
 		</record>
-		
+
 		<record model="ir.model.access" id="access_sale_order_line_manager">
 			<field name="name">Sale Order Line</field>
 			<field name="model_id" model="ir.model" search="[('model', '=', 'sale.order.line')]"/>
@@ -62,7 +162,7 @@
 			<field name="perm_create" eval="True"/>
 			<field name="perm_unlink" eval="True"/>
 		</record>
-		
+
 		<record model="ir.model.access" id="access_sale_order_line_salesman">
 			<field name="name">Sale Order Line</field>
 			<field name="model_id" model="ir.model" search="[('model', '=', 'sale.order.line')]"/>
@@ -72,6 +172,6 @@
 			<field name="perm_create" eval="True"/>
 			<field name="perm_unlink" eval="True"/>
 		</record>
-		
+
 	</data>
 </terp>