[FIX] mrp_account: access to BOM

- Install MRP and Accounting
- Create a user with only 'Billing' as access right
- Create a customer invoice
- Add a line, type some text (e.g. 'desk'), then click on 'Search
  more...'

An `AccessError` is raised.

It arises because of this:

https://github.com/odoo/odoo/blob/e2d7cf7898704c82f25556b0b0edb87c05ec5903/addons/mrp/models/product.py#L112

The user has no access to `mrp.bom`, leading to the error.

Since the user has access to stock moves and pickings (thanks to the
rules `access_stock_picking_invoicing_payments` and
`access_stock_move_invoicing_payments`, it makes sense to give him
access to `mrp.bom` and `mrp.bom.line`. Moreover, adding a `sudo` on the
mentioned line could cause issues since `_bom_find` performs a search
which is company dependent.

opw-2089556

closes odoo/odoo#39365

X-original-commit: 59ea1993bc5ddb66675bfc2bff70a626cd14b645
Signed-off-by: Nicolas Martinelli (nim) <nim@odoo.com>
This commit is contained in:
Nicolas Martinelli
2019-10-25 07:33:12 +00:00
committed by fw-bot
parent c86d37c755
commit fe6b351e04
2 changed files with 4 additions and 0 deletions
+1
View File
@@ -22,6 +22,7 @@ If the automated inventory valuation is active, the necessary accounting entries
"init_xml" : [],
"demo_xml" : [],
"data": [
'security/ir.model.access.csv',
"views/product_views.xml",
"views/mrp_production_views.xml",
],
@@ -0,0 +1,3 @@
id,name,model_id:id,group_id:id,perm_read,perm_write,perm_create,perm_unlink
access_mrp_bom_invoice_bom,mrp.bom,mrp.model_mrp_bom,account.group_account_invoice,1,0,0,0
access_mrp_bom_line_invoice_bom,mrp.bom.line,mrp.model_mrp_bom_line,account.group_account_invoice,1,0,0,0
1 id name model_id:id group_id:id perm_read perm_write perm_create perm_unlink
2 access_mrp_bom_invoice_bom mrp.bom mrp.model_mrp_bom account.group_account_invoice 1 0 0 0
3 access_mrp_bom_line_invoice_bom mrp.bom.line mrp.model_mrp_bom_line account.group_account_invoice 1 0 0 0