From 3751379f1e9a4c215fb6eb898b4ccc67659b9ace Mon Sep 17 00:00:00 2001
From: stephanchrst <stephanchrst@gmail.com>
Date: Tue, 10 May 2022 21:51:50 +0700
Subject: initial commit 2

---
 addons/sale_expense/security/ir.model.access.csv       |  2 ++
 addons/sale_expense/security/sale_expense_security.xml | 17 +++++++++++++++++
 2 files changed, 19 insertions(+)
 create mode 100644 addons/sale_expense/security/ir.model.access.csv
 create mode 100644 addons/sale_expense/security/sale_expense_security.xml

(limited to 'addons/sale_expense/security')

diff --git a/addons/sale_expense/security/ir.model.access.csv b/addons/sale_expense/security/ir.model.access.csv
new file mode 100644
index 00000000..228b1262
--- /dev/null
+++ b/addons/sale_expense/security/ir.model.access.csv
@@ -0,0 +1,2 @@
+id,name,model_id:id,group_id:id,perm_read,perm_write,perm_create,perm_unlink
+access_sale_order_employee,sale.order.employee.expense,sale.model_sale_order,base.group_user,0,0,0,0
\ No newline at end of file
diff --git a/addons/sale_expense/security/sale_expense_security.xml b/addons/sale_expense/security/sale_expense_security.xml
new file mode 100644
index 00000000..48edc9cf
--- /dev/null
+++ b/addons/sale_expense/security/sale_expense_security.xml
@@ -0,0 +1,17 @@
+<?xml version="1.0" encoding="utf-8"?>
+<odoo noupdate="1">
+
+    <!-- Required simply to set SO on expense before submitting. Used to avoid crash on name_get/name_search -->
+    <record id="sale_order_rule_expense_user" model="ir.rule">
+        <field name="name">Expense Employee can read confirmed SO</field>
+        <field ref="sale.model_sale_order" name="model_id"/>
+        <field name="domain_force">[('state', '=', 'sale')]</field>
+        <field name="groups" eval="[(4, ref('base.group_user'))]"/>
+        <field name="perm_read" eval="True"/>
+        <field name="perm_write" eval="False"/>
+        <field name="perm_create" eval="False"/>
+        <field name="perm_unlink" eval="False"/>
+        <field name="active" eval="False"/> <!-- opw-2027005: this rules breaks sale "see own document" -->
+    </record>
+
+</odoo>
-- 
cgit v1.2.3