CriptoMart/addons-cm
2
0
Fork 0
Code Issues Pull requests Releases Wiki Activity

[FIX] website_sale_aplicoop: restringir acceso portal por grupo de consumo

Browse source
This commit is contained in:
snt 2026-04-07 22:48:59 +02:00
parent 7d11a95344
commit 6a748ca308
2 changed files with 65 additions and 5 deletions
Download patch file Download diff file Expand all files Collapse all files

11
website_sale_aplicoop/security/record_rules.xml
View file

@ -1,13 +1,14 @@
<?xml version="1.0" encoding="utf-8"?>
<odoo>
<data noupdate="1">
<data>
<!-- Record Rule: Users can read only their company orders -->
<!-- Record Rule: Internal users (no specific group) - restrict to company + groups -->
<record id="rule_group_order_user_company_read_internal" model="ir.rule">
<field name="name">group.order: internal users company access read</field>
<field name="model_id" ref="model_group_order"/>
<field name="domain_force">[('company_id','in', user.company_ids.ids)]</field>
<field name="groups" eval="[(4, ref('base.group_user'))]"/>
<field name="domain_force">[('company_id', 'in', user.company_ids.ids)] if not user.share else [(0, '=', 1)]</field>
<field name="perm_read">1</field>
<field name="perm_write">0</field>
<field name="perm_create">0</field>
@ -50,12 +51,12 @@
<field name="perm_unlink">1</field>
</record>
<!-- Record Rule: Portal users can read only their company orders -->
<!-- Record Rule: Portal users can read only orders from their company and assigned consumer groups -->
<record id="rule_group_order_portal_read" model="ir.rule">
<field name="name">group.order: portal access read (company)</field>
<field name="name">group.order: portal access read (company + consumer group)</field>
<field name="model_id" ref="model_group_order"/>
<field name="groups" eval="[(4, ref('base.group_portal'))]"/>
<field name="domain_force">[('company_id','=', user.company_id.id)]</field>
<field name="domain_force">[('company_id', '=', user.company_id.id), ('group_ids', 'in', user.partner_id.group_ids.ids)]</field>
<field name="perm_read">1</field>
<field name="perm_write">0</field>
<field name="perm_create">0</field>