[FIX] purchase: purchase user should be able to create vendors bills

Before this patch, the purchase users get an access violation error
at the invoice creation from a purchase order. This was due to
some missing ACL between v12 and v13.

Task : 2206969

X-original-commit: 4c4fb33e4bbc78a85ad309baf5df906cf16566ea

2 files changed, 16 insertions, 3 deletions

diff --git a/addons/purchase/security/ir.model.access.csv b/addons/purchase/security/ir.model.access.csv
index 2b5d68ae8ed..3293ef1003e 100644
--- a/addons/purchase/security/ir.model.access.csv
+++ b/addons/purchase/security/ir.model.access.csv
@@ -18,11 +18,12 @@ access_account_fiscal_position_purchase_user,account.fiscal.position purchase,ac
 access_res_partner_purchase_user,res.partner purchase,base.model_res_partner,group_purchase_user,1,0,0,0

 access_account_journal,account.journal,account.model_account_journal,group_purchase_user,1,0,0,0

 access_account_journal_manager,account.journal,account.model_account_journal,group_purchase_manager,1,0,0,0

-access_account_move,account.move,account.model_account_move,group_purchase_user,1,0,0,0

-access_account_move_line,account.move.line,account.model_account_move_line,group_purchase_user,1,0,0,0

-access_account_move_manager,account.move,account.model_account_move,group_purchase_manager,1,1,1,1

+access_account_move,account.move,account.model_account_move,group_purchase_user,1,1,1,1

 access_account_move_line_manager,account.move.line,account.model_account_move_line,group_purchase_manager,1,1,1,1

+access_account_move_line,account.move.line,account.model_account_move_line,group_purchase_user,1,1,1,0

 access_account_analytic_line,account.analytic.line,account.model_account_analytic_line,group_purchase_user,1,0,0,0

+access_account_type,account.acount.type.purchase.user,account.model_account_account_type,group_purchase_user,1,0,0,0

+account_partial_reconcile,account.partial.reconcile.purchase.user,account.model_account_partial_reconcile,group_purchase_user,1,0,0,0

 access_res_partner_purchase_manager,res.partner.purchase.manager,base.model_res_partner,group_purchase_manager,1,1,1,0

 access_uom_category_purchase_manager,uom.category purchase_manager,uom.model_uom_category,purchase.group_purchase_manager,1,1,1,1

 access_uom_uom_purchase_manager,uom.uom purchase_manager,uom.model_uom_uom,purchase.group_purchase_manager,1,1,1,1

diff --git a/addons/purchase/security/purchase_security.xml b/addons/purchase/security/purchase_security.xml
index 1cf3c4753ee..1187e1769c3 100644
--- a/addons/purchase/security/purchase_security.xml
+++ b/addons/purchase/security/purchase_security.xml
@@ -54,6 +54,18 @@
         <field name="perm_create" eval="0"/>
     </record>
 
+    <record id="purchase_user_account_move_line_rule" model="ir.rule">
+        <field name="name">Purchase User Account Move Line</field>
+        <field name="model_id" ref="account.model_account_move_line"/>
+        <field name="domain_force">[('move_id.move_type', 'in', ('in_invoice', 'in_refund', 'in_receipt'))]</field>
+        <field name="groups" eval="[(4, ref('purchase.group_purchase_user'))]"/>
+    </record>
+    <record id="purchase_user_account_move_rule" model="ir.rule">
+        <field name="name">Purchase User Account Move</field>
+        <field name="model_id" ref="account.model_account_move"/>
+        <field name="domain_force">[('move_type', 'in', ('in_invoice', 'in_refund', 'in_receipt'))]</field>
+        <field name="groups" eval="[(4, ref('purchase.group_purchase_user'))]"/>
+    </record>
     <record id="portal_purchase_order_line_rule" model="ir.rule">
         <field name="name">Portal Purhcase Orders Line</field>
         <field name="model_id" ref="purchase.model_purchase_order_line"/>