summaryrefslogtreecommitdiff
path: root/addons/web/static/src
diff options
context:
space:
mode:
authorAnh Thao Pham (pta) <pta@odoo.com>2021-03-15 09:48:05 +0000
committerAnh Thao Pham (pta) <pta@odoo.com>2021-03-18 08:10:31 +0000
commit4779ff2369f1f632429f5305bc4a84db730c3dfe (patch)
treead9e74a276c433e078f72f2bb618ecec77df2a2a /addons/web/static/src
parente2c46bb80e1e312dd34ac554d79813ef35282e62 (diff)
[FIX] point_of_sale: fix session closing with purchase rights
- Create an internal user with ONLY the following rights: * Point Of Sale: User|Administrator * Purchase: User|Administrator - Connect with created user - Open a POS session and validate an order - Close session - Validate closing & post entries The access is denied when trying to create account move due to following rule: "Purchase User Account Move". When validating session and creating account move, sudo is applied if user has no "create" right on "account.move". In the particular case where user is a purchase user or admin, he also has "create" right on "account.move" and sudo is not applied when validating session (as it would have been if he has no purchase rights). However, as defined by "Purchase User Account Move" rule, he is limited to account moves where type is in ('in_invoice', 'in_refund', 'in_receipt'). But the account move created when closing and validating session is of type "entry", and therefore user cannot validate session. A POS user should be able to close and validate a session, either he is a purchase user or not. opw-2456783 closes odoo/odoo#68034 X-original-commit: f9317a2670cb67f113333af5190f9d90946fb2cd Signed-off-by: Anh Thao PHAM <kitan191@users.noreply.github.com>
Diffstat (limited to 'addons/web/static/src')
0 files changed, 0 insertions, 0 deletions