[18.0] [MIG] portal_sale_personal_data_only: Migration to 18.0

portal_sale_personal_data_only/README.rst

@@ -0,0 +1,102 @@
+==============================
+Portal Sale Personal Data Only
+==============================
+
+.. 
+   !!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!
+   !! This file is generated by oca-gen-addon-readme !!
+   !! changes will be overwritten.                   !!
+   !!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!
+   !! source digest: sha256:e61f135c57f854a198e8c1d4c6a0329d256a7e6582b0251e88886f04bbd509cf
+   !!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!
+
+.. |badge1| image:: https://img.shields.io/badge/maturity-Beta-yellow.png
+    :target: https://odoo-community.org/page/development-status
+    :alt: Beta
+.. |badge2| image:: https://img.shields.io/badge/licence-AGPL--3-blue.png
+    :target: http://www.gnu.org/licenses/agpl-3.0-standalone.html
+    :alt: License: AGPL-3
+.. |badge3| image:: https://img.shields.io/badge/github-OCA%2Fsale--workflow-lightgray.png?logo=github
+    :target: https://github.com/OCA/sale-workflow/tree/18.0/portal_sale_personal_data_only
+    :alt: OCA/sale-workflow
+.. |badge4| image:: https://img.shields.io/badge/weblate-Translate%20me-F47D42.png
+    :target: https://translation.odoo-community.org/projects/sale-workflow-18-0/sale-workflow-18-0-portal_sale_personal_data_only
+    :alt: Translate me on Weblate
+.. |badge5| image:: https://img.shields.io/badge/runboat-Try%20me-875A7B.png
+    :target: https://runboat.odoo-community.org/builds?repo=OCA/sale-workflow&target_branch=18.0
+    :alt: Try me on Runboat
+
+|badge1| |badge2| |badge3| |badge4| |badge5|
+
+By default, portal users are allowed to see all the sale orders in which
+a member of their organization are followers. That could cause a leaking
+of documents between members and departments and of the organization
+that should stay private.
+
+This module restricts that behaviour so the portal users only see their
+own documents.
+
+**Table of contents**
+
+.. contents::
+   :local:
+
+Usage
+=====
+
+1. Create some portal users belonging to the same company.
+2. Place some orders for several of these users.
+3. Log in with each portal user credential.
+4. Only the sale orders belonging to the logged in user's partner or his
+   descendants should be accessible.
+5. Invoices associated to a partner's sale order will be visible as
+   well.
+
+Bug Tracker
+===========
+
+Bugs are tracked on `GitHub Issues <https://github.com/OCA/sale-workflow/issues>`_.
+In case of trouble, please check there if your issue has already been reported.
+If you spotted it first, help us to smash it by providing a detailed and welcomed
+`feedback <https://github.com/OCA/sale-workflow/issues/new?body=module:%20portal_sale_personal_data_only%0Aversion:%2018.0%0A%0A**Steps%20to%20reproduce**%0A-%20...%0A%0A**Current%20behavior**%0A%0A**Expected%20behavior**>`_.
+
+Do not contact contributors directly about support or help with technical issues.
+
+Credits
+=======
+
+Authors
+-------
+
+* Tecnativa
+
+Contributors
+------------
+
+- Harald Panten <harald.panten@sygel.es>
+- `Tecnativa <https://www.tecnativa.com>`__:
+
+  - David Vidal
+  - Víctor Martínez
+  - Stefan Ungureanu
+
+- Moaad Bourhim <moaad.bourhim@gmail.com>
+- Jairo Llopis (`Moduon <https://www.moduon.team/>`__)
+- SodexisTeam <dev@sodexis.com>
+
+Maintainers
+-----------
+
+This module is maintained by the OCA.
+
+.. image:: https://odoo-community.org/logo.png
+   :alt: Odoo Community Association
+   :target: https://odoo-community.org
+
+OCA, or the Odoo Community Association, is a nonprofit organization whose
+mission is to support the collaborative development of Odoo features and
+promote its widespread use.
+
+This module is part of the `OCA/sale-workflow <https://github.com/OCA/sale-workflow/tree/18.0/portal_sale_personal_data_only>`_ project on GitHub.
+
+You are welcome to contribute. To learn how please visit https://odoo-community.org/page/Contribute.

portal_sale_personal_data_only/__init__.py

@@ -0,0 +1 @@
+from .hooks import post_init_hook, uninstall_hook

portal_sale_personal_data_only/__manifest__.py

@@ -0,0 +1,16 @@
+# Copyright 2018-19 Tecnativa S.L. - David Vidal
+# License AGPL-3.0 or later (http://www.gnu.org/licenses/agpl.html).
+{
+    "name": "Portal Sale Personal Data Only",
+    "version": "18.0.1.0.0",
+    "category": "Sale",
+    "author": "Tecnativa, Odoo Community Association (OCA)",
+    "website": "https://github.com/OCA/sale-workflow",
+    "license": "AGPL-3",
+    "depends": ["sale", "portal_account_personal_data_only"],
+    "auto_install": True,
+    "data": ["security/security.xml"],
+    "installable": True,
+    "post_init_hook": "post_init_hook",
+    "uninstall_hook": "uninstall_hook",
+}

portal_sale_personal_data_only/hooks.py

@@ -0,0 +1,14 @@
+# Copyright 2019 Tecnativa - David Vidal
+# License AGPL-3.0 or later (https://www.gnu.org/licenses/agpl).
+
+
+def post_init_hook(env):
+    """Archive the ir.rules we want to override"""
+    env.ref("sale.sale_order_rule_portal").active = False
+    env.ref("sale.sale_order_line_rule_portal").active = False
+
+
+def uninstall_hook(env):
+    """Unarchive the overriden ir.rules"""
+    env.ref("sale.sale_order_rule_portal").active = True
+    env.ref("sale.sale_order_line_rule_portal").active = True

portal_sale_personal_data_only/i18n/portal_sale_personal_data_only.pot

@@ -0,0 +1,13 @@
+# Translation of Odoo Server.
+# This file contains the translation of the following modules:
+#
+msgid ""
+msgstr ""
+"Project-Id-Version: Odoo Server 17.0\n"
+"Report-Msgid-Bugs-To: \n"
+"Last-Translator: \n"
+"Language-Team: \n"
+"MIME-Version: 1.0\n"
+"Content-Type: text/plain; charset=UTF-8\n"
+"Content-Transfer-Encoding: \n"
+"Plural-Forms: \n"

portal_sale_personal_data_only/pyproject.toml

@@ -0,0 +1,3 @@
+[build-system]
+requires = ["whool"]
+build-backend = "whool.buildapi"

portal_sale_personal_data_only/readme/CONTRIBUTORS.md

@@ -0,0 +1,8 @@
+- Harald Panten \<<harald.panten@sygel.es>\>
+- [Tecnativa](https://www.tecnativa.com):
+  - David Vidal
+  - Víctor Martínez
+  - Stefan Ungureanu
+- Moaad Bourhim \<<moaad.bourhim@gmail.com>\>
+- Jairo Llopis ([Moduon](https://www.moduon.team/))
+- SodexisTeam \<<dev@sodexis.com>\>

portal_sale_personal_data_only/readme/DESCRIPTION.md

@@ -0,0 +1,7 @@
+By default, portal users are allowed to see all the sale orders in which
+a member of their organization are followers. That could cause a leaking
+of documents between members and departments and of the organization
+that should stay private.
+
+This module restricts that behaviour so the portal users only see their
+own documents.

portal_sale_personal_data_only/readme/USAGE.md

@@ -0,0 +1,7 @@
+1.  Create some portal users belonging to the same company.
+2.  Place some orders for several of these users.
+3.  Log in with each portal user credential.
+4.  Only the sale orders belonging to the logged in user's partner or
+    his descendants should be accessible.
+5.  Invoices associated to a partner's sale order will be visible as
+    well.

portal_sale_personal_data_only/security/security.xml

@@ -0,0 +1,39 @@
+<?xml version="1.0" encoding="utf-8" ?>
+<odoo noupdate="1">
+    <record id="portal_sale_order_user_rule" model="ir.rule">
+        <field name="name">Portal Only Personal Quotations/Sales</field>
+        <field name="model_id" ref="sale.model_sale_order" />
+        <field
+            name="domain_force"
+        >[('message_partner_ids','child_of', [user.partner_id.id])]</field>
+        <field name="groups" eval="[(4, ref('base.group_portal'))]" />
+    </record>
+    <record id="portal_sale_order_line_rule" model="ir.rule">
+        <field name="name">Portal Only Personal Sales Orders Line</field>
+        <field name="model_id" ref="sale.model_sale_order_line" />
+        <field
+            name="domain_force"
+        >[('order_id.message_partner_ids','child_of', [user.partner_id.id])]</field>
+        <field name="groups" eval="[(4, ref('base.group_portal'))]" />
+    </record>
+    <record id="portal_account_invoice_user_rule" model="ir.rule">
+        <field
+            name="name"
+        >Portal display personal invoices linked to personal sale orders</field>
+        <field name="model_id" ref="account.model_account_move" />
+        <field name="domain_force">
+            [('invoice_line_ids.sale_line_ids.order_id.message_partner_ids', 'child_of', [user.partner_id.id])]
+        </field>
+        <field name="groups" eval="[(4, ref('base.group_portal'))]" />
+    </record>
+    <record id="portal_account_invoice_line_rule" model="ir.rule">
+        <field
+            name="name"
+        >Portal display personal invoice lines linked to personal sale orders</field>
+        <field name="model_id" ref="account.model_account_move_line" />
+        <field name="domain_force">
+            [('sale_line_ids.order_id.message_partner_ids', 'child_of', [user.partner_id.id])]
+        </field>
+        <field name="groups" eval="[(4, ref('base.group_portal'))]" />
+    </record>
+</odoo>