Sale Order control buttons visible to Portal users

Bug #1283529 reported by Anton Chepurov
6
This bug affects 1 person
Affects Status Importance Assigned to Milestone
Odoo Addons (MOVED TO GITHUB)
New
Undecided
Unassigned

Bug Description

- Recreate Delivery Order
- Ignore Exception
- Cancel Order

These are 3 buttons added to the Sale Order form by /sale_stock/sale_stock_view.xml file. You can locate them in the file by looking for: states="shipping_except".

The buttons don't have groups="base.group_user", so they are VISIBLE to Portal users.
If you go further with allowing your customers to modify Sale Orders, then the buttons also become CLICKABLE :)

Not smth we would expect our customers to do, right?

So we'd better add groups="base.group_user" to those buttons instead :)

To post a comment you must log in.
This report contains Public information  
Everyone can see this information.

Other bug subscribers

Remote bug watches

Bug watches keep track of this bug in other bug trackers.