odoo/odoo#163412
Created by fw-bot
- label
- odoo-dev:17.0-saas-16.4-opw-3858685-sale_admin_invoice_access-sesn-X_Bm-fw
- head
- ffe24b8ace4b0bfeadb639dcc9ccb13f9ae1a748
- target
- 17.0
- merged
- 3 weeks ago by Accounting, Brice Bartoletti (bib)
- forward-port of
- odoo/odoo#163329
[FW][FIX] account_edi: allow users to read account.edi.format/documnet
### Steps to Reproduce
1. Install `sale_management` and `account_edi`.
2. Create a user with admin access in sales but no rights in accounting.
3. Log in as the new user.
4. Navigate to a Sales Order that has been invoiced and attempt to view its invoice via the 'Invoices' stat button.
Expected Behavior: The user should be able to view the invoice.
Actual Behavior: An access error is encountered when attempting to view the invoice.
### Cause
The access error arises due to restricted permissions for `account.edi.format` and `account.edi.document`. Prior to commit 604a47ead80eb8a07102a978f364d82776f69da3, all users had access to these models. However, this commit restricted access solely to users with the `account.group_account_readonly` role, as part of a broader security enhancement to minimize unnecessary access by portal users.
opw-3858685
Forward-Port-Of: odoo/odoo#163329