odoo/odoo#163427

Created by fw-bot

label

odoo-dev:saas-17.1-saas-16.4-opw-3858685-sale_admin_invoice_access-sesn-kyFy-fw

head

813ce6e1670e34e15a1357d8407eac777ad126e0

target

saas-17.1

merged

3 weeks ago by Accounting, Brice Bartoletti (bib)

forward-port of

odoo/odoo#163329

[FW][FIX] account_edi: allow users to read account.edi.format/documnet

### Steps to Reproduce

1. Install `sale_management` and `account_edi`.
2. Create a user with admin access in sales but no rights in accounting.
3. Log in as the new user.
4. Navigate to a Sales Order that has been invoiced and attempt to view its invoice via the 'Invoices' stat button.

Expected Behavior: The user should be able to view the invoice.

Actual Behavior: An access error is encountered when attempting to view the invoice.

### Cause

The access error arises due to restricted permissions for `account.edi.format` and `account.edi.document`. Prior to commit 604a47ead80eb8a07102a978f364d82776f69da3, all users had access to these models. However, this commit restricted access solely to users with the `account.group_account_readonly` role, as part of a broader security enhancement to minimize unnecessary access by portal users.

opw-3858685

Forward-Port-Of: odoo/odoo#163329