From 06f5d5d2a608c3da18de3a2da1122fe5ee1b0bb5 Mon Sep 17 00:00:00 2001
From: =?UTF-8?q?C=C3=A9dric=20Krier?= <ced@b2ck.com>
Date: Tue, 31 May 2022 23:56:11 +0200
Subject: [PATCH] Remove read access to non account group of computed reporting
 fields

The computed fields on account and account type that are used for reporting
should have the same access right as the other reports.

issue11504
review425191003
---
 account.xml | 64 +++++++++++++++++++++++++++++++++++++++++++++++++++++
 1 file changed, 64 insertions(+)

diff --git a/account.xml b/account.xml
index 83814c94a2..3f69ac0f55 100644
--- a/account.xml
+++ b/account.xml
@@ -218,6 +218,26 @@ this repository contains the full copyright notices and license terms. -->
             <field name="perm_delete" eval="True"/>
         </record>
 
+        <record model="ir.model.field.access" id="access_account_type_amount">
+            <field name="field" search="[('model.model', '=', 'account.account.type'), ('name', '=', 'amount')]"/>
+            <field name="perm_read" eval="False"/>
+        </record>
+        <record model="ir.model.field.access" id="access_account_type_amount_account">
+            <field name="field" search="[('model.model', '=', 'account.account.type'), ('name', '=', 'amount')]"/>
+            <field name="group" ref="group_account"/>
+            <field name="perm_read" eval="True"/>
+        </record>
+
+        <record model="ir.model.field.access" id="access_account_type_amount_cmp">
+            <field name="field" search="[('model.model', '=', 'account.account.type'), ('name', '=', 'amount_cmp')]"/>
+            <field name="perm_read" eval="False"/>
+        </record>
+        <record model="ir.model.field.access" id="access_account_type_amount_cmp_account">
+            <field name="field" search="[('model.model', '=', 'account.account.type'), ('name', '=', 'amount_cmp')]"/>
+            <field name="group" ref="group_account"/>
+            <field name="perm_read" eval="True"/>
+        </record>
+
         <record model="ir.rule.group" id="rule_group_account_type_companies">
             <field name="name">User in companies</field>
             <field name="model"
@@ -243,6 +263,10 @@ this repository contains the full copyright notices and license terms. -->
             <field name="model">account.account.type,-1</field>
             <field name="action" ref="report_account_type_statement"/>
         </record>
+        <record model="ir.action-res.group" id="report_account_type_statement_group_account">
+            <field name="action" ref="report_account_type_statement"/>
+            <field name="group" ref="group_account"/>
+        </record>
 
         <record model="ir.ui.view" id="account_template_view_form">
             <field name="model">account.account.template</field>
@@ -496,6 +520,46 @@ this repository contains the full copyright notices and license terms. -->
             <field name="perm_delete" eval="True"/>
         </record>
 
+        <record model="ir.model.field.access" id="access_account_balance">
+            <field name="field" search="[('model.model', '=', 'account.account'), ('name', '=', 'balance')]"/>
+            <field name="perm_read" eval="False"/>
+        </record>
+        <record model="ir.model.field.access" id="access_account_balance_account">
+            <field name="field" search="[('model.model', '=', 'account.account'), ('name', '=', 'balance')]"/>
+            <field name="group" ref="group_account"/>
+            <field name="perm_read" eval="True"/>
+        </record>
+
+        <record model="ir.model.field.access" id="access_account_credit">
+            <field name="field" search="[('model.model', '=', 'account.account'), ('name', '=', 'credit')]"/>
+            <field name="perm_read" eval="False"/>
+        </record>
+        <record model="ir.model.field.access" id="access_account_credit_account">
+            <field name="field" search="[('model.model', '=', 'account.account'), ('name', '=', 'credit')]"/>
+            <field name="group" ref="group_account"/>
+            <field name="perm_read" eval="True"/>
+        </record>
+
+        <record model="ir.model.field.access" id="access_account_debit">
+            <field name="field" search="[('model.model', '=', 'account.account'), ('name', '=', 'debit')]"/>
+            <field name="perm_read" eval="False"/>
+        </record>
+        <record model="ir.model.field.access" id="access_account_debit_account">
+            <field name="field" search="[('model.model', '=', 'account.account'), ('name', '=', 'debit')]"/>
+            <field name="group" ref="group_account"/>
+            <field name="perm_read" eval="True"/>
+        </record>
+
+        <record model="ir.model.field.access" id="access_account_amount_second_currency">
+            <field name="field" search="[('model.model', '=', 'account.account'), ('name', '=', 'amount_second_currency')]"/>
+            <field name="perm_read" eval="False"/>
+        </record>
+        <record model="ir.model.field.access" id="access_account_amount_second_currency_account">
+            <field name="field" search="[('model.model', '=', 'account.account'), ('name', '=', 'amount_second_currency')]"/>
+            <field name="group" ref="group_account"/>
+            <field name="perm_read" eval="True"/>
+        </record>
+
         <record model="ir.rule.group" id="rule_group_account_companies">
             <field name="name">User in companies</field>
             <field name="model" search="[('model', '=', 'account.account')]"/>