From 12b1818e80a26748fdbaa8ce98f8faa7bf92bc73 Mon Sep 17 00:00:00 2001
From: Sergi Almacellas Abellana <sergi@koolpi.com>
Date: Mon, 25 Apr 2016 08:54:40 +0200
Subject: [PATCH] Add access rules for taxes relations on templates and
 categories.

Since changeset 974cd0415640 many2many fields are not joining the target table
so the access rules of taxes are not applied and this causes an access_error
on the client. We add the access rule till issue4080 is resolved

issue5509
review22981002
---
 product.xml | 48 ++++++++++++++++++++++++++++++++++++++++++++++++
 1 file changed, 48 insertions(+)

diff --git a/product.xml b/product.xml
index 836f2ee3ef..ec2f159fa7 100644
--- a/product.xml
+++ b/product.xml
@@ -22,5 +22,53 @@ this repository contains the full copyright notices and license terms. -->
             <field name="name">template_tree</field>
         </record>
 
+        <record model="ir.rule.group" id="rule_group_category_customer_taxes">
+            <field name="model"
+                search="[('model', '=', 'product.category-customer-account.tax')]"/>
+            <field name="global_p" eval="True"/>
+        </record>
+        <record model="ir.rule" id="rule_category_customer_taxes">
+            <field name="domain"
+                eval="[('tax.company', '=', Eval('user', {}).get('company', None))]"
+                pyson="1"/>
+            <field name="rule_group" ref="rule_group_category_customer_taxes"/>
+        </record>
+
+        <record model="ir.rule.group" id="rule_group_category_supplier_taxes">
+            <field name="model"
+                search="[('model', '=', 'product.category-supplier-account.tax')]"/>
+            <field name="global_p" eval="True"/>
+        </record>
+        <record model="ir.rule" id="rule_category_supplier_taxes">
+            <field name="domain"
+                eval="[('tax.company', '=', Eval('user', {}).get('company', None))]"
+                pyson="1"/>
+            <field name="rule_group" ref="rule_group_category_supplier_taxes"/>
+        </record>
+
+        <record model="ir.rule.group" id="rule_group_template_customer_taxes">
+            <field name="model"
+                search="[('model', '=', 'product.template-customer-account.tax')]"/>
+            <field name="global_p" eval="True"/>
+        </record>
+        <record model="ir.rule" id="rule_template_customer_taxes">
+            <field name="domain"
+                eval="[('tax.company', '=', Eval('user', {}).get('company', None))]"
+                pyson="1"/>
+            <field name="rule_group" ref="rule_group_template_customer_taxes"/>
+        </record>
+
+        <record model="ir.rule.group" id="rule_group_template_supplier_taxes">
+            <field name="model"
+                search="[('model', '=', 'product.template-supplier-account.tax')]"/>
+            <field name="global_p" eval="True"/>
+        </record>
+        <record model="ir.rule" id="rule_template_supplier_taxes">
+            <field name="domain"
+                eval="[('tax.company', '=', Eval('user', {}).get('company', None))]"
+                pyson="1"/>
+            <field name="rule_group" ref="rule_group_template_supplier_taxes"/>
+        </record>
+
     </data>
 </tryton>