From 8a83063e907f1b26cae54b9163edd5d2138990e9 Mon Sep 17 00:00:00 2001
From: =?UTF-8?q?C=C3=A9dric=20Krier?= <ced@b2ck.com>
Date: Tue, 18 May 2021 22:20:30 +0200
Subject: [PATCH] Restrict access to commission and plan for commission group

issue10395
review340741002
---
 commission.xml | 14 +++++++-------
 1 file changed, 7 insertions(+), 7 deletions(-)

diff --git a/commission.xml b/commission.xml
index fcba3bb96d..8254cbfc6a 100644
--- a/commission.xml
+++ b/commission.xml
@@ -28,6 +28,11 @@ this repository contains the full copyright notices and license terms. -->
             name="Commission"
             sequence="100"
             id="menu_commission"/>
+        <record model="ir.ui.menu-res.group" id="menu_commission_group_commission">
+            <field name="menu" ref="menu_commission"/>
+            <field name="group" ref="group_commission"/>
+        </record>
+
         <menuitem
             name="Configuration"
             parent="menu_commission"
@@ -212,7 +217,7 @@ this repository contains the full copyright notices and license terms. -->
 
         <record model="ir.model.access" id="access_plan">
             <field name="model" search="[('model', '=', 'commission.plan')]"/>
-            <field name="perm_read" eval="True"/>
+            <field name="perm_read" eval="False"/>
             <field name="perm_write" eval="False"/>
             <field name="perm_create" eval="False"/>
             <field name="perm_delete" eval="False"/>
@@ -306,7 +311,7 @@ this repository contains the full copyright notices and license terms. -->
 
         <record model="ir.model.access" id="access_commission">
             <field name="model" search="[('model', '=', 'commission')]"/>
-            <field name="perm_read" eval="True"/>
+            <field name="perm_read" eval="False"/>
             <field name="perm_write" eval="False"/>
             <field name="perm_create" eval="False"/>
             <field name="perm_delete" eval="False"/>
@@ -347,10 +352,5 @@ this repository contains the full copyright notices and license terms. -->
             action="act_commission_create_invoice"
             sequence="90"
             id="menu_commission_create_invoice"/>
-        <record model="ir.ui.menu-res.group"
-            id="menu_commission_create_invoice_group_commission">
-            <field name="menu" ref="menu_commission_create_invoice"/>
-            <field name="group" ref="group_commission"/>
-        </record>
     </data>
 </tryton>