From cf45800d3bce331b59297284d3431717ceacc072 Mon Sep 17 00:00:00 2001
From: "Touati Djamel (otd)" <otd@odoo.com>
Date: Tue, 21 Jun 2022 15:07:43 +0000
Subject: [PATCH] [FIX] mrp: add read access on BOM to the purchase users
MIME-Version: 1.0
Content-Type: text/plain; charset=UTF-8
Content-Transfer-Encoding: 8bit

Steps to reproduce the bug:
- Install mrp and purchase
- Create a new user “U1” > give him only the “purchase” user access
- Log in as “U1”
- Go to purchase app > create a new PO
- Try to select any product

Problem:
A user error is triggered because we check if the product has a BOM
but since the user does not have access to MRP, an error is raised

opw-2885982

closes odoo/odoo#94183

closes odoo/odoo#121371

Signed-off-by: Adrien Widart <awt@odoo.com>
Signed-off-by: William Henrotin (whe) <whe@odoo.com>
---
 addons/purchase_mrp/__manifest__.py              | 3 ++-
 addons/purchase_mrp/security/ir.model.access.csv | 3 +++
 2 files changed, 5 insertions(+), 1 deletion(-)
 create mode 100644 addons/purchase_mrp/security/ir.model.access.csv

diff --git a/addons/purchase_mrp/__manifest__.py b/addons/purchase_mrp/__manifest__.py
index e0301d0afc65..933b4fac0680 100644
--- a/addons/purchase_mrp/__manifest__.py
+++ b/addons/purchase_mrp/__manifest__.py
@@ -15,7 +15,8 @@ from purchase order.
     """,
     'data': [
         'views/purchase_order_views.xml',
-        'views/mrp_production_views.xml'
+        'views/mrp_production_views.xml',
+        'security/ir.model.access.csv',
     ],
     'depends': ['mrp', 'purchase_stock'],
     'installable': True,
diff --git a/addons/purchase_mrp/security/ir.model.access.csv b/addons/purchase_mrp/security/ir.model.access.csv
new file mode 100644
index 000000000000..42ef7569551a
--- /dev/null
+++ b/addons/purchase_mrp/security/ir.model.access.csv
@@ -0,0 +1,3 @@
+id,name,model_id:id,group_id:id,perm_read,perm_write,perm_create,perm_unlink
+access_mrp_bom_purchase_user,mrp.bom,mrp.model_mrp_bom,purchase.group_purchase_user,1,0,0,0
+access_mrp_bom_line_purchase_user,mrp.bom.line,mrp.model_mrp_bom_line,purchase.group_purchase_user,1,0,0,0
-- 
GitLab