Since 6f2efae1, posting an account move automatically adds
the partner_id and commercial_partner_id to the record's followers.
However, if some existing followers are in an other company and
the current user doesn't have access to the company, it
would raise an access error.

This commit fixes the multi-company issue and adds a test
for the feature.

closes odoo/odoo#37696

Signed-off-by: Yannick Tivisse (yti) <yti@odoo.com>

Still without demo data

closes odoo/odoo#37695

Signed-off-by: Martin Trigaux (mat) <mat@odoo.com>

Was a technical name

Since 1d766c06 the attachment icon was
missing when it wasn't a pdf or image type file.

opw-2064128

closes odoo/odoo#37687

X-original-commit: c44cec7e5ed9de3be495eb44b351eda6b0f6aeee
Signed-off-by: Jorge Pinna Puissant (jpp) <jpp@odoo.com>

closes odoo/odoo#37621

Signed-off-by: Damien Bouvy (dbo) <dbo@odoo.com>

Althought most of the SCA compliance stuff was already there,
the flow was slighlty changed to better support some flows in 12.0

Reflect this changes in 12.5.

Renamed xml ids of the main accounts (in prepartion for a future multi l10n
demo system). Change account numbering to match quickbook and other US GAAP
convention and recommendations.

closes odoo/odoo#37606

Signed-off-by: oco-odoo <oco-odoo@users.noreply.github.com>

There is the % Clicked stat button in SMS marketing form view when it
is on draft or test. Fix to be only visible
when the state is not in draft or test

TASK_ID : 2078918

closes odoo/odoo#37615

Signed-off-by: Thibault Delavallee (tde) <tde@openerp.com>

Bug
===
In the mailing mailing form view, after saving the email and creating it, the body is invisible and one needs to edit and save again to see the content
The view has two fields with the same name

Fix
===
At the end, we have only one field and some condition on the attributes (class, widget)

TASK_ID : 2078918

Co-authored-by: Stéphane Debauche <std@odoo.com>

In the sms marketing, the display name of the contact list was wrong
during the search of the many2one widget (contact list field,
count of valid number was the count of valid email).
Add a context attribute on the widget depending of the global context
to force the rigth count.

TASK_ID : 2078918

The field sms_allow_unsubscribe field was visible and checkable on the
email marketing app, but this field is reserved to the
sms marketing. Add a invisible condition.

TASK_ID : 2078918

These functions convert plain text links into clickable hyperlinks.
These open in new tabs but did not have the "noreferrer noopener" rel
attributes, which made them susceptible to reverse tabnabbing.

A lot of attack vectors were available to unregistered, uninvited
anonymous users and presented a significant phishing threat (such as
posting links in the instant-chat, through a mail-alias, in a forum post
or in a twitter post) and leading the operator to believe he had been
disconnected from odoo in the original tab, prompting them to enter
their credentials.

while these three places will add the noreferrer and noopener attributes
on the anchor tags generated by them, there are still many places that
create hyperlinks without the use of these functions, although most of
them are static links, they still represent a transitive security
vulnerability to the linked sites.

There are also a few modules and widgets that roll out their own links
or open new tabs unsafely using window.open(), these will need to be
patched separately.

closes odoo/odoo#37591

Signed-off-by: Olivier Dony (odo) <odo@openerp.com>

Nothing is editable on account.move.line tree view.
On grouped tree views, only account_id, name, ref, tag_ids, date_maturity are editable.
The account hierarchy must not be visible on the partner ledger view.

closes odoo/odoo#37528

Signed-off-by: Quentin De Paoli (qdp) <qdp@openerp.com>

When writing an account from the editable groupby list view, prevent
the user to messing up the invoices by writing receivable accounts everywhere.

closes odoo/odoo#37431

Signed-off-by: Toufik Benjaa (tbe) <tbe@odoo.com>

closes odoo/odoo#37343

Signed-off-by: David Monjoie (dmo) <dmo@odoo.com>

avoid a traceback when resending a SMS
It was because arguments of the js function setSmsStatus
were undefined in this case

closes odoo/odoo#36907

Task-id: 2070836
Signed-off-by: Pierre Rousseau (pro) <pro@odoo.com>

Change class of disable sms button in secondary

task-id: 2070836

Add order number in the sms wich indicates
that the order has been shipped

task-id: 2070836

It was no longer possible to send SMS in batch in the list view
This is because it was missing the default_res_ids  key in the action context

task_id: 2070836

closes odoo/odoo#35966

Signed-off-by: Martin Trigaux (mat) <mat@odoo.com>

closes odoo/odoo#37685

X-original-commit: 65d8d3fb
Signed-off-by: Nicolas Martinelli (nim) <nim@odoo.com>

- Description is no longer needed since it provides the same info as the header.
- The ref field will be used to set a custom description on any invoice (not just vendor bills).
- Don't display the name on the report if the move hasn't been posted.

closes odoo/odoo#37683

Signed-off-by: oco-odoo <oco-odoo@users.noreply.github.com>

Since https://github.com/odoo/odoo/commit/02dab5dc88112fd5f5ee43882ca022529acb4abf,
the JS is now lazy loaded. As the "Register Now" button on each event
page relies on JavaScript to perform a RPC, it needs the JS to be loaded
to be able to work properly when clicking on it. In this case, clicking
on it while the JS is not loaded yet performs a standard form submit,
which lands on a route which cannot handle a standard form submit which
then results in a 400 error page.

This commit fixes the problem by adding the 'o_wait_lazy_js' class on
the button which simply prevents click on elements during lazy loading.

Discovered while working on task-2043872

closes odoo/odoo#37675

X-original-commit: https://github.com/odoo/odoo/commit/5e885436f9a77b4c387cd0b1eb07102ff85bec03


Signed-off-by: Quentin Smetz (qsm) <qsm@odoo.com>

Before this commit, the "renderer with search panel" have a max-height
of 100% but no min-height. Because of this, it is possible that the
list view optinal fields dropdown would be smaller than the "renderer
with search panel" container. Since this particular container has to
be in overflow: auto (see the comment on the line above the change),
it hides the overflow of the optional fields dropdown.

This commit sets the height of the "renderer with search panel"
container to 100% such that it does not truncate the optional fields
dropdown. The bug was observed on the General Ledger menu of Accounting,
and the change does not look to change anything other than correctly
displaying the optional fields dropdown without truncating it.

closes odoo/odoo#37660

Signed-off-by: David Monjoie (dmo) <dmo@odoo.com>

Since https://github.com/odoo/odoo/commit/335a505d1f9b6a978c0fe0f6ea760a45b0d0a67f

,
the frontend widgets are not used in edit mode by default. The local
events snippet's one had to be explicitly enabled.

Discovered while working on task-2043872

closes odoo/odoo#37672

X-original-commit: 5424a4b590e73d2cf3cfb39bbbe656e908db2b46
Signed-off-by: Quentin Smetz (qsm) <qsm@odoo.com>

This commit sets the call to default method on move field in reversal
wizard as lambda to ensure that the right method
is called when it is inherited (as in helpdesk_account module).

It also changes the form view so other module can use it to refund
invoices (move_id field first in the view as it will determine if refund
method should be visible or not).

Task-2047999

closes odoo/odoo#37635

X-original-commit: bcda50aeca44b292417024a5e422ffb8698e0c99
Signed-off-by: gla-odoo <gla-odoo@users.noreply.github.com>

You DO want to be able to change your user's email address from the
employee profile

closes odoo/odoo#37674

Signed-off-by: Romain Libert (rli) <rli@odoo.com>

Before this commmit:
   Show wrong value in Tax report

After this commit:
   Show right value of taxes in Tax report

closes odoo/odoo#37673

X-original-commit: 67ad5e1ecbcb9aee3f47c400b82b9df989c05d78
Signed-off-by: Josse Colpaert <jco@openerp.com>

closes odoo/odoo#37671

X-original-commit: d4dc7ae8285e6ab65f168e61650ef89ebdb2268d
Signed-off-by: Josse Colpaert <jco@openerp.com>

The report sale closing that was working on journal and takes the sales
total and cumulative total on periods of 'day', 'month' and 'years'. Is
now based on the pos orders and moved to the pos certification module.

closes odoo/odoo#36967

Task-id: 47990
Signed-off-by: pimodoo <pimodoo@users.noreply.github.com>

We've added a repport that guarantee that the blockchain of hash has not
been altered. It recompute the hash and check that they are the same as
the one stored.

TASK-ID: 47990

Once an order is created in the french certification, we cannot modify
it wihout traces, so we've disabled the edtition of the order lines in
the frontend, disable the price changing, and the deletion of orders.

So when we want to decrease the quantity, a line with negative quantity
should be done.

TASK-ID: 47990

Since the field datas_fname doesn't exist anymore, we should not set it
anymore.

rev: c212cfe8

We now display the pos order hash, on the order form view when we are in
debug mode.

TASK-ID: 47990

When an order is sent to the server from the point of sale, a unique
hash is generated by the server. This hash must be printed on the
receipt to allow the comparison between the receipt and the data on the
server and guarantee the unalterability of the data on the server.

TASK-ID: 47990

Until now, the ticket printed from the web or to the printer were
different because one was using the OrderReceipt template and removed
some fields, and the other was using the BillReceipt.

We are now using only the bill receipt, to avoid to maintain multiple
template showing the same thing.

TASK-ID: 47990

When a receipt is reprinted, the word 'DUPLICATA' is printed at the
bottom of the receipt.

We are also allowing to reprint ticket even if no printer is selected on
the POS config as nothing prevent to do this.

TASK-ID: 47990

Retrieving selection data for a custom field while setting up a model
should not flush() fields in `ir.model.fields.selection`.

closes odoo/odoo#37667

Signed-off-by: Raphael Collet (rco) <rco@openerp.com>

Fix onchange on category, it must write on event mail

closes odoo/odoo#37654

Signed-off-by: Yannick Tivisse (yti) <yti@odoo.com>