diff --git a/mrp_production_request/models/procurement.py b/mrp_production_request/models/procurement.py
index 5c505552f..cff54c446 100644
--- a/mrp_production_request/models/procurement.py
+++ b/mrp_production_request/models/procurement.py
@@ -43,13 +43,13 @@ class ProcurementOrder(models.Model):
         result = super(ProcurementOrder, self).propagate_cancels()
         for procurement in self:
             mrp_production_requests = \
-                self.env['mrp.production.request'].search([
+                self.env['mrp.production.request'].sudo().search([
                     ('procurement_id', '=', procurement.id)])
             if mrp_production_requests and not self.env.context.get(
                     'from_mrp_production_request'):
-                mrp_production_requests.button_cancel()
+                mrp_production_requests.sudo().button_cancel()
                 for mr in mrp_production_requests:
-                    mr.message_post(
+                    mr.sudo().message_post(
                         body=_("Related procurement has been cancelled."))
             procurement.write({'mrp_production_request_id': None})
         return result
diff --git a/mrp_production_request/security/ir.model.access.csv b/mrp_production_request/security/ir.model.access.csv
index fe6436e96..a39d6aa48 100644
--- a/mrp_production_request/security/ir.model.access.csv
+++ b/mrp_production_request/security/ir.model.access.csv
@@ -1,3 +1,3 @@
 id,name,model_id:id,group_id:id,perm_read,perm_write,perm_create,perm_unlink
-access_mrp_production_request_user,mrp.request.user,model_mrp_production_request,group_mrp_production_request_user,1,1,1,1
+access_mrp_production_request_user,mrp.request.user,model_mrp_production_request,group_mrp_production_request_user,1,1,1,0
 access_mrp_production_request_manager,mrp.request.manager,model_mrp_production_request,group_mrp_production_request_manager,1,1,1,1
diff --git a/mrp_production_request/security/mrp_production_request_security.xml b/mrp_production_request/security/mrp_production_request_security.xml
index 1582ade39..d8ad2c29c 100644
--- a/mrp_production_request/security/mrp_production_request_security.xml
+++ b/mrp_production_request/security/mrp_production_request_security.xml
@@ -59,5 +59,15 @@
         <field name="domain_force">[('requested_by','=',user.id)]</field>
     </record>
 
+    <record id="mpr_production_request_line_manager_rule" model="ir.rule">
+        <field name="name">Manufacturing Request Line Manager</field>
+        <field name="model_id" ref="model_mrp_production_request"/>
+        <field name="groups" eval="[(6,0, [ref('group_mrp_production_request_manager')])]"/>
+        <field name="perm_read" eval="True"/>
+        <field name="perm_write" eval="True"/>
+        <field name="perm_create" eval="True"/>
+        <field name="perm_unlink" eval="True"/>
+    </record>
+
 </data>
 </odoo>