From 26601b86448f069e21b90283f00c08cdec28b857 Mon Sep 17 00:00:00 2001
From: Cedric Collins <cedric@hibou.io>
Date: Fri, 12 Aug 2022 17:00:34 -0500
Subject: [PATCH] [IMP] sale_payment_web: allow Sale Order Payments group to
 create and post journal entries

H10810
---
 sale_payment_web/models/sale.py                 |  2 +-
 sale_payment_web/security/ir.model.access.csv   |  7 +++++--
 sale_payment_web/security/sale_security.xml     | 17 +++++++++++++++++
 .../wizard/account_payment_register.py          |  2 +-
 4 files changed, 24 insertions(+), 4 deletions(-)

diff --git a/sale_payment_web/models/sale.py b/sale_payment_web/models/sale.py
index dd002d90..5909753e 100644
--- a/sale_payment_web/models/sale.py
+++ b/sale_payment_web/models/sale.py
@@ -17,7 +17,7 @@ class SaleOrder(models.Model):
 
 
     def action_manual_payments(self):
-        action = self.env.ref('account.action_account_payments').read()[0]
+        action = self.env['ir.actions.act_window']._for_xml_id('account.action_account_payments')
         domain = action['domain'] or '[]'
         domain = safe_eval(domain)
         domain.append(('id', 'in', self.manual_payment_ids.ids))
diff --git a/sale_payment_web/security/ir.model.access.csv b/sale_payment_web/security/ir.model.access.csv
index 1cd7e0de..66bb0029 100644
--- a/sale_payment_web/security/ir.model.access.csv
+++ b/sale_payment_web/security/ir.model.access.csv
@@ -1,3 +1,6 @@
 id,name,model_id:id,group_id:id,perm_read,perm_write,perm_create,perm_unlink
-access_payment_method,account.payment.method,account.model_account_payment_method,group_payment_web,1,0,0,0
-access_payment,account.payment,account.model_account_payment,group_payment_web,1,1,1,1
+access_payment_method,account.payment.method sale payment,account.model_account_payment_method,group_payment_web,1,0,0,0
+access_payment,account.payment sale payment,account.model_account_payment,group_payment_web,1,1,1,1
+access_move,account.move sale payment,account.model_account_move,group_payment_web,1,1,1,1
+access_move_line,account.move.line sale payment,account.model_account_move_line,group_payment_web,1,1,1,1
+access_account_payment_register,access.account.payment.register sale,account.model_account_payment_register,group_payment_web,1,1,1,0
diff --git a/sale_payment_web/security/sale_security.xml b/sale_payment_web/security/sale_security.xml
index 7234cc38..021d9fad 100644
--- a/sale_payment_web/security/sale_security.xml
+++ b/sale_payment_web/security/sale_security.xml
@@ -6,4 +6,21 @@
         <field name="category_id" ref="base.module_category_hidden"/>
     </record>
 
+
+    <data noupdate="1">
+        <record id="account_move_rule_see_personal" model="ir.rule">
+            <field name="name">Personal Journal Entries</field>
+            <field name="model_id" ref="account.model_account_move"/>
+            <field name="domain_force">[('move_type', '=', 'entry'), '|', ('invoice_user_id', '=', user.id), ('invoice_user_id', '=', False)]</field>
+            <field name="groups" eval="[(4, ref('sale_payment_web.group_payment_web'))]"/>
+        </record>
+
+        <record id="account_move_line_rule_see_personal" model="ir.rule">
+            <field name="name">Personal Journal Items</field>
+            <field name="model_id" ref="account.model_account_move_line"/>
+            <field name="domain_force">[('move_id.move_type', '=', 'entry'), '|', ('move_id.invoice_user_id', '=', user.id), ('move_id.invoice_user_id', '=', False)]</field>
+            <field name="groups" eval="[(4, ref('sale_payment_web.group_payment_web'))]"/>
+        </record>
+    </data>
+
 </odoo>
diff --git a/sale_payment_web/wizard/account_payment_register.py b/sale_payment_web/wizard/account_payment_register.py
index 91c28506..be19ec93 100644
--- a/sale_payment_web/wizard/account_payment_register.py
+++ b/sale_payment_web/wizard/account_payment_register.py
@@ -125,5 +125,5 @@ class AccountPaymentRegister(models.TransientModel):
         if not self.sale_order_id:
             return super(AccountPaymentRegister, self)._create_payments()
         payments = self.env['account.payment'].create(self._create_payment_vals_from_sale_order())
-        payments.action_post()
+        payments.sudo().action_post()
         return payments