From ef0b05e62ec5eb8f1c34c29be80e9348d239a5fe Mon Sep 17 00:00:00 2001
From: Jared Kipe <jared@hibou.io>
Date: Mon, 1 Mar 2021 14:09:06 -0800
Subject: [PATCH] [IMP] sale_payment_web: add ACL for account.payment, don't
 show view if not in group.

---
 sale_payment_web/security/ir.model.access.csv | 1 +
 sale_payment_web/views/sale_views.xml         | 1 +
 2 files changed, 2 insertions(+)

diff --git a/sale_payment_web/security/ir.model.access.csv b/sale_payment_web/security/ir.model.access.csv
index 7643ab48..1cd7e0de 100644
--- a/sale_payment_web/security/ir.model.access.csv
+++ b/sale_payment_web/security/ir.model.access.csv
@@ -1,2 +1,3 @@
 id,name,model_id:id,group_id:id,perm_read,perm_write,perm_create,perm_unlink
 access_payment_method,account.payment.method,account.model_account_payment_method,group_payment_web,1,0,0,0
+access_payment,account.payment,account.model_account_payment,group_payment_web,1,1,1,1
diff --git a/sale_payment_web/views/sale_views.xml b/sale_payment_web/views/sale_views.xml
index 3842dc5b..f736b90b 100644
--- a/sale_payment_web/views/sale_views.xml
+++ b/sale_payment_web/views/sale_views.xml
@@ -5,6 +5,7 @@
         <field name="name">sale.order.form.inherit</field>
         <field name="model">sale.order</field>
         <field name="inherit_id" ref="sale.view_order_form"/>
+        <field name="groups_id" eval="[(4, ref('group_payment_web'))]"/>
         <field name="arch" type="xml">
             <xpath expr="//button[@name='action_draft']" position="after">
                 <button name="action_payment_register" type="object" string="Register Payment"/>