First Enable Developer Mode.
- Go to Settings > Users & Companies > Groups.
- Click on the "Create" button to create a new group.
- Name the group (e.g., "Read-Only Musicians").
- In the new group form, go to the "Access Rights" tab.
- Add the necessary models for the group to access. Since you want them to view confirmed sales, you’ll need to configure access Click on "Add a line" and select the "Sales Order" (or "Sale Order") model.
the appropriate sale order model (e.g., sale.order).
- Set the access rights to "Read" only.
- Ensure that they do not have permissions to create, write, or delete records.
- Go to Settings > Technical > Security > Record Rules.
- Click on the "Create" button to create a new rule.
- Name the rule (e.g., "Read-Only Confirmed Sales").
- Set the "Object" to "Sales Order" (or sale.order).
- In the "Domain" field, set a filter to only show confirmed sales. For example, you can use [('state', '=', 'sale')] if the state 'sale' represents confirmed sales in your setup.
- Apply this rule to the new group you created by selecting the "Read-Only Musicians" group.
- Go to Settings > Users & Companies > Users.
- Edit the user profiles of the musicians and add them to the "Read-Only Musicians" group.
- Ensure that these users do not belong to any groups that would give them higher permissions on the sales orders.
