I am trying to restrict visibility of *Inter-Company Purchase Orders and Sale Orders* in Odoo 15. I added a Boolean field on both models: is_inter_company_po on purchase.order is_inter_company_so on sale.order If the field is *True*, the document should be *visible only to a special access group*. All other users should not see these inter-company records. My Record Rules Hide Intercompany Purchase Orders (Global

Odoo is the world's easiest all-in-one management software.
It includes hundreds of business apps:

CRM
e-Commerce
Akuntansi
Inventaris
PoS
Project
MRP

All apps

Semua Post Orang Lencana-Lencana

Label (Lihat semua)

odoo accounting v14 pos v15

Mengenai forum ini

Help

Record Rules not fully hiding Inter-Company Sale Orders / Purchase Orders

security purchase record_rules domain_filter ir.rule odoo15

1 Balas

164 Tampilan

Uday

I am trying to restrict visibility of Inter-Company Purchase Orders and Sale Orders in Odoo 15.

I added a Boolean field on both models:

is_inter_company_po on purchase.order
is_inter_company_so on sale.order

If the field is True, the document should be visible only to a special access group.

All other users should not see these inter-company records.

My Record Rules

<record id="purchase_hide_intercompany_po_rule" model="ir.rule">
    <field name="name">Hide Intercompany Purchase Orders (Global)</field>
    <field name="model_id" ref="purchase.model_purchase_order"/>
    <field name="domain_force">[('is_inter_company_po', '=', False)]</field>
    <field name="groups" eval="[(6, 0, [])]"/> <!-- Apply to ALL users -->
</record>

<record id="sale_hide_intercompany_so_rule" model="ir.rule">
    <field name="name">Hide Intercompany Sale Orders (Global)</field>
    <field name="model_id" ref="sale.model_sale_order"/>
    <field name="domain_force">[('is_inter_company_so', '=', False)]</field>
    <field name="groups" eval="[(6, 0, [])]"/> <!-- Apply to ALL users -->
</record>

In addition, I created a new group:

"Sales / Access to Intercompany Sale Orders" "Purchase / Access to Intercompany Purchase"

Some users can still see Inter-Company Sale Orders / Purchase Orders.

It looks like another record rule is overriding my hide rule.

Especially on purchase.order — the hide rule does not fully take effect.

I want to:

Hide inter-company SO/PO from all users by default.
Allow only one specific group to see them.
Make sure no other record rule overrides or cancels this rule

Uday

Penulis

I later tried to override the existing rule directly, but the override did not work and I am trying to understand why.

Original rule:

<record id="sale_order_see_all" model="ir.rule">
    <field name="name">All Orders</field>
    <field ref="model_sale_order" name="model_id"/>
    <field name="domain_force">[(1,'=',1)]</field>
    <field name="groups" eval="[(4, ref('sales_team.group_sale_salesman_all_leads'))]"/>
</record>

My attempt to inherit/override it:

<record id="sale.sale_order_see_all" model="ir.rule">
    <field name="domain_force">[('stock_move_request_id', '=', False)]</field>
</record>

Can you explain why this override is ignored? I believe the module dependencies are correct, so I expected this to replace the domain_force of the original rule, but nothing changes.

Kunjan Patel

Hello, Use the <function> tag in your custom module's XML:
<?xml version="1.0" encoding="utf-8"?>
<odoo>
<function model="ir.rule" name="write">
<value eval="[ref('sale.sale_order_see_all')]"/>
<value eval="{'domain_force': "['&', ('stock_move_request_id', '=', False), (1, '=', 1)]"}"/>
</function>
</odoo>

Hope it helps

Kunjan Patel

Hello Uday
I hope you are doing well

groups = [] is a fallback rule (lowest priority) - group-specific rules override it.

Fix: Apply your hide rule to purchase.group_purchase_user and sale.group_sale_salesman instead of empty groups. Then create a second rule with [(1,'=',1)] for your special intercompany group to allow access.

I hope this information helps you

Thanks & Regards,
Kunjan Patel

Menikmati diskusi? Jangan hanya membaca, ikuti!

Buat akun sekarang untuk menikmati fitur eksklufi dan agar terlibat dengan komunitas kami!

Daftar

Post Terkait	Replies	Tampilan
Record rules are not working as expected even though the rules are defined properly. What am I missing? security groups record_rules domain_filter	3 Des 21	8720
Security groups and record rules Diselesaikan security record_rules	1 Nov 24	2439
Domain Filtering help: Is there any operator like 'includes' or 'contains', which will do the inverse of 'child_of' operator? Diselesaikan record_rules domain_filter	2 Okt 22	12770
Add unlink = False for record rule not work security record_rules	0 Agu 21	3253
Restrict access by company Diselesaikan security record_rules	1 Jun 19	4935

Pertanyaan ini telah diberikan tanda

Menikmati diskusi? Jangan hanya membaca, ikuti!