[SECURITY] -pos box cash in pos box cash out access for non accountant

[burette/velosenville.git] / view / point_of_sale.xml

diff --git a/view/point_of_sale.xml b/view/point_of_sale.xml
index a298887..872e4af 100644 (file)
--- a/view/point_of_sale.xml
+++ b/view/point_of_sale.xml
@@ -11,5 +11,19 @@
                 </xpath>
             </field>
         </record>
+        <record id="view_pos_session_form" model="ir.ui.view">
+            <field name="name">pos.session.form</field>
+            <field name="model">pos.session</field>
+            <field name="inherit_id" ref="point_of_sale.view_pos_session_form"/>
+            <field name="priority" eval="8"/>
+            <field name="arch" type="xml">
+            <xpath expr="//button[@name='%(point_of_sale.action_pos_box_in)d']" position="attributes">
+                <attribute name="groups">account.group_account_user,account.group_account_manager,point_of_sale.group_pos_manager</attribute>
+            </xpath>
+            <xpath expr="//button[@name='%(point_of_sale.action_pos_box_out)d']" position="attributes">
+                <attribute name="groups">account.group_account_user,account.group_account_manager,point_of_sale.group_pos_manager</attribute>
+            </xpath>
+            </field>
+        </record>
     </data>
 </openerp>