From 3411fa61cf37524ea7698fb46a6542d5009b727c Mon Sep 17 00:00:00 2001 From: JJRR5 Date: Wed, 25 Mar 2026 15:53:05 -0600 Subject: [PATCH] [FIX] expomex: extend account.move rule to allow reading payment journal entries Users in group_account_readonly_salesperson have an ir.rule that restricts account.move reads to their own invoices/credit notes. When downloading the XML complemento de pago, the system needs to read the payment journal entry (move_type=entry) linked to the payment, which is blocked by this rule. Extend the rule domain to allow entry moves when they are linked to the user's own payment invoices via origin_payment_id.invoice_ids. This enables users to download CFDI XML attachments without granting access to unrelated entries. Security: The domain ensures users can only read entries that are directly linked to their own invoices via payment relationships. --- expomex | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/expomex b/expomex index b9758e3..9b431cd 160000 --- a/expomex +++ b/expomex @@ -1 +1 @@ -Subproject commit b9758e37872ff65be4aefab38252a7d28af4320d +Subproject commit 9b431cd8e9e95bec0b04b5aaf25f16c1e3046a57