Do not allow everybody to access account.transactions. Restrict by default to readonly and even restrict the access with a record rule, give access to salesman.
bzr revid: tde@openerp.com-20140122175702-1h1e51z4njt4s70w