odoo/addons/sale/sale_security.xml

<?xml version="1.0" encoding="utf-8"?>
<terp>
    <data noupdate="1">
        
        <record id="group_sale_manager" model="res.groups">
            <field name="name">Sale Manager</field>
        </record>
        <record id="group_sale_salesman" model="res.groups">
            <field name="name">Salesman</field>
        </record>
        
        <record id="ir_model_access_stockmove0" model="ir.model.access">
            <field model="ir.model" name="model_id" search="[('name','=','Stock Move')]"/>
            <field eval="1" name="perm_read"/>
            <field eval="&quot;Stock Move&quot;" name="name"/>
            <field eval="0" name="perm_unlink"/>
            <field eval="1" name="perm_write"/>
            <field eval="1" name="perm_create"/>
            <field name="group_id" ref="group_sale_manager"/>
        </record>
        
        <record id="ir_model_access_accountinvoice0" model="ir.model.access">
            <field model="ir.model" name="model_id" search="[('name','=','Invoice')]"/>
            <field eval="1" name="perm_read"/>
            <field eval="&quot;Account Invoice&quot;" name="name"/>
            <field eval="0" name="perm_unlink"/>
            <field eval="1" name="perm_write"/>
            <field eval="1" name="perm_create"/>
            <field name="group_id" ref="group_sale_manager"/>
        </record>
        
        <record id="ir_model_access_accountinvoiceline0" model="ir.model.access">
            <field model="ir.model" name="model_id" search="[('name','=','Invoice line')]"/>
            <field eval="1" name="perm_read"/>
            <field eval="&quot;Account Invoice Line&quot;" name="name"/>
            <field eval="0" name="perm_unlink"/>
            <field eval="0" name="perm_write"/>
            <field eval="1" name="perm_create"/>
            <field name="group_id" ref="group_sale_manager"/>
        </record>
        
        <record id="ir_model_access_accountinvoicetax0" model="ir.model.access">
            <field model="ir.model" name="model_id" search="[('name','=','Invoice Tax')]"/>
            <field eval="1" name="perm_read"/>
            <field eval="&quot;Account Invoice tax&quot;" name="name"/>
            <field eval="0" name="perm_unlink"/>
            <field eval="0" name="perm_write"/>
            <field eval="1" name="perm_create"/>
            <field name="group_id" ref="group_sale_manager"/>
        </record>
        
        <record id="access_mrp_procurement" model="ir.model.access">
            <field name="name">Mrp procurement</field>
            <field model="ir.model" name="model_id" search="[('model', '=', 'mrp.procurement')]"/>
            <field name="group_id" ref="group_sale_manager"/>
            <field eval="True" name="perm_read"/>
            <field eval="True" name="perm_write"/>
            <field eval="True" name="perm_create"/>
            <field eval="False" name="perm_unlink"/>
        </record>
        
        <record id="ir_model_access_stockmove0" model="ir.model.access">
            <field model="ir.model" name="model_id" search="[('name','=','Stock Move')]"/>
            <field eval="1" name="perm_read"/>
            <field eval="&quot;Stock Move&quot;" name="name"/>
            <field eval="0" name="perm_unlink"/>
            <field eval="1" name="perm_write"/>
            <field eval="1" name="perm_create"/>
            <field name="group_id" ref="group_sale_salesman"/>
        </record>
        
        <record id="ir_model_access_accountinvoice0" model="ir.model.access">
            <field model="ir.model" name="model_id" search="[('name','=','Invoice')]"/>
            <field eval="1" name="perm_read"/>
            <field eval="&quot;Account Invoice&quot;" name="name"/>
            <field eval="0" name="perm_unlink"/>
            <field eval="1" name="perm_write"/>
            <field eval="1" name="perm_create"/>
            <field name="group_id" ref="group_sale_salesman"/>
        </record>
        
        <record id="ir_model_access_accountinvoiceline0" model="ir.model.access">
            <field model="ir.model" name="model_id" search="[('name','=','Invoice line')]"/>
            <field eval="1" name="perm_read"/>
            <field eval="&quot;Account Invoice Line&quot;" name="name"/>
            <field eval="0" name="perm_unlink"/>
            <field eval="0" name="perm_write"/>
            <field eval="1" name="perm_create"/>
            <field name="group_id" ref="group_sale_salesman"/>
        </record>
        
        <record id="ir_model_access_accountinvoicetax0" model="ir.model.access">
            <field model="ir.model" name="model_id" search="[('name','=','Invoice Tax')]"/>
            <field eval="1" name="perm_read"/>
            <field eval="&quot;Account Invoice tax&quot;" name="name"/>
            <field eval="0" name="perm_unlink"/>
            <field eval="0" name="perm_write"/>
            <field eval="1" name="perm_create"/>
            <field name="group_id" ref="group_sale_salesman"/>
        </record>
        
        <record id="access_mrp_procurement" model="ir.model.access">
            <field name="name">Mrp procurement</field>
            <field model="ir.model" name="model_id" search="[('model', '=', 'mrp.procurement')]"/>
            <field name="group_id" ref="group_sale_salesman"/>
            <field eval="True" name="perm_read"/>
            <field eval="True" name="perm_write"/>
            <field eval="True" name="perm_create"/>
            <field eval="False" name="perm_unlink"/>
        </record>
        
        <!-- Sales order security -->
        <record id="access_sale_order" model="ir.model.access">
            <field name="name">Sale Order</field>
            <field model="ir.model" name="model_id" search="[('model', '=', 'sale.order')]"/>
            <field eval="True" name="perm_read"/>
            <field eval="False" name="perm_write"/>
            <field eval="False" name="perm_create"/>
            <field eval="False" name="perm_unlink"/>
        </record>
        
        <record id="access_sale_order_sale_manager" model="ir.model.access">
            <field name="name">Sale Order</field>
            <field model="ir.model" name="model_id" search="[('model', '=', 'sale.order')]"/>
            <field name="group_id" ref="group_sale_manager"/>
            <field eval="True" name="perm_read"/>
            <field eval="True" name="perm_write"/>
            <field eval="True" name="perm_create"/>
            <field eval="True" name="perm_unlink"/>
        </record>
        
        <record id="access_sale_order_salesman" model="ir.model.access">
            <field name="name">Sale Order</field>
            <field model="ir.model" name="model_id" search="[('model', '=', 'sale.order')]"/>
            <field name="group_id" ref="group_sale_salesman"/>
            <field eval="True" name="perm_read"/>
            <field eval="True" name="perm_write"/>
            <field eval="True" name="perm_create"/>
            <field eval="True" name="perm_unlink"/>
        </record>
        
        <!-- Sales order line security -->
        <record id="access_sale_order_line" model="ir.model.access">
            <field name="name">Sale Order Line</field>
            <field model="ir.model" name="model_id" search="[('model', '=', 'sale.order.line')]"/>
            <field eval="True" name="perm_read"/>
            <field eval="False" name="perm_write"/>
            <field eval="False" name="perm_create"/>
            <field eval="False" name="perm_unlink"/>
        </record>
        
        <record id="access_sale_order_line_manager" model="ir.model.access">
            <field name="name">Sale Order Line</field>
            <field model="ir.model" name="model_id" search="[('model', '=', 'sale.order.line')]"/>
            <field name="group_id" ref="group_sale_manager"/>
            <field eval="True" name="perm_read"/>
            <field eval="True" name="perm_write"/>
            <field eval="True" name="perm_create"/>
            <field eval="True" name="perm_unlink"/>
        </record>
        
        <record id="access_sale_order_line_salesman" model="ir.model.access">
            <field name="name">Sale Order Line</field>
            <field model="ir.model" name="model_id" search="[('model', '=', 'sale.order.line')]"/>
            <field name="group_id" ref="group_sale_salesman"/>
            <field eval="True" name="perm_read"/>
            <field eval="True" name="perm_write"/>
            <field eval="True" name="perm_create"/>
            <field eval="True" name="perm_unlink"/>
        </record>
        
    </data>
</terp>