Product Readonly Security

This module introduces a dedicated permission called 'Product edition' (found in the Usability section of the user rights). It is meant to separate the right to see products from the right to change them.

• Users who do NOT have the 'Product edition' permission can only read products and product variants. Any attempt to create, write or delete a product or variant is blocked with an access error.
• Users who DO have the permission (the administrator is added automatically when the module is installed) can create, edit and delete products and variants as usual.
• The restriction is applied on both product.template (the general product form) and product.product (the individual variants), so it covers the whole product area.
• The check is skipped for the superuser and during automated tests unless a specific test flag is set, so normal system operations are not affected.

There are no new menus, buttons or reports: the module only changes who is allowed to modify existing product records. To grant the right, an administrator simply adds the user to the 'Product edition' group in the user settings.