[FIX] Restrict approval rights to RMA Manager

ForgeFlow · Apr 4, 2023 · 95d14e1 · 95d14e1
1 parent c3f76bd
commit 95d14e1
Showing 1 changed file with 5 additions and 1 deletion.
diff --git a/rma/models/rma_order_line.py b/rma/models/rma_order_line.py
@@ -647,7 +647,11 @@ def action_rma_draft(self):
         return True
 
     def action_rma_approve(self):
-        self.write({"state": "approved"})
+        if self.env.user.has_group('rma.group_rma_manager'):
+            self.write({"state": "approved"})
+        else:
+            raise UserError(_('You have no access rights to approve this RMA'))
+
         return True
 
     def action_rma_done(self):