[ADD] supplier_portal: allow suppliers to upload invoices from portal

Introduce a supplier-facing portal feature to streamline invoice submission.

Features:
- Allow authenticated users in the `Supplier User` group to upload invoices
via website form.
- Security:
  - Access restricted to users in the `Supplier User` group.
  - CSRF token protection for form submissions.
- Company selection:
  - Lists companies linked to the user.
  - Allows user to select the target company for invoice submission.
- File handling:
  - Uploaded files are stored as attachments.
  - Vendor bill is associated with a purchase journal from the selected company.
- Confirmation message shown upon successful submission.
- Adds a new security group: `Supplier User` and website menu item
Upload Invoice, visible only to users in the `Supplier User` group.
Benefits:
- Enables suppliers to directly submit invoice files from the portal.
- Improves workflow efficiency and reduces manual data entry for internal teams.

Author: kuay-odoo

supplier_portal/__init__.py

@@ -0,0 +1 @@
+from . import controllers

supplier_portal/__manifest__.py

@@ -0,0 +1,17 @@
+{
+    "name": "Supplier Portal",
+    "description": """
+  Help supplier to provide their Invoice 
+    """,
+    "category": "Vendor",
+    "version": "1.0",
+    "depends": ["account", "website"],
+    "data": [
+        "security/supplier_group.xml",
+        "views/supplier_template.xml",
+        "views/website_menu.xml",
+    ],
+    "auto-install": True,
+    "application": False,
+    "license": "LGPL-3",
+}

supplier_portal/controllers/__init__.py

@@ -0,0 +1 @@
+from . import main

supplier_portal/controllers/main.py

@@ -0,0 +1,86 @@
+from odoo import http
+from odoo.http import request
+import base64
+from odoo.exceptions import UserError
+
+
+class SupplierPortal(http.Controller):
+    @http.route(["/upload-invoice"], type="http", auth="user", website=True)
+    def supplier_upload_page(self, **kwargs):
+        user = request.env.user
+        if not user.has_group("supplier_portal.group_supplier_portal"):
+            raise UserError("Only Supplier Group Users allowed!")
+
+        companies = (
+            request.env["res.company"].sudo().search([("user_ids", "in", [user.id])])
+        )
+
+        return request.render(
+            "supplier_portal.upload_invoice_template",
+            {
+                "companies": companies,
+            },
+        )
+
+    @http.route(
+        ["/submit-invoice"],
+        type="http",
+        auth="user",
+        methods=["POST"],
+        csrf=True,
+        website=True,
+    )
+    def submit_invoice(self, **post):
+        pdf_file = post.get("pdf_file")
+        xml_file = post.get("xml_file")
+        company_id = int(post.get("company_id"))
+
+        pdf_content = pdf_file.read() if pdf_file else b""
+        xml_content = xml_file.read() if xml_file else b""
+
+        journal = (
+            request.env["account.journal"]
+            .sudo()
+            .search(
+                [("type", "=", "purchase"), ("company_id", "=", company_id)], limit=1
+            )
+        )
+
+        if not journal:
+            company = request.env["res.company"].sudo().browse(company_id)
+            raise UserError(f"No journal found for company: {company.name}")
+
+        move_vals = {
+            "move_type": "in_invoice",
+            "partner_id": request.env.user.id,
+            "state": "draft",
+            "company_id": company_id,
+            "journal_id": journal.id,
+        }
+
+        move = request.env["account.move"].sudo().create(move_vals)
+
+        if pdf_content:
+            request.env["ir.attachment"].sudo().create(
+                {
+                    "name": pdf_file.filename,
+                    "type": "binary",
+                    "datas": base64.b64encode(pdf_content),
+                    "res_model": "account.move",
+                    "res_id": move.id,
+                    "mimetype": "application/pdf",
+                }
+            )
+        if xml_content:
+            request.env["ir.attachment"].sudo().create(
+                {
+                    "name": xml_file.filename,
+                    "type": "binary",
+                    "datas": base64.b64encode(xml_content),
+                    "res_model": "account.move",
+                    "res_id": move.id,
+                    "mimetype": "text/xml",
+                }
+            )
+
+        return request.redirect("/upload-invoice?success=1")

supplier_portal/security/supplier_group.xml

@@ -0,0 +1,9 @@
+<?xml version="1.0" encoding="utf-8"?>
+<odoo>
+    <data noupdate="0">
+        <record id="group_supplier_portal" model="res.groups">
+            <field name="name">Supplier User</field>
+            <field name="category_id" ref="base.module_category_vendor" />
+        </record>
+    </data>
+</odoo>

supplier_portal/views/supplier_template.xml

@@ -0,0 +1,39 @@
+<?xml version="1.0" encoding="utf-8"?>
+<odoo>
+    <template id="upload_invoice_template">
+        <t t-call="website.layout">
+            <div class="container mt-5">
+                <h2>Upload Invoice</h2>
+                <t t-if="request.params.get('success')">
+                    <div class="alert alert-success">Invoice submitted successfully!</div>
+                </t>
+                <form t-attf-action="/submit-invoice" method="POST" enctype="multipart/form-data">
+                    <input type="hidden" name="csrf_token" t-att-value="request.csrf_token()" />
+
+                    <div class="form-group">
+                        <label>Select Company</label>
+                        <select name="company_id" class="form-control" required="1">
+                            <t t-foreach="companies" t-as="company">
+                                <option t-att-value="company.id">
+                                    <t t-esc="company.name" />
+                                </option>
+                            </t>
+                        </select>
+                    </div>
+
+                    <div class="form-group">
+                        <label>Upload PDF</label>
+                        <input type="file" name="pdf_file" accept=".pdf" class="form-control"
+                            required="1" />
+                    </div>
+                    <div class="form-group">
+                        <label>Upload XML</label>
+                        <input type="file" name="xml_file" accept=".xml" class="form-control" required="1"/>
+                    </div>
+
+                    <button type="submit" class="btn btn-primary mt-3">Submit Invoice</button>
+                </form>
+            </div>
+        </t>
+    </template>
+</odoo>

supplier_portal/views/website_menu.xml

@@ -0,0 +1,12 @@
+<?xml version="1.0" encoding="UTF-8"?>
+<odoo>
+    <data noupdate="0">
+        <record id="menu_upload_invoice" model="website.menu">
+            <field name="name">Upload Invoice</field>
+            <field name="url">/upload-invoice</field>
+            <field name="parent_id" ref="website.main_menu" />
+            <field name="sequence">50</field>
+            <field name="group_ids" eval="[(4, ref('supplier_portal.group_supplier_portal'))]" />
+        </record>
+    </data>
+</odoo>