[IMP] super_portal: Implement Super Portal User access

Features:
- Created a 'Super Portal User' group with extended portal access.
- Introduced 'Edit Portal Access'  for managing email and portal access.
- Restricted 'Portal View' modifications to Sales Administrators.
- Modified contact form: renamed 'Other Address' to 'Company Address,'
  ensured correct contact type.
- Implemented transaction filtering by contact in the portal
  (Sales Orders, Invoices, POs, Helpdesk).
- Established a super branch and branch hierarchy for super and sub branches.
- Recomputing prices based on billing address pricelist.

Author: prep-odoo

super_portal/__init__.py

@@ -0,0 +1,2 @@
+from . import models
+from . import controllers

super_portal/__manifest__.py

@@ -0,0 +1,20 @@
+{
+    'name': 'Super Portal User',
+    'category': 'Portal',
+    'summary': 'Portal access for multi-branch management',
+    'depends': ['contacts', 'website_sale'],
+    'data': [
+        'security/portal_security.xml',
+        'views/res_partner_views.xml',
+        'views/portal_wizard_views.xml',
+        'views/templates.xml',
+    ],
+    'assets': {
+        'web.assets_frontend': [
+            'super_portal/static/src/js/website_sale.js',
+            'super_portal/static/src/js/address_search.js'
+        ],
+    },
+    'licence': 'LGPL-3',
+    'installable': True,
+}

super_portal/controllers/__init__.py

@@ -0,0 +1,2 @@
+from . import main
+from . import portal

super_portal/controllers/main.py

@@ -0,0 +1,104 @@
+from odoo import http
+from odoo.http import request
+from odoo.addons.website_sale.controllers.main import WebsiteSale
+from werkzeug.exceptions import Forbidden
+
+class WebsiteSalePortal(WebsiteSale):
+    """
+    Extends WebsiteSale to modify checkout values and update the pricelist when billing address changes.
+    """
+
+    def checkout_values(self, order, **kw):
+        order = order or request.website.sale_get_order(force_create=True)
+        bill_partners = []
+        ship_partners = []
+
+        if not order._is_public_order():
+            Partner = order.partner_id.with_context(show_address=1).sudo()
+            commercial_partner = order.partner_id.commercial_partner_id
+            bill_partners = Partner.search([
+                '|', ("type", "in", ["invoice", "other"]), ("id", "=", commercial_partner.id),
+                ("id", "child_of", commercial_partner.ids)
+            ], order='id asc, parent_id asc') | order.partner_id
+            ship_partners = Partner.search([
+                '|', ("type", "in", ["delivery", "other"]), ("id", "=", commercial_partner.id),
+                ("id", "child_of", commercial_partner.ids)
+            ], order='id asc, parent_id asc') | order.partner_id
+
+            if commercial_partner != order.partner_id:
+                if not self._check_billing_partner_mandatory_fields(commercial_partner):
+                    bill_partners = bill_partners.filtered(lambda p: p.id != commercial_partner.id)
+                if not self._check_shipping_partner_mandatory_fields(commercial_partner):
+                    ship_partners = ship_partners.filtered(lambda p: p.id != commercial_partner.id)
+
+        return {
+            'order': order,
+            'website_sale_order': order,
+            'shippings': ship_partners,
+            'billings': bill_partners,
+            'only_services': order and order.only_services or False
+        }
+
+    @http.route('/shop/cart/update_address', type='http', auth='public', methods=['POST'], website=True, csrf=False)
+    def update_cart_address(self, partner_id, mode='billing', **kw):
+        response = super().update_cart_address(partner_id, mode, **kw)
+
+        order_sudo = request.website.sale_get_order()
+        if not order_sudo:
+            return response
+
+        partner_sudo = request.env['res.partner'].sudo().browse(int(partner_id)).exists()
+        if not partner_sudo:
+            raise Forbidden()
+
+        new_pricelist = partner_sudo.property_product_pricelist
+        if new_pricelist and new_pricelist != order_sudo.pricelist_id:
+            order_sudo.write({'pricelist_id': new_pricelist.id})
+
+        order_sudo._recompute_prices()
+        order_sudo._compute_amounts()
+        order_sudo.sudo().write({
+            'amount_total': order_sudo.amount_total,
+            'amount_tax': order_sudo.amount_tax,
+            'amount_untaxed': order_sudo.amount_untaxed
+        })
+
+        return response
+
+    @http.route(['/shop/cart/update_total'], type='json', auth='public', methods=['POST'], website=True, csrf=False)
+    def cart_update_total(self):
+        order_sudo = request.website.sale_get_order()
+        if not order_sudo:
+            return {"error": "No active order found"}
+
+        line_items = [
+            {
+                "unit_price": line.price_unit,
+                "subtotal": line.price_subtotal,
+            }
+            for line in order_sudo.order_line
+        ]
+
+        return {
+            "amount_untaxed": order_sudo.amount_untaxed,
+            "amount_tax": order_sudo.amount_tax,
+            "amount_total": order_sudo.amount_total,
+            "cart_quantity": order_sudo.cart_quantity,
+            "line_items": line_items,
+        }
+
+    @http.route(['/shop/confirm_order'], type='http', auth="public", website=True, sitemap=False)
+    def confirm_order(self, **post):
+        order = request.website.sale_get_order()
+
+        redirection = self.checkout_redirection(order) or self.checkout_check_address(order)
+        if redirection:
+            return redirection
+
+        order.order_line._compute_tax_id()
+        # request.website.sale_get_order(update_pricelist=True)
+        extra_step = request.website.viewref('website_sale.extra_info')
+        if extra_step.active:
+            return request.redirect("/shop/extra_info")
+
+        return request.redirect("/shop/payment")

super_portal/controllers/portal.py

@@ -0,0 +1,235 @@
+from collections import OrderedDict
+from markupsafe import Markup
+from operator import itemgetter
+
+from odoo import _, http
+from odoo.http import request
+from odoo.addons.portal.controllers.portal import CustomerPortal, pager as portal_pager
+from odoo.osv.expression import OR, AND
+from odoo.tools import groupby as groupbyelem
+
+
+class CustomPortal(CustomerPortal):
+    # filter based on super and sub branch
+    def _get_searchbar_filters(self):
+        partner = request.env.user.partner_id
+        filters = OrderedDict({'all': {'label': _('All'), 'domain': []}})
+
+        partner_ids = request.env['res.partner'].search([
+            ('id', 'child_of', partner.id),
+            ('is_company', '=', True)
+        ])
+
+        for p in partner_ids:
+            filters[str(p.id)] = {
+                'label': p.name,
+                'domain': [('partner_id', '=', p.id)],
+            }
+        return filters
+
+    # invoices & bills
+    def _get_account_searchbar_filters(self):
+        branch_filters = self._get_searchbar_filters()
+        filters = OrderedDict({
+            'all': {'label': _('All'), 'domain': []},
+            'invoices': {'label': _('Invoices'), 'domain': [('move_type', 'in', ('out_invoice', 'out_refund', 'out_receipt'))]},
+            'bills': {'label': _('Bills'), 'domain': [('move_type', 'in', ('in_invoice', 'in_refund', 'in_receipt'))]},
+        })
+        filters.update(branch_filters)
+
+        return filters
+
+    # your orders
+    def _get_sale_searchbar_filters(self):
+        return self._get_searchbar_filters()
+
+    def _prepare_sale_portal_rendering_values(
+        self, page=1, date_begin=None, date_end=None, sortby=None, filterby=None, quotation_page=False, **kwargs
+    ):
+        SaleOrder = request.env['sale.order']
+
+        if not sortby:
+            sortby = 'date'
+
+        partner = request.env.user.partner_id
+        values = self._prepare_portal_layout_values()
+
+        if quotation_page:
+            url = "/my/quotes"
+            domain = self._prepare_quotations_domain(partner)
+        else:
+            url = "/my/orders"
+            domain = self._prepare_orders_domain(partner)
+
+        searchbar_sortings = self._get_sale_searchbar_sortings()
+        searchbar_filters = self._get_sale_searchbar_filters()
+        if not filterby:
+            filterby = 'all'
+        domain += searchbar_filters[filterby]['domain']
+
+        sort_order = searchbar_sortings[sortby]['order']
+
+        if date_begin and date_end:
+            domain += [('create_date', '>', date_begin), ('create_date', '<=', date_end)]
+
+        pager_values = portal_pager(
+            url=url,
+            total=SaleOrder.search_count(domain),
+            page=page,
+            step=self._items_per_page,
+            url_args={'date_begin': date_begin, 'date_end': date_end, 'sortby': sortby, 'filterby': filterby},
+        )
+        orders = SaleOrder.search(domain, order=sort_order, limit=self._items_per_page, offset=pager_values['offset'])
+
+        values.update({
+            'date': date_begin,
+            'quotations': orders.sudo() if quotation_page else SaleOrder,
+            'orders': orders.sudo() if not quotation_page else SaleOrder,
+            'page_name': 'quote' if quotation_page else 'order',
+            'pager': pager_values,
+            'default_url': url,
+            'searchbar_sortings': searchbar_sortings,
+            'sortby': sortby,
+            'searchbar_filters': searchbar_filters,
+            'filterby': filterby
+        })
+
+        return values
+
+    # our orders
+    @http.route(['/my/purchase', '/my/purchase/page/<int:page>'], type='http', auth="user", website=True)
+    def portal_my_purchase_orders(
+        self, page=1, date_begin=None, date_end=None, sortby=None, filterby=None, **kw
+    ):
+        return self._render_portal(
+            "purchase.portal_my_purchase_orders",
+            page, date_begin, date_end, sortby, filterby,
+            [],
+            self._get_searchbar_filters(),
+            'all',
+            "/my/purchase",
+            'my_purchases_history',
+            'purchase',
+            'orders'
+        )
+    
+    def _prepare_my_tickets_values(
+        self, page=1, date_begin=None, date_end=None, sortby=None, filterby='all', search=None, groupby='none', search_in='content'
+    ):
+        values = self._prepare_portal_layout_values()
+        domain = self._prepare_helpdesk_tickets_domain()
+
+        searchbar_sortings = {
+            'date': {'label': _('Newest'), 'order': 'create_date desc'},
+            'reference': {'label': _('Reference'), 'order': 'id desc'},
+            'name': {'label': _('Subject'), 'order': 'name'},
+            'user': {'label': _('Assigned to'), 'order': 'user_id'},
+            'stage': {'label': _('Stage'), 'order': 'stage_id'},
+            'update': {'label': _('Last Stage Update'), 'order': 'date_last_stage_update desc'},
+        }
+        searchbar_filters = self._get_searchbar_filters()
+        searchbar_inputs = {
+            'content': {'input': 'content', 'label': Markup(_('Search <span class="nolabel"> (in Content)</span>'))},
+            'ticket_ref': {'input': 'ticket_ref', 'label': _('Search in Reference')},
+            'message': {'input': 'message', 'label': _('Search in Messages')},
+            'user': {'input': 'user', 'label': _('Search in Assigned to')},
+            'status': {'input': 'status', 'label': _('Search in Stage')},
+        }
+        searchbar_groupby = {
+            'none': {'input': 'none', 'label': _('None')},
+            'stage': {'input': 'stage_id', 'label': _('Stage')},
+            'user': {'input': 'user_id', 'label': _('Assigned to')},
+        }
+
+        # default sort by value
+        if not sortby:
+            sortby = 'date'
+        order = searchbar_sortings[sortby]['order']
+        if groupby in searchbar_groupby and groupby != 'none':
+            order = f'{searchbar_groupby[groupby]["input"]}, {order}'
+
+        if filterby in ['last_message_sup', 'last_message_cust']:
+            discussion_subtype_id = request.env.ref('mail.mt_comment').id
+            messages = request.env['mail.message'].search_read([('model', '=', 'helpdesk.ticket'), ('subtype_id', '=', discussion_subtype_id)], fields=['res_id', 'author_id'], order='date desc')
+            last_author_dict = {}
+            for message in messages:
+                if message['res_id'] not in last_author_dict:
+                    last_author_dict[message['res_id']] = message['author_id'][0]
+
+            ticket_author_list = request.env['helpdesk.ticket'].search_read(fields=['id', 'partner_id'])
+            ticket_author_dict = dict([(ticket_author['id'], ticket_author['partner_id'][0] if ticket_author['partner_id'] else False) for ticket_author in ticket_author_list])
+
+            last_message_cust = []
+            last_message_sup = []
+            ticket_ids = set(last_author_dict.keys()) & set(ticket_author_dict.keys())
+            for ticket_id in ticket_ids:
+                if last_author_dict[ticket_id] == ticket_author_dict[ticket_id]:
+                    last_message_cust.append(ticket_id)
+                else:
+                    last_message_sup.append(ticket_id)
+
+            if filterby == 'last_message_cust':
+                domain = AND([domain, [('id', 'in', last_message_cust)]])
+            else:
+                domain = AND([domain, [('id', 'in', last_message_sup)]])
+
+        else:
+            domain = AND([domain, searchbar_filters[filterby]['domain']])
+
+        if date_begin and date_end:
+            domain = AND([domain, [('create_date', '>', date_begin), ('create_date', '<=', date_end)]])
+
+        # search
+        if search and search_in:
+            search_domain = []
+            if search_in == 'ticket_ref':
+                search_domain = OR([search_domain, [('ticket_ref', 'ilike', search)]])
+            if search_in == 'content':
+                search_domain = OR([search_domain, ['|', ('name', 'ilike', search), ('description', 'ilike', search)]])
+            if search_in == 'user':
+                assignees = request.env['res.users'].sudo()._search([('name', 'ilike', search)])
+                search_domain = OR([search_domain, [('user_id', 'in', assignees)]])
+            if search_in == 'message':
+                discussion_subtype_id = request.env.ref('mail.mt_comment').id
+                search_domain = OR([search_domain, [('message_ids.body', 'ilike', search), ('message_ids.subtype_id', '=', discussion_subtype_id)]])
+            if search_in == 'status':
+                search_domain = OR([search_domain, [('stage_id', 'ilike', search)]])
+            domain = AND([domain, search_domain])
+
+        # pager
+        tickets_count = request.env['helpdesk.ticket'].search_count(domain)
+        pager = portal_pager(
+            url="/my/tickets",
+            url_args={'date_begin': date_begin, 'date_end': date_end, 'sortby': sortby, 'search_in': search_in, 'search': search, 'groupby': groupby, 'filterby': filterby},
+            total=tickets_count,
+            page=page,
+            step=self._items_per_page
+        )
+
+        tickets = request.env['helpdesk.ticket'].search(domain, order=order, limit=self._items_per_page, offset=pager['offset'])
+        request.session['my_tickets_history'] = tickets.ids[:100]
+
+        if not tickets:
+            grouped_tickets = []
+        elif groupby != 'none':
+            grouped_tickets = [request.env['helpdesk.ticket'].concat(*g) for k, g in groupbyelem(tickets, itemgetter(searchbar_groupby[groupby]['input']))]
+        else:
+            grouped_tickets = [tickets]
+
+        values.update({
+            'date': date_begin,
+            'grouped_tickets': grouped_tickets,
+            'page_name': 'ticket',
+            'default_url': '/my/tickets',
+            'pager': pager,
+            'searchbar_sortings': searchbar_sortings,
+            'searchbar_filters': searchbar_filters,
+            'searchbar_inputs': searchbar_inputs,
+            'searchbar_groupby': searchbar_groupby,
+            'sortby': sortby,
+            'groupby': groupby,
+            'search_in': search_in,
+            'search': search,
+            'filterby': filterby,
+        })
+        return values

super_portal/models/__init__.py

@@ -0,0 +1,2 @@
+from . import res_partner
+from . import portal_wizard

super_portal/models/portal_wizard.py

@@ -0,0 +1,18 @@
+from odoo import api, fields, models
+
+
+class PortalWizardUser(models.TransientModel):
+    _inherit = 'portal.wizard.user'
+
+    can_edit = fields.Boolean(compute='_compute_can_edit', string="Can Edit")
+
+    @api.depends('user_id', 'user_id.groups_id')
+    def _compute_can_edit(self):
+        """Compute if the user can edit based on access rights"""
+
+        for portal_wizard_user in self:
+            user = portal_wizard_user.user_id
+            if user.has_group('super_portal.group_edit_portal_access'):
+                portal_wizard_user.can_edit = True
+            else:
+                portal_wizard_user.can_edit = False

super_portal/models/res_partner.py

@@ -0,0 +1,24 @@
+from odoo import api, fields, models
+
+
+class ResPartner(models.Model):
+    _inherit = 'res.partner'
+
+    type = fields.Selection([
+        ('contact', "Contact"),
+        ('invoice', "Invoice Address"),
+        ('delivery', "Delivery Address"),
+        ('other', "Company Address")
+    ], string="Address Type", default='contact')
+    
+    res_partner_id = fields.Many2one(
+        'res.partner',
+        string="Related Company",
+        domain="[('is_company', '=', True)]"
+    )
+
+    @api.model
+    def create(self, vals):
+        if 'parent_id' in vals and vals['parent_id']:
+            vals['is_company'] = True
+        return super(ResPartner, self).create(vals)

super_portal/security/portal_security.xml

@@ -0,0 +1,17 @@
+<odoo>
+    <record id="group_edit_portal_access" model="res.groups">
+        <field name="name">Edit Portal Access</field>
+        <field name="category_id" ref="base.module_category_usability"/>
+    </record>
+
+    <!-- Restrict Editing of Portal View -->
+    <record id="edit_portal_access_rule" model="ir.rule">
+        <field name="name">Restrict Portal Access Editing</field>
+        <field name="model_id" ref="portal.model_portal_wizard"/>
+        <field name="groups" eval="[(4, ref('super_portal.group_edit_portal_access'))]"/>
+        <field name="perm_read" eval="1"/>
+        <field name="perm_write" eval="1"/>
+        <field name="perm_create" eval="0"/>
+        <field name="perm_unlink" eval="0"/>
+    </record>
+</odoo>

super_portal/static/src/js/address_search.js

@@ -0,0 +1,33 @@
+/** @odoo-module **/
+
+import publicWidget from "@web/legacy/js/public/public_widget";
+
+function filterAddresses(inputElement, sectionClass) {
+    let searchTerm = inputElement.value.toLowerCase();
+    let addressTiles = document.querySelectorAll(`.${sectionClass} .one_kanban`);
+
+    addressTiles.forEach((tile) => {
+        let textContent = tile.innerText.toLowerCase();
+        let isSelected = tile.querySelector('.card')?.classList.contains('bg-primary');
+
+        tile.style.display = textContent.includes(searchTerm) || isSelected ? 'block' : 'none';
+    });
+}
+window.filterAddresses = filterAddresses;
+
+publicWidget.registry.AddressSearch = publicWidget.Widget.extend({
+    selector: '.o_billing_address_search, .o_shipping_address_search',
+
+    events: {
+        'keyup .o_billing_address_search': '_onKeyUpBilling',
+        'keyup .o_shipping_address_search': '_onKeyUpShipping',
+    },
+
+    _onKeyUpBilling: function (ev) {
+        filterAddresses(ev.currentTarget, 'all_billing');
+    },
+
+    _onKeyUpShipping: function (ev) {
+        filterAddresses(ev.currentTarget, 'all_shipping');
+    },
+});

super_portal/static/src/js/website_sale.js

@@ -0,0 +1,53 @@
+/** @odoo-module **/
+
+import publicWidget from "@web/legacy/js/public/public_widget";
+import { jsonrpc } from "@web/core/network/rpc_service";
+
+publicWidget.registry.websiteSaleCart = publicWidget.registry.websiteSaleCart.extend({
+    events: Object.assign({}, publicWidget.registry.websiteSaleCart.prototype.events, {
+        'click .js_change_billing': '_onClickChangeBilling',
+    }),
+
+    _onClickChangeBilling: function (ev) {
+        var self = this;
+        var rowAddrClass = "all_billing";
+        var cardClass = "js_change_billing";
+
+        var $old = $(`.${rowAddrClass}`).find('.card.border.border-primary');
+        $old.find('.btn-addr').toggle();
+        $old.addClass(cardClass);
+        $old.removeClass('bg-primary border border-primary');
+
+        var $new = $(ev.currentTarget).parent('div.one_kanban').find('.card');
+        $new.find('.btn-addr').toggle();
+        $new.removeClass(cardClass);
+        $new.addClass('bg-primary border border-primary');
+
+        var $form = $(ev.currentTarget).parent('div.one_kanban').find('form.d-none');
+        $.post($form.attr('action'), $form.serialize() + '&xhr=1').done(function () {
+            self._updateCartTotals();
+        });
+    },
+
+    _updateCartTotals: function () {
+        jsonrpc("/shop/cart/update_total", {})
+            .then((data) => {
+                if (!data.cart_quantity) {
+                    return window.location.reload();
+                }
+                $("#order_total_untaxed .oe_currency_value").html(data.amount_untaxed.toFixed(2));
+                $("#order_total_taxes .oe_currency_value").html(data.amount_tax.toFixed(2));
+                $("#order_total .oe_currency_value").html(data.amount_total.toFixed(2));
+                $("#amount_total_summary .oe_currency_value").html(data.amount_total.toFixed(2));
+
+                let $cartRows = $("#cart_products tr");
+                data.line_items.forEach((line, index) => {
+                    let $row = $cartRows.eq(index);
+                    $row.find(".oe_currency_value").text(line.subtotal.toFixed(2));
+                });
+            })
+            .catch((err) => {
+                console.error("Error updating cart totals:", err);
+            });
+    }
+});

super_portal/views/portal_wizard_views.xml

@@ -0,0 +1,27 @@
+<odoo>
+    <record id="wizard_view_inherit" model="ir.ui.view">
+        <field name="name">portal.wizard.view.inherit</field>
+        <field name="model">portal.wizard</field>
+        <field name="inherit_id" ref="portal.wizard_view"/>
+        <field name="arch" type="xml">
+            <xpath expr="//field[@name='is_internal']" position="after">
+                <field name="can_edit" column_invisible="True"/>
+            </xpath>
+            <!-- Restrict Email Editing -->
+            <xpath expr="//field[@name='user_ids']/tree/field[@name='email']" position="attributes">
+                <attribute name="readonly">not can_edit</attribute>
+            </xpath>
+            
+            <!-- Hide "Grant Access," "Revoke Access," and "Re-Invite" Buttons for Unauthorized Users -->
+            <xpath expr="//button[@name='action_grant_access']" position="attributes">
+                <attribute name="groups">super_portal.group_edit_portal_access</attribute>
+            </xpath>
+            <xpath expr="//button[@name='action_revoke_access']" position="attributes">
+                <attribute name="groups">super_portal.group_edit_portal_access</attribute>
+            </xpath>
+            <xpath expr="//button[@name='action_invite_again']" position="attributes">
+                <attribute name="groups">super_portal.group_edit_portal_access</attribute>
+            </xpath>
+        </field>
+    </record>
+</odoo>

super_portal/views/res_partner_views.xml

@@ -0,0 +1,22 @@
+<odoo>
+    <record id="view_partner_form" model="ir.ui.view">
+        <field name="name">res.partner.form.view</field>
+        <field name="model">res.partner</field>
+        <field name="inherit_id" ref="base.view_partner_form"/>
+        <field name="arch" type="xml">
+            <!-- Ensure Parent Company field is visible & editable -->
+            <xpath expr="//field[@name='parent_id']" position="attributes">
+                <attribute name="invisible">not is_company</attribute>
+                <attribute name="readonly">not is_company</attribute>
+            </xpath>
+
+            <!-- Ensure Address Type (type) is editable and Text(Address) invisible -->
+            <xpath expr="//field[@name='type']" position="attributes">
+                <attribute name="invisible">False</attribute>
+            </xpath>
+            <xpath expr="//b[contains(text(), 'Address')]" position="attributes">
+                <attribute name="invisible">True</attribute>
+            </xpath>
+        </field>
+    </record>
+</odoo>

super_portal/views/templates.xml

@@ -0,0 +1,24 @@
+<?xml version="1.0" encoding="utf-8"?>
+<odoo>
+    <template id="portal_checkout_override" inherit_id="website_sale.checkout">
+        <xpath expr="//h4[contains(text(), 'Billing')]" position="after">
+            <div class="row mb-2">
+                <div class="col-lg-12">
+                    <input type="text" class="form-control o_billing_address_search"
+                           placeholder="Search Billing Address..."
+                           onkeyup="filterAddresses(this, 'all_billing')"/>
+                </div>
+            </div>
+        </xpath>
+
+        <xpath expr="//h4[contains(text(), 'Shipping')]" position="after">
+            <div class="row mb-2">
+                <div class="col-lg-12">
+                    <input type="text" class="form-control o_shipping_address_search"
+                           placeholder="Search Shipping Address..."
+                           onkeyup="filterAddresses(this, 'all_shipping')"/>
+                </div>
+            </div>
+        </xpath>
+    </template>
+</odoo>