[IMP] super_portal: Implement Super Portal User access

Features:
- Created a 'Super Portal User' group with extended portal access.
- Introduced 'Edit Portal Access'  for managing email and portal access.
- Restricted 'Portal View' modifications to Sales Administrators.
- Modified contact form: renamed 'Other Address' to 'Company Address,'
  ensured correct contact type.
- Implemented transaction filtering by contact in the portal
  (Sales Orders, Invoices, POs, Helpdesk).
- Established a super branch and branch hierarchy for super and sub branches.
- Recomputing prices based on billing address pricelist.

Author: prep-odoo

super_portal/__init__.py

@@ -0,0 +1,2 @@
+from . import models
+from . import controllers

super_portal/__manifest__.py

@@ -0,0 +1,20 @@
+{
+    'name': 'Super Portal User',
+    'category': 'Portal',
+    'summary': 'Portal access for multi-branch management',
+    'depends': ['contacts', 'website_sale'],
+    'data': [
+        'security/portal_security.xml',
+        'views/res_partner_views.xml',
+        'views/portal_wizard_views.xml',
+        'views/templates.xml',
+    ],
+    'assets': {
+        'web.assets_frontend': [
+            'super_portal/static/src/js/website_sale.js',
+            'super_portal/static/src/js/address_search.js'
+        ],
+    },
+    'licence': 'LGPL-3',
+    'installable': True,
+}

super_portal/controllers/__init__.py

@@ -0,0 +1,2 @@
+from . import main
+from . import portal

super_portal/controllers/main.py

@@ -0,0 +1,104 @@
+from odoo import http
+from odoo.http import request
+from odoo.addons.website_sale.controllers.main import WebsiteSale
+from werkzeug.exceptions import Forbidden
+
+class WebsiteSalePortal(WebsiteSale):
+    """
+    Extends WebsiteSale to modify checkout values and update the pricelist when billing address changes.
+    """
+
+    def checkout_values(self, order, **kw):
+        order = order or request.website.sale_get_order(force_create=True)
+        bill_partners = []
+        ship_partners = []
+
+        if not order._is_public_order():
+            Partner = order.partner_id.with_context(show_address=1).sudo()
+            commercial_partner = order.partner_id.commercial_partner_id
+            bill_partners = Partner.search([
+                '|', ("type", "in", ["invoice", "other"]), ("id", "=", commercial_partner.id),
+                ("id", "child_of", commercial_partner.ids)
+            ], order='id asc, parent_id asc') | order.partner_id
+            ship_partners = Partner.search([
+                '|', ("type", "in", ["delivery", "other"]), ("id", "=", commercial_partner.id),
+                ("id", "child_of", commercial_partner.ids)
+            ], order='id asc, parent_id asc') | order.partner_id
+
+            if commercial_partner != order.partner_id:
+                if not self._check_billing_partner_mandatory_fields(commercial_partner):
+                    bill_partners = bill_partners.filtered(lambda p: p.id != commercial_partner.id)
+                if not self._check_shipping_partner_mandatory_fields(commercial_partner):
+                    ship_partners = ship_partners.filtered(lambda p: p.id != commercial_partner.id)
+
+        return {
+            'order': order,
+            'website_sale_order': order,
+            'shippings': ship_partners,
+            'billings': bill_partners,
+            'only_services': order and order.only_services or False
+        }
+
+    @http.route('/shop/cart/update_address', type='http', auth='public', methods=['POST'], website=True, csrf=False)
+    def update_cart_address(self, partner_id, mode='billing', **kw):
+        response = super().update_cart_address(partner_id, mode, **kw)
+
+        order_sudo = request.website.sale_get_order()
+        if not order_sudo:
+            return response
+
+        partner_sudo = request.env['res.partner'].sudo().browse(int(partner_id)).exists()
+        if not partner_sudo:
+            raise Forbidden()
+
+        new_pricelist = partner_sudo.property_product_pricelist
+        if new_pricelist and new_pricelist != order_sudo.pricelist_id:
+            order_sudo.write({'pricelist_id': new_pricelist.id})
+
+        order_sudo._recompute_prices()
+        order_sudo._compute_amounts()
+        order_sudo.sudo().write({
+            'amount_total': order_sudo.amount_total,
+            'amount_tax': order_sudo.amount_tax,
+            'amount_untaxed': order_sudo.amount_untaxed
+        })
+
+        return response
+
+    @http.route(['/shop/cart/update_total'], type='json', auth='public', methods=['POST'], website=True, csrf=False)
+    def cart_update_total(self):
+        order_sudo = request.website.sale_get_order()
+        if not order_sudo:
+            return {"error": "No active order found"}
+
+        line_items = [
+            {
+                "unit_price": line.price_unit,
+                "subtotal": line.price_subtotal,
+            }
+            for line in order_sudo.order_line
+        ]
+
+        return {
+            "amount_untaxed": order_sudo.amount_untaxed,
+            "amount_tax": order_sudo.amount_tax,
+            "amount_total": order_sudo.amount_total,
+            "cart_quantity": order_sudo.cart_quantity,
+            "line_items": line_items,
+        }
+
+    @http.route(['/shop/confirm_order'], type='http', auth="public", website=True, sitemap=False)
+    def confirm_order(self, **post):
+        order = request.website.sale_get_order()
+
+        redirection = self.checkout_redirection(order) or self.checkout_check_address(order)
+        if redirection:
+            return redirection
+
+        order.order_line._compute_tax_id()
+        # request.website.sale_get_order(update_pricelist=True)
+        extra_step = request.website.viewref('website_sale.extra_info')
+        if extra_step.active:
+            return request.redirect("/shop/extra_info")
+
+        return request.redirect("/shop/payment")

super_portal/controllers/portal.py

@@ -0,0 +1,235 @@
+from collections import OrderedDict
+from markupsafe import Markup
+from operator import itemgetter
+
+from odoo import _, http
+from odoo.http import request
+from odoo.addons.portal.controllers.portal import CustomerPortal, pager as portal_pager
+from odoo.osv.expression import OR, AND
+from odoo.tools import groupby as groupbyelem
+
+
+class CustomPortal(CustomerPortal):
+    # filter based on super and sub branch
+    def _get_searchbar_filters(self):
+        partner = request.env.user.partner_id
+        filters = OrderedDict({'all': {'label': _('All'), 'domain': []}})
+
+        partner_ids = request.env['res.partner'].search([
+            ('id', 'child_of', partner.id),
+            ('is_company', '=', True)
+        ])
+
+        for p in partner_ids:
+            filters[str(p.id)] = {
+                'label': p.name,
+                'domain': [('partner_id', '=', p.id)],
+            }
+        return filters
+
+    # invoices & bills
+    def _get_account_searchbar_filters(self):
+        branch_filters = self._get_searchbar_filters()
+        filters = OrderedDict({
+            'all': {'label': _('All'), 'domain': []},
+            'invoices': {'label': _('Invoices'), 'domain': [('move_type', 'in', ('out_invoice', 'out_refund', 'out_receipt'))]},
+            'bills': {'label': _('Bills'), 'domain': [('move_type', 'in', ('in_invoice', 'in_refund', 'in_receipt'))]},
+        })
+        filters.update(branch_filters)
+
+        return filters
+
+    # your orders
+    def _get_sale_searchbar_filters(self):
+        return self._get_searchbar_filters()
+
+    def _prepare_sale_portal_rendering_values(
+        self, page=1, date_begin=None, date_end=None, sortby=None, filterby=None, quotation_page=False, **kwargs
+    ):
+        SaleOrder = request.env['sale.order']
+
+        if not sortby:
+            sortby = 'date'
+
+        partner = request.env.user.partner_id
+        values = self._prepare_portal_layout_values()
+
+        if quotation_page:
+            url = "/my/quotes"
+            domain = self._prepare_quotations_domain(partner)
+        else:
+            url = "/my/orders"
+            domain = self._prepare_orders_domain(partner)
+
+        searchbar_sortings = self._get_sale_searchbar_sortings()
+        searchbar_filters = self._get_sale_searchbar_filters()
+        if not filterby:
+            filterby = 'all'
+        domain += searchbar_filters[filterby]['domain']
+
+        sort_order = searchbar_sortings[sortby]['order']
+
+        if date_begin and date_end:
+            domain += [('create_date', '>', date_begin), ('create_date', '<=', date_end)]
+
+        pager_values = portal_pager(
+            url=url,
+            total=SaleOrder.search_count(domain),
+            page=page,
+            step=self._items_per_page,
+            url_args={'date_begin': date_begin, 'date_end': date_end, 'sortby': sortby, 'filterby': filterby},
+        )
+        orders = SaleOrder.search(domain, order=sort_order, limit=self._items_per_page, offset=pager_values['offset'])
+
+        values.update({
+            'date': date_begin,
+            'quotations': orders.sudo() if quotation_page else SaleOrder,
+            'orders': orders.sudo() if not quotation_page else SaleOrder,
+            'page_name': 'quote' if quotation_page else 'order',
+            'pager': pager_values,
+            'default_url': url,
+            'searchbar_sortings': searchbar_sortings,
+            'sortby': sortby,
+            'searchbar_filters': searchbar_filters,
+            'filterby': filterby
+        })
+
+        return values
+
+    # our orders
+    @http.route(['/my/purchase', '/my/purchase/page/<int:page>'], type='http', auth="user", website=True)
+    def portal_my_purchase_orders(
+        self, page=1, date_begin=None, date_end=None, sortby=None, filterby=None, **kw
+    ):
+        return self._render_portal(
+            "purchase.portal_my_purchase_orders",
+            page, date_begin, date_end, sortby, filterby,
+            [],
+            self._get_searchbar_filters(),
+            'all',
+            "/my/purchase",
+            'my_purchases_history',
+            'purchase',
+            'orders'
+        )
+    
+    def _prepare_my_tickets_values(
+        self, page=1, date_begin=None, date_end=None, sortby=None, filterby='all', search=None, groupby='none', search_in='content'
+    ):
+        values = self._prepare_portal_layout_values()
+        domain = self._prepare_helpdesk_tickets_domain()
+
+        searchbar_sortings = {
+            'date': {'label': _('Newest'), 'order': 'create_date desc'},
+            'reference': {'label': _('Reference'), 'order': 'id desc'},
+            'name': {'label': _('Subject'), 'order': 'name'},
+            'user': {'label': _('Assigned to'), 'order': 'user_id'},
+            'stage': {'label': _('Stage'), 'order': 'stage_id'},
+            'update': {'label': _('Last Stage Update'), 'order': 'date_last_stage_update desc'},
+        }
+        searchbar_filters = self._get_searchbar_filters()
+        searchbar_inputs = {
+            'content': {'input': 'content', 'label': Markup(_('Search <span class="nolabel"> (in Content)</span>'))},
+            'ticket_ref': {'input': 'ticket_ref', 'label': _('Search in Reference')},
+            'message': {'input': 'message', 'label': _('Search in Messages')},
+            'user': {'input': 'user', 'label': _('Search in Assigned to')},
+            'status': {'input': 'status', 'label': _('Search in Stage')},
+        }
+        searchbar_groupby = {
+            'none': {'input': 'none', 'label': _('None')},
+            'stage': {'input': 'stage_id', 'label': _('Stage')},
+            'user': {'input': 'user_id', 'label': _('Assigned to')},
+        }
+
+        # default sort by value
+        if not sortby:
+            sortby = 'date'
+        order = searchbar_sortings[sortby]['order']
+        if groupby in searchbar_groupby and groupby != 'none':
+            order = f'{searchbar_groupby[groupby]["input"]}, {order}'
+
+        if filterby in ['last_message_sup', 'last_message_cust']:
+            discussion_subtype_id = request.env.ref('mail.mt_comment').id
+            messages = request.env['mail.message'].search_read([('model', '=', 'helpdesk.ticket'), ('subtype_id', '=', discussion_subtype_id)], fields=['res_id', 'author_id'], order='date desc')
+            last_author_dict = {}
+            for message in messages:
+                if message['res_id'] not in last_author_dict:
+                    last_author_dict[message['res_id']] = message['author_id'][0]
+
+            ticket_author_list = request.env['helpdesk.ticket'].search_read(fields=['id', 'partner_id'])
+            ticket_author_dict = dict([(ticket_author['id'], ticket_author['partner_id'][0] if ticket_author['partner_id'] else False) for ticket_author in ticket_author_list])
+
+            last_message_cust = []
+            last_message_sup = []
+            ticket_ids = set(last_author_dict.keys()) & set(ticket_author_dict.keys())
+            for ticket_id in ticket_ids:
+                if last_author_dict[ticket_id] == ticket_author_dict[ticket_id]:
+                    last_message_cust.append(ticket_id)
+                else:
+                    last_message_sup.append(ticket_id)
+
+            if filterby == 'last_message_cust':
+                domain = AND([domain, [('id', 'in', last_message_cust)]])
+            else:
+                domain = AND([domain, [('id', 'in', last_message_sup)]])
+
+        else:
+            domain = AND([domain, searchbar_filters[filterby]['domain']])
+
+        if date_begin and date_end:
+            domain = AND([domain, [('create_date', '>', date_begin), ('create_date', '<=', date_end)]])
+
+        # search
+        if search and search_in:
+            search_domain = []
+            if search_in == 'ticket_ref':
+                search_domain = OR([search_domain, [('ticket_ref', 'ilike', search)]])
+            if search_in == 'content':
+                search_domain = OR([search_domain, ['|', ('name', 'ilike', search), ('description', 'ilike', search)]])
+            if search_in == 'user':
+                assignees = request.env['res.users'].sudo()._search([('name', 'ilike', search)])
+                search_domain = OR([search_domain, [('user_id', 'in', assignees)]])
+            if search_in == 'message':
+                discussion_subtype_id = request.env.ref('mail.mt_comment').id
+                search_domain = OR([search_domain, [('message_ids.body', 'ilike', search), ('message_ids.subtype_id', '=', discussion_subtype_id)]])
+            if search_in == 'status':
+                search_domain = OR([search_domain, [('stage_id', 'ilike', search)]])
+            domain = AND([domain, search_domain])
+
+        # pager
+        tickets_count = request.env['helpdesk.ticket'].search_count(domain)
+        pager = portal_pager(
+            url="/my/tickets",
+            url_args={'date_begin': date_begin, 'date_end': date_end, 'sortby': sortby, 'search_in': search_in, 'search': search, 'groupby': groupby, 'filterby': filterby},
+            total=tickets_count,
+            page=page,
+            step=self._items_per_page
+        )
+
+        tickets = request.env['helpdesk.ticket'].search(domain, order=order, limit=self._items_per_page, offset=pager['offset'])
+        request.session['my_tickets_history'] = tickets.ids[:100]
+
+        if not tickets:
+            grouped_tickets = []
+        elif groupby != 'none':
+            grouped_tickets = [request.env['helpdesk.ticket'].concat(*g) for k, g in groupbyelem(tickets, itemgetter(searchbar_groupby[groupby]['input']))]
+        else:
+            grouped_tickets = [tickets]
+
+        values.update({
+            'date': date_begin,
+            'grouped_tickets': grouped_tickets,
+            'page_name': 'ticket',
+            'default_url': '/my/tickets',
+            'pager': pager,
+            'searchbar_sortings': searchbar_sortings,
+            'searchbar_filters': searchbar_filters,
+            'searchbar_inputs': searchbar_inputs,
+            'searchbar_groupby': searchbar_groupby,
+            'sortby': sortby,
+            'groupby': groupby,
+            'search_in': search_in,
+            'search': search,
+            'filterby': filterby,
+        })
+        return values

super_portal/models/__init__.py

@@ -0,0 +1,2 @@
+from . import res_partner
+from . import portal_wizard

super_portal/models/portal_wizard.py

@@ -0,0 +1,18 @@
+from odoo import api, fields, models
+
+
+class PortalWizardUser(models.TransientModel):
+    _inherit = 'portal.wizard.user'
+
+    can_edit = fields.Boolean(compute='_compute_can_edit', string="Can Edit")
+
+    @api.depends('user_id', 'user_id.groups_id')
+    def _compute_can_edit(self):
+        """Compute if the user can edit based on access rights"""
+
+        for portal_wizard_user in self:
+            user = portal_wizard_user.user_id
+            if user.has_group('super_portal.group_edit_portal_access'):
+                portal_wizard_user.can_edit = True
+            else:
+                portal_wizard_user.can_edit = False