slapos_cloud&slapos_erp5: New security with security_uids

  slapos_erp5: release new security with local_role_group_id
  slapos_cloud: include more security_uids columns
  slapos_cloud: set extra security_uids configuration.
  slapos_erp5: Remove duplicated entry on roles
  slapos_erp5: Assignee on [Software/Slave] Instance comes from the Hosting Subscription
  slapos_configurator: erp5_security_uid_innodb_catalog is installed now.
  slapos_erp5: Software Installation, Owner shoulnd't be the Assignee but the Requester.
  slapos_erp5: Update RoleSecurity Tests
  slapos_cloud: testSlapOSCloudWorkflow, New security requires Slave Instance be linked to a HS
  slapos_erp5: R-SHADOW-PERSON is only present on Payments w/o Destination Section

master/bt5/slapos_accounting/TestTemplateItem/portal_components/test.erp5.testSlapOSContractAlarm.py

@@ -78,6 +78,7 @@ portal_workflow.doActionFor(context, action='edit_action', comment='Visited by S
     preference =  self.portal.portal_preferences.getActiveSystemPreference()
     preference.setPreferredCloudContractEnabled(False)
     self.tic()
+    self.clearCache()
 
     self._simulateSoftwareInstance_requestValidationPayment()
     try:

master/bt5/slapos_cloud/CatalogMethodTemplateItem/portal_catalog/erp5_mysql_innodb/z_catalog_no_workflow_date_object_list.sql

 REPLACE INTO
   catalog
-  (`uid`, `security_uid`, `owner`, `viewable_owner`, `path`, `relative_url`, `parent_uid`, `id`, `description`, `title`, `meta_type`,
+  (`uid`, `security_uid`, `group_security_uid`, `shadow_security_uid`, `computer_security_uid`,`user_security_uid`, `subscription_security_uid`, `owner`, `viewable_owner`, `path`, `relative_url`, `parent_uid`, `id`, `description`, `title`, `meta_type`,
    `portal_type`, `opportunity_state`, `corporate_registration_code`, `ean13_code`, `validation_state`, `simulation_state`,
    `causality_state`, `invoice_state`, `payment_state`, `event_state`, `immobilisation_state`, `reference`, `grouping_reference`,
    `source_reference`, `destination_reference`, `string_index`, `int_index`, `float_index`, `has_cell_content`, `modification_date`)
 VALUES
 <dtml-in prefix="loop" expr="_.range(_.len(uid))">
 (
-  <dtml-sqlvar expr="uid[loop_item]" type="int">,  
+  <dtml-sqlvar expr="uid[loop_item]" type="int">,
   <dtml-sqlvar expr="security_uid[loop_item]" type="int">,
+  <dtml-sqlvar expr="group_security_uid[loop_item]" type="int" optional>,
+  <dtml-sqlvar expr="shadow_security_uid[loop_item]" type="int" optional>,
+  <dtml-sqlvar expr="computer_security_uid[loop_item]" type="int" optional>,
+  <dtml-sqlvar expr="user_security_uid[loop_item]" type="int" optional>,
+  <dtml-sqlvar expr="subscription_security_uid[loop_item]" type="int" optional>,
   <dtml-sqlvar expr="getOwnerInfo[loop_item]['id']" type="string">,
   <dtml-sqlvar expr="(getViewPermissionOwner[loop_item] is not None) and getViewPermissionOwner[loop_item] or ''" type="string" optional>,
   <dtml-sqlvar expr="getPath[loop_item]" type="string">,

master/bt5/slapos_cloud/CatalogMethodTemplateItem/portal_catalog/erp5_mysql_innodb/z_catalog_no_workflow_date_object_list.xml

@@ -8,42 +8,45 @@
       <dictionary>
         <item>
             <key> <string>allow_simple_one_argument_traversal</string> </key>
-            <value>
-              <none/>
-            </value>
+            <value> <int>0</int> </value>
         </item>
         <item>
             <key> <string>arguments_src</string> </key>
-            <value> <string>uid\r\n
-security_uid\r\n
-getOwnerInfo\r\n
-getViewPermissionOwner\r\n
-getPath\r\n
-getRelativeUrl\r\n
-getParentUid\r\n
-id\r\n
-getDescription\r\n
-getTitle\r\n
-meta_type\r\n
-getPortalType\r\n
-getOpportunityState\r\n
-getCorporateRegistrationCode\r\n
-getEan13Code\r\n
-getSimulationState\r\n
-getCausalityState\r\n
-getInvoiceState\r\n
-getValidationState\r\n
-getPaymentState\r\n
-getEventState\r\n
-getImmobilisationState\r\n
-getReference\r\n
-getGroupingReference\r\n
-getSourceReference\r\n
-getDestinationReference\r\n
-getStringIndex\r\n
-getIntIndex\r\n
-getFloatIndex\r\n
-hasCellContent\r\n
+            <value> <string>uid\n
+security_uid\n
+group_security_uid\n
+shadow_security_uid\n
+computer_security_uid\n
+subscription_security_uid\n
+user_security_uid\n
+getOwnerInfo\n
+getViewPermissionOwner\n
+getPath\n
+getRelativeUrl\n
+getParentUid\n
+id\n
+getDescription\n
+getTitle\n
+meta_type\n
+getPortalType\n
+getOpportunityState\n
+getCorporateRegistrationCode\n
+getEan13Code\n
+getSimulationState\n
+getCausalityState\n
+getInvoiceState\n
+getValidationState\n
+getPaymentState\n
+getEventState\n
+getImmobilisationState\n
+getReference\n
+getGroupingReference\n
+getSourceReference\n
+getDestinationReference\n
+getStringIndex\n
+getIntIndex\n
+getFloatIndex\n
+hasCellContent\n
 getModificationDate</string> </value>
         </item>
         <item>
@@ -52,11 +55,15 @@ getModificationDate</string> </value>
         </item>
         <item>
             <key> <string>class_file_</string> </key>
-            <value> <string></string> </value>
+            <value>
+              <none/>
+            </value>
         </item>
         <item>
             <key> <string>class_name_</string> </key>
-            <value> <string></string> </value>
+            <value>
+              <none/>
+            </value>
         </item>
         <item>
             <key> <string>connection_hook</string> </key>
@@ -108,7 +115,7 @@ getModificationDate</string> </value>
         </item>
         <item>
             <key> <string>title</string> </key>
-            <value> <string></string> </value>
+            <value> <string>z_catalog_no_workflow_date_object_list</string> </value>
         </item>
         <item>
             <key> <string>type</string> </key>

master/bt5/slapos_cloud/CatalogMethodTemplateItem/portal_catalog/erp5_mysql_innodb/z_catalog_object_list.sql

 REPLACE INTO
   catalog
-  (`uid`, `security_uid`, `owner`, `viewable_owner`, `path`, `relative_url`, `parent_uid`, `id`, `description`, `title`, `meta_type`,
+  (`uid`, `security_uid`, `group_security_uid`, `shadow_security_uid`, `computer_security_uid`,`user_security_uid`, `subscription_security_uid`, `owner`, `viewable_owner`, `path`, `relative_url`, `parent_uid`, `id`, `description`, `title`, `meta_type`,
    `portal_type`, `opportunity_state`, `corporate_registration_code`, `ean13_code`, `validation_state`, `simulation_state`,
    `causality_state`, `invoice_state`, `payment_state`, `event_state`, `immobilisation_state`, `reference`, `grouping_reference`, `grouping_date`,
    `source_reference`, `destination_reference`, `string_index`, `int_index`, `float_index`, `has_cell_content`, `creation_date`,
@@ -8,8 +8,13 @@ REPLACE INTO
 VALUES
 <dtml-in prefix="loop" expr="_.range(_.len(uid))">
 (
-  <dtml-sqlvar expr="uid[loop_item]" type="int">,  
+  <dtml-sqlvar expr="uid[loop_item]" type="int">,
   <dtml-sqlvar expr="security_uid[loop_item]" type="int">,
+  <dtml-sqlvar expr="group_security_uid[loop_item]" type="int" optional>,
+  <dtml-sqlvar expr="shadow_security_uid[loop_item]" type="int" optional>,
+  <dtml-sqlvar expr="computer_security_uid[loop_item]" type="int" optional>,
+  <dtml-sqlvar expr="user_security_uid[loop_item]" type="int" optional>,
+  <dtml-sqlvar expr="subscription_security_uid[loop_item]" type="int" optional>,
   <dtml-sqlvar expr="getOwnerInfo[loop_item]['id']" type="string">,
   <dtml-sqlvar expr="(getViewPermissionOwner[loop_item] is not None) and getViewPermissionOwner[loop_item] or ''" type="string" optional>,
   <dtml-sqlvar expr="getPath[loop_item]" type="string">,

master/bt5/slapos_cloud/CatalogMethodTemplateItem/portal_catalog/erp5_mysql_innodb/z_catalog_object_list.xml

@@ -8,44 +8,47 @@
       <dictionary>
         <item>
             <key> <string>allow_simple_one_argument_traversal</string> </key>
-            <value>
-              <none/>
-            </value>
+            <value> <int>0</int> </value>
         </item>
         <item>
             <key> <string>arguments_src</string> </key>
-            <value> <string>uid\r\n
-security_uid\r\n
-getOwnerInfo\r\n
-getViewPermissionOwner\r\n
-getPath\r\n
-getRelativeUrl\r\n
-getParentUid\r\n
-id\r\n
-getDescription\r\n
-getTitle\r\n
-meta_type\r\n
-getPortalType\r\n
-getOpportunityState\r\n
-getCorporateRegistrationCode\r\n
-getEan13Code\r\n
-getSimulationState\r\n
-getCausalityState\r\n
-getInvoiceState\r\n
-getValidationState\r\n
-getPaymentState\r\n
-getEventState\r\n
-getImmobilisationState\r\n
-getReference\r\n
-getGroupingReference\r\n
-getGroupingDate\r\n
-getSourceReference\r\n
-getDestinationReference\r\n
-getStringIndex\r\n
-getIntIndex\r\n
-getFloatIndex\r\n
-hasCellContent\r\n
-getCreationDate\r\n
+            <value> <string>uid\n
+security_uid\n
+group_security_uid\n
+shadow_security_uid\n
+computer_security_uid\n
+user_security_uid\n
+subscription_security_uid\n
+getOwnerInfo\n
+getViewPermissionOwner\n
+getPath\n
+getRelativeUrl\n
+getParentUid\n
+id\n
+getDescription\n
+getTitle\n
+meta_type\n
+getPortalType\n
+getOpportunityState\n
+getCorporateRegistrationCode\n
+getEan13Code\n
+getSimulationState\n
+getCausalityState\n
+getInvoiceState\n
+getValidationState\n
+getPaymentState\n
+getEventState\n
+getImmobilisationState\n
+getReference\n
+getGroupingReference\n
+getGroupingDate\n
+getSourceReference\n
+getDestinationReference\n
+getStringIndex\n
+getIntIndex\n
+getFloatIndex\n
+hasCellContent\n
+getCreationDate\n
 getModificationDate</string> </value>
         </item>
         <item>
@@ -54,11 +57,15 @@ getModificationDate</string> </value>
         </item>
         <item>
             <key> <string>class_file_</string> </key>
-            <value> <string></string> </value>
+            <value>
+              <none/>
+            </value>
         </item>
         <item>
             <key> <string>class_name_</string> </key>
-            <value> <string></string> </value>
+            <value>
+              <none/>
+            </value>
         </item>
         <item>
             <key> <string>connection_hook</string> </key>
@@ -72,20 +79,12 @@ getModificationDate</string> </value>
         </item>
         <item>
             <key> <string>expression</string> </key>
-            <value> <string>python: context.getPortalType() not in (\'Software Instance\', \'Slave Instance\', \'Computer\', \'Computer Partition\', \'Sale Order\')</string> </value>
+            <value> <string>python: context.getPortalType() not in (\'Software Instance\', \'Slave Instance\', \'Computer\', \'Computer Partition\', \'Sale Order\') </string> </value>
         </item>
         <item>
             <key> <string>expression_cache_key</string> </key>
             <value>
-              <tuple>
-                <string>portal_type</string>
-              </tuple>
-            </value>
-        </item>
-        <item>
-            <key> <string>expression_instance</string> </key>
-            <value>
-              <persistent> <string encoding="base64">AAAAAAAAAAI=</string> </persistent>
+              <tuple/>
             </value>
         </item>
         <item>
@@ -110,26 +109,7 @@ getModificationDate</string> </value>
         </item>
         <item>
             <key> <string>title</string> </key>
-            <value> <string></string> </value>
-        </item>
-        <item>
-            <key> <string>type</string> </key>
-            <value>
-              <tuple/>
-            </value>
-        </item>
-      </dictionary>
-    </pickle>
-  </record>
-  <record id="2" aka="AAAAAAAAAAI=">
-    <pickle>
-      <global name="Expression" module="Products.CMFCore.Expression"/>
-    </pickle>
-    <pickle>
-      <dictionary>
-        <item>
-            <key> <string>text</string> </key>
-            <value> <string>python: context.getPortalType() not in (\'Software Instance\', \'Slave Instance\', \'Computer\', \'Computer Partition\', \'Sale Order\')</string> </value>
+            <value> <string>z_catalog_object_list</string> </value>
         </item>
       </dictionary>
     </pickle>

master/bt5/slapos_cloud/CatalogMethodTemplateItem/portal_catalog/erp5_mysql_innodb/z_create_catalog.catalog_keys.xml

+<catalog_method>
+ <item key="sql_clear_catalog" type="int">
+  <value>1</value>
+ </item>
+</catalog_method>

master/bt5/slapos_cloud/CatalogMethodTemplateItem/portal_catalog/erp5_mysql_innodb/z_create_catalog.sql

+# Host:
+# Database: test
+# Table: 'catalog'
+#
+CREATE TABLE `catalog` (
+  `uid` BIGINT UNSIGNED NOT NULL,
+  `security_uid` INT UNSIGNED,
+  `group_security_uid` INT UNSIGNED,
+  `shadow_security_uid` INT UNSIGNED,
+  `computer_security_uid` INT UNSIGNED,
+  `user_security_uid` INT UNSIGNED,
+  `subscription_security_uid` INT UNSIGNED,
+  `owner` varbinary(255) NOT NULL default '',
+  `viewable_owner` varbinary(255) NOT NULL default '',
+  `path` varchar(255) NOT NULL default '',
+  `relative_url` varchar(255) NOT NULL default '',
+  `parent_uid` BIGINT UNSIGNED default '0',
+  `id` varchar(255) default '',
+  `description` text,
+  `title` varchar(255) default '',
+  `meta_type` varchar(255) default '',
+  `portal_type` varchar(255) default '',
+  `opportunity_state` varchar(255) default '',
+  `corporate_registration_code` varchar(255),
+  `ean13_code` varchar(255),
+  `validation_state` varchar(255) default '',
+  `simulation_state` varchar(255) default '',
+  `causality_state` varchar(255) default '',
+  `invoice_state` varchar(255) default '',
+  `payment_state` varchar(255) default '',
+  `event_state` varchar(255) default '',
+  `immobilisation_state` varchar(255) default '',
+  `reference` varchar(255) binary default '',
+  `grouping_reference` varchar(255) default '',
+  `grouping_date` datetime,
+  `source_reference` varchar(255) default '',
+  `destination_reference` varchar(255) default '',
+  `string_index` varchar(255),
+  `int_index` INT,
+  `float_index` real,
+  `has_cell_content` bool,
+  `creation_date` datetime,
+  `modification_date` datetime,
+  `indexation_timestamp` TIMESTAMP DEFAULT CURRENT_TIMESTAMP ON UPDATE CURRENT_TIMESTAMP,
+  PRIMARY KEY  (`uid`),
+  KEY `security_uid` (`security_uid`),
+  KEY `group_security_uid` (`group_security_uid`),
+  KEY `shadow_security_uid` (`shadow_security_uid`),
+  KEY `computer_security_uid` (`computer_security_uid`),
+  KEY `user_security_uid` (`user_security_uid`),
+  KEY `subscription_security_uid` (`subscription_security_uid`),
+  KEY `owner` (`owner`),
+  KEY `viewable_owner` (`viewable_owner`),
+  KEY `Parent` (`parent_uid`),
+  KEY `Path` (`path`),
+  KEY `Title` (`title`),
+  KEY `Reference` (`reference`),
+  KEY `relative_url` (`relative_url`),
+  KEY `Portal Type` (`portal_type`, `reference`),
+  KEY `opportunity_state` (`opportunity_state`),
+  KEY `validation_state_portal_type` (`validation_state`, `portal_type`),
+  KEY `simulation_state_portal_type` (`simulation_state`, `portal_type`),
+  KEY `causality_state_portal_type` (`causality_state`, `portal_type`),
+  KEY `invoice_state` (`invoice_state`),
+  KEY `payment_state` (`payment_state`),
+  KEY `event_state` (`event_state`)
+) ENGINE=InnoDB;

master/bt5/slapos_cloud/CatalogMethodTemplateItem/portal_catalog/erp5_mysql_innodb/z_create_catalog.xml

+<?xml version="1.0"?>
+<ZopeData>
+  <record id="1" aka="AAAAAAAAAAE=">
+    <pickle>
+      <global name="SQL Method" module="erp5.portal_type"/>
+    </pickle>
+    <pickle>
+      <dictionary>
+        <item>
+            <key> <string>_col</string> </key>
+            <value>
+              <tuple/>
+            </value>
+        </item>
+        <item>
+            <key> <string>allow_simple_one_argument_traversal</string> </key>
+            <value> <int>0</int> </value>
+        </item>
+        <item>
+            <key> <string>arguments_src</string> </key>
+            <value> <string></string> </value>
+        </item>
+        <item>
+            <key> <string>cache_time_</string> </key>
+            <value> <int>0</int> </value>
+        </item>
+        <item>
+            <key> <string>class_file_</string> </key>
+            <value>
+              <none/>
+            </value>
+        </item>
+        <item>
+            <key> <string>class_name_</string> </key>
+            <value>
+              <none/>
+            </value>
+        </item>
+        <item>
+            <key> <string>connection_hook</string> </key>
+            <value>
+              <none/>
+            </value>
+        </item>
+        <item>
+            <key> <string>connection_id</string> </key>
+            <value> <string>erp5_sql_connection</string> </value>
+        </item>
+        <item>
+            <key> <string>id</string> </key>
+            <value> <string>z_create_catalog</string> </value>
+        </item>
+        <item>
+            <key> <string>max_cache_</string> </key>
+            <value> <int>100</int> </value>
+        </item>
+        <item>
+            <key> <string>max_rows_</string> </key>
+            <value> <int>1000</int> </value>
+        </item>
+        <item>
+            <key> <string>portal_type</string> </key>
+            <value> <string>SQL Method</string> </value>
+        </item>
+        <item>
+            <key> <string>title</string> </key>
+            <value> <string>z_create_catalog</string> </value>
+        </item>
+      </dictionary>
+    </pickle>
+  </record>
+</ZopeData>

master/bt5/slapos_cloud/CatalogSecurityUidColumnTemplateItem/security_uid_column_list.xml

+<key_list>
+ <key>computer | computer_security_uid</key>
+ <key>group | group_security_uid</key>
+ <key>shadow | shadow_security_uid</key>
+ <key>subscription | subscription_security_uid</key>
+ <key>user | user_security_uid</key>
+</key_list>
\ No newline at end of file

master/bt5/slapos_cloud/TestTemplateItem/portal_components/test.erp5.testSlapOSCloudWorkflow.py

@@ -2676,12 +2676,20 @@ class TestSlapOSCoreSlapOSCloudInteractionWorkflow(SlapOSTestCaseMixin):
     self.person_user = self.makePerson()
     self.login(self.person_user.getUserId())
 
-    new_id = self.generateNewId()
+    # Hosting Subscription required for security.
+    hs = self.portal.hosting_subscription_module.newContent(
+      portal_type='Hosting Subscription',
+      title="HS %s for %s" % (self.new_id, self.person_user.getReference()),
+      reference="TESTHS-%s" % self.new_id,
+      destination_reference="TESTHS-%s" % self.new_id,
+      destination_section=self.person_user.getRelativeUrl()
+      )
 
     instance = self.portal.software_instance_module.newContent(
       portal_type=portal_type,
-      title="Instance %s for %s" % (new_id, self.person_user.getReference()),
-      reference="TESTINST-%s" % new_id)
+      title="Instance %s for %s" % (self.new_id, self.person_user.getReference()),
+      reference="TESTINST-%s" % self.new_id,
+      specialise_value=hs)
 
     if portal_type == "Software Instance":
       self._addERP5Login(instance)
@@ -2717,11 +2725,22 @@ class TestSlapOSCoreSlapOSCloudInteractionWorkflow(SlapOSTestCaseMixin):
     self.person_user = self.makePerson()
     self.login(self.person_user.getUserId())
 
+    # Hosting Subscription required for security.
+    hs = self.portal.hosting_subscription_module.newContent(
+      portal_type='Hosting Subscription',
+      title="HS %s for %s" % (self.new_id, self.person_user.getReference()),
+      reference="TESTHS-%s" % self.new_id,
+      destination_reference="TESTHS-%s" % self.new_id,
+      destination_section=self.person_user.getRelativeUrl()
+      )
+
     instance = self.portal.software_instance_module.newContent(
       portal_type='Slave Instance',
       title="Instance %s for %s" % (self.new_id, self.person_user.getReference()),
       reference="TESTINST-%s" % self.new_id,
       destination_reference="TESTINST-%s" % self.new_id,
+      destination_section=self.person_user.getRelativeUrl(),
+      specialise_value=hs
       )
     request_kw = dict(
       software_release='http://example.org',

master/bt5/slapos_cloud/bt/dependency_list

 erp5_item
 erp5_computer_immobilisation
-erp5_software_pdm
+erp5_software_pdm
\ No newline at end of file
+erp5_security_uid_innodb_catalog
\ No newline at end of file

master/bt5/slapos_cloud/bt/template_catalog_method_id_list

@@ -12,6 +12,7 @@ erp5_mysql_innodb/z_catalog_no_workflow_date_object_list
 erp5_mysql_innodb/z_catalog_object_list
 erp5_mysql_innodb/z_catalog_slapos_item_list
 erp5_mysql_innodb/z_catalog_software_instance_list
+erp5_mysql_innodb/z_create_catalog
 erp5_mysql_innodb/z_create_computer_partition
 erp5_mysql_innodb/z_create_item
 erp5_mysql_innodb/z_create_slapos_item

master/bt5/slapos_cloud/bt/template_catalog_security_uid_column_list

+group | group_security_uid
+shadow | shadow_security_uid
+computer | computer_security_uid
+user | user_security_uid
+subscription | subscription_security_uid
\ No newline at end of file

master/bt5/slapos_configurator/TestTemplateItem/portal_components/test.erp5.testSlapOSConfigurator.py

@@ -246,6 +246,7 @@ class TestSlapOSConfigurator(SlapOSTestCaseMixin):
       'erp5_crm',
       'erp5_system_event',
       'erp5_secure_payment',
+      'erp5_security_uid_innodb_catalog',
       'erp5_payzen_secure_payment',
       'erp5_ooo_import',
       'erp5_odt_style',
@@ -312,4 +313,4 @@ class TestSlapOSConfigurator(SlapOSTestCaseMixin):
       'slapos_erp5',
     ]
     self.assertSameSet(expected_business_template_list,
-      self.portal.portal_templates.getInstalledBusinessTemplateTitleList())
+      self.portal.portal_templates.getInstalledBusinessTemplateTitleList())
\ No newline at end of file

master/bt5/slapos_erp5/LocalRolesTemplateItem/access_token_module.xml

@@ -8,4 +8,13 @@
    <item>Author</item>
   </role>
  </local_roles>
+ <local_role_group_ids>
+  <local_role_group_id id='group'>
+    <principal id='G-COMPANY'>Auditor</principal>
+    <principal id='G-COMPANY'>Author</principal>
+  </local_role_group_id>
+  <local_role_group_id id='user'>
+    <principal id='R-MEMBER'>Author</principal>
+  </local_role_group_id>
+ </local_role_group_ids>
 </local_roles_item>
\ No newline at end of file

master/bt5/slapos_erp5/LocalRolesTemplateItem/account_module.xml

@@ -11,4 +11,16 @@
    <item>Auditor</item>
   </role>
  </local_roles>
+ <local_role_group_ids>
+  <local_role_group_id id='group'>
+    <principal id='G-COMPANY'>Auditor</principal>
+    <principal id='G-COMPANY'>Author</principal>
+  </local_role_group_id>
+  <local_role_group_id id='shadow'>
+    <principal id='R-SHADOW-PERSON'>Auditor</principal>
+  </local_role_group_id>
+  <local_role_group_id id='user'>
+    <principal id='R-MEMBER'>Auditor</principal>
+  </local_role_group_id>
+ </local_role_group_ids>
 </local_roles_item>
\ No newline at end of file

master/bt5/slapos_erp5/LocalRolesTemplateItem/account_module/bank.xml

@@ -10,4 +10,15 @@
    <item>Auditor</item>
   </role>
  </local_roles>
+ <local_role_group_ids>
+  <local_role_group_id id='group'>
+    <principal id='G-COMPANY'>Assignor</principal>
+  </local_role_group_id>
+  <local_role_group_id id='shadow'>
+    <principal id='R-SHADOW-PERSON'>Auditor</principal>
+  </local_role_group_id>
+  <local_role_group_id id='user'>
+    <principal id='R-MEMBER'>Auditor</principal>
+  </local_role_group_id>
+ </local_role_group_ids>
 </local_roles_item>
\ No newline at end of file

master/bt5/slapos_erp5/LocalRolesTemplateItem/account_module/capital.xml

@@ -10,4 +10,15 @@
    <item>Auditor</item>
   </role>
  </local_roles>
+ <local_role_group_ids>
+  <local_role_group_id id='group'>
+    <principal id='G-COMPANY'>Assignor</principal>
+  </local_role_group_id>
+  <local_role_group_id id='shadow'>
+    <principal id='R-SHADOW-PERSON'>Auditor</principal>
+  </local_role_group_id>
+  <local_role_group_id id='user'>
+    <principal id='R-MEMBER'>Auditor</principal>
+  </local_role_group_id>
+ </local_role_group_ids>
 </local_roles_item>
\ No newline at end of file

master/bt5/slapos_erp5/LocalRolesTemplateItem/account_module/coll_vat.xml

@@ -10,4 +10,15 @@
    <item>Auditor</item>
   </role>
  </local_roles>
+ <local_role_group_ids>
+  <local_role_group_id id='group'>
+    <principal id='G-COMPANY'>Assignor</principal>
+  </local_role_group_id>
+  <local_role_group_id id='shadow'>
+    <principal id='R-SHADOW-PERSON'>Auditor</principal>
+  </local_role_group_id>
+  <local_role_group_id id='user'>
+    <principal id='R-MEMBER'>Auditor</principal>
+  </local_role_group_id>
+ </local_role_group_ids>
 </local_roles_item>
\ No newline at end of file

master/bt5/slapos_erp5/LocalRolesTemplateItem/account_module/equipments.xml

@@ -10,4 +10,15 @@
    <item>Auditor</item>
   </role>
  </local_roles>
+ <local_role_group_ids>
+  <local_role_group_id id='group'>
+    <principal id='G-COMPANY'>Assignor</principal>
+  </local_role_group_id>
+  <local_role_group_id id='shadow'>
+    <principal id='R-SHADOW-PERSON'>Auditor</principal>
+  </local_role_group_id>
+  <local_role_group_id id='user'>
+    <principal id='R-MEMBER'>Auditor</principal>
+  </local_role_group_id>
+ </local_role_group_ids>
 </local_roles_item>
\ No newline at end of file

master/bt5/slapos_erp5/LocalRolesTemplateItem/account_module/inventories.xml

@@ -10,4 +10,15 @@
    <item>Auditor</item>
   </role>
  </local_roles>
+ <local_role_group_ids>
+  <local_role_group_id id='group'>
+    <principal id='G-COMPANY'>Assignor</principal>
+  </local_role_group_id>
+  <local_role_group_id id='shadow'>
+    <principal id='R-SHADOW-PERSON'>Auditor</principal>
+  </local_role_group_id>
+  <local_role_group_id id='user'>
+    <principal id='R-MEMBER'>Auditor</principal>
+  </local_role_group_id>
+ </local_role_group_ids>
 </local_roles_item>
\ No newline at end of file

master/bt5/slapos_erp5/LocalRolesTemplateItem/account_module/payable.xml

@@ -10,4 +10,15 @@
    <item>Auditor</item>
   </role>
  </local_roles>
+ <local_role_group_ids>
+  <local_role_group_id id='group'>
+    <principal id='G-COMPANY'>Assignor</principal>
+  </local_role_group_id>
+  <local_role_group_id id='shadow'>
+    <principal id='R-SHADOW-PERSON'>Auditor</principal>
+  </local_role_group_id>
+  <local_role_group_id id='user'>
+    <principal id='R-MEMBER'>Auditor</principal>
+  </local_role_group_id>
+ </local_role_group_ids>
 </local_roles_item>
\ No newline at end of file

master/bt5/slapos_erp5/LocalRolesTemplateItem/account_module/profit_loss.xml

@@ -10,4 +10,15 @@
    <item>Auditor</item>
   </role>
  </local_roles>
+ <local_role_group_ids>
+  <local_role_group_id id='group'>
+    <principal id='G-COMPANY'>Assignor</principal>
+  </local_role_group_id>
+  <local_role_group_id id='shadow'>
+    <principal id='R-SHADOW-PERSON'>Auditor</principal>
+  </local_role_group_id>
+  <local_role_group_id id='user'>
+    <principal id='R-MEMBER'>Auditor</principal>
+  </local_role_group_id>
+ </local_role_group_ids>
 </local_roles_item>
\ No newline at end of file

master/bt5/slapos_erp5/LocalRolesTemplateItem/account_module/purchase.xml

@@ -10,4 +10,15 @@
    <item>Auditor</item>
   </role>
  </local_roles>
+ <local_role_group_ids>
+  <local_role_group_id id='group'>
+    <principal id='G-COMPANY'>Assignor</principal>
+  </local_role_group_id>
+  <local_role_group_id id='shadow'>
+    <principal id='R-SHADOW-PERSON'>Auditor</principal>
+  </local_role_group_id>
+  <local_role_group_id id='user'>
+    <principal id='R-MEMBER'>Auditor</principal>
+  </local_role_group_id>
+ </local_role_group_ids>
 </local_roles_item>
\ No newline at end of file

master/bt5/slapos_erp5/LocalRolesTemplateItem/account_module/receivable.xml

@@ -10,4 +10,15 @@
    <item>Auditor</item>
   </role>
  </local_roles>
+ <local_role_group_ids>
+  <local_role_group_id id='group'>
+    <principal id='G-COMPANY'>Assignor</principal>
+  </local_role_group_id>
+  <local_role_group_id id='shadow'>
+    <principal id='R-SHADOW-PERSON'>Auditor</principal>
+  </local_role_group_id>
+  <local_role_group_id id='user'>
+    <principal id='R-MEMBER'>Auditor</principal>
+  </local_role_group_id>
+ </local_role_group_ids>
 </local_roles_item>
\ No newline at end of file

master/bt5/slapos_erp5/LocalRolesTemplateItem/account_module/refundable_vat.xml

@@ -10,4 +10,15 @@
    <item>Auditor</item>
   </role>
  </local_roles>
+ <local_role_group_ids>
+  <local_role_group_id id='group'>
+    <principal id='G-COMPANY'>Assignor</principal>
+  </local_role_group_id>
+  <local_role_group_id id='shadow'>
+    <principal id='R-SHADOW-PERSON'>Auditor</principal>
+  </local_role_group_id>
+  <local_role_group_id id='user'>
+    <principal id='R-MEMBER'>Auditor</principal>
+  </local_role_group_id>
+ </local_role_group_ids>
 </local_roles_item>
\ No newline at end of file

master/bt5/slapos_erp5/LocalRolesTemplateItem/account_module/sales.xml

@@ -10,4 +10,15 @@
    <item>Auditor</item>
   </role>
  </local_roles>
+ <local_role_group_ids>
+  <local_role_group_id id='group'>
+    <principal id='G-COMPANY'>Assignor</principal>
+  </local_role_group_id>
+  <local_role_group_id id='shadow'>
+    <principal id='R-SHADOW-PERSON'>Auditor</principal>
+  </local_role_group_id>
+  <local_role_group_id id='user'>
+    <principal id='R-MEMBER'>Auditor</principal>
+  </local_role_group_id>
+ </local_role_group_ids>
 </local_roles_item>
\ No newline at end of file

master/bt5/slapos_erp5/LocalRolesTemplateItem/accounting_module.xml

@@ -12,8 +12,15 @@
   </role>
  </local_roles>
  <local_role_group_ids>
+  <local_role_group_id id='group'>
+    <principal id='G-COMPANY'>Auditor</principal>
+    <principal id='G-COMPANY'>Author</principal>
+  </local_role_group_id>
   <local_role_group_id id='shadow'>
     <principal id='R-SHADOW-PERSON'>Assignor</principal>
   </local_role_group_id>
+  <local_role_group_id id='user'>
+    <principal id='R-MEMBER'>Auditor</principal>
+  </local_role_group_id>
  </local_role_group_ids>
 </local_roles_item>
\ No newline at end of file

master/bt5/slapos_erp5/LocalRolesTemplateItem/business_process_module.xml

@@ -7,4 +7,12 @@
    <item>Auditor</item>
   </role>
  </local_roles>
+ <local_role_group_ids>
+  <local_role_group_id id='group'>
+    <principal id='G-COMPANY'>Auditor</principal>
+  </local_role_group_id>
+  <local_role_group_id id='user'>
+    <principal id='R-MEMBER'>Auditor</principal>
+  </local_role_group_id>
+ </local_role_group_ids>
 </local_roles_item>
\ No newline at end of file

master/bt5/slapos_erp5/LocalRolesTemplateItem/business_process_module/slapos_aggregated_business_process.xml

@@ -7,4 +7,12 @@
    <item>Auditor</item>
   </role>
  </local_roles>
+ <local_role_group_ids>
+  <local_role_group_id id='group'>
+    <principal id='G-COMPANY'>Auditor</principal>
+  </local_role_group_id>
+  <local_role_group_id id='user'>
+    <principal id='R-MEMBER'>Auditor</principal>
+  </local_role_group_id>
+ </local_role_group_ids>
 </local_roles_item>
\ No newline at end of file

master/bt5/slapos_erp5/LocalRolesTemplateItem/business_process_module/slapos_consumption_business_process.xml

@@ -7,4 +7,12 @@
    <item>Auditor</item>
   </role>
  </local_roles>
+ <local_role_group_ids>
+  <local_role_group_id id='group'>
+    <principal id='G-COMPANY'>Auditor</principal>
+  </local_role_group_id>
+  <local_role_group_id id='user'>
+    <principal id='R-MEMBER'>Auditor</principal>
+  </local_role_group_id>
+ </local_role_group_ids>
 </local_roles_item>
\ No newline at end of file

master/bt5/slapos_erp5/LocalRolesTemplateItem/business_process_module/slapos_subscription_business_process.xml

@@ -7,4 +7,12 @@
    <item>Auditor</item>
   </role>
  </local_roles>
+ <local_role_group_ids>
+  <local_role_group_id id='group'>
+    <principal id='G-COMPANY'>Auditor</principal>
+  </local_role_group_id>
+  <local_role_group_id id='user'>
+    <principal id='R-MEMBER'>Auditor</principal>
+  </local_role_group_id>
+ </local_role_group_ids>
 </local_roles_item>
\ No newline at end of file

master/bt5/slapos_erp5/LocalRolesTemplateItem/campaign_module.xml

@@ -5,4 +5,10 @@
    <item>Author</item>
   </role>
  </local_roles>
+ <local_role_group_ids>
+  <local_role_group_id id='group'>
+    <principal id='G-COMPANY'>Auditor</principal>
+    <principal id='G-COMPANY'>Author</principal>
+  </local_role_group_id>
+ </local_role_group_ids>
 </local_roles_item>
\ No newline at end of file

master/bt5/slapos_erp5/LocalRolesTemplateItem/cloud_contract_module.xml

@@ -5,4 +5,10 @@
    <item>Author</item>
   </role>
  </local_roles>
+ <local_role_group_ids>
+  <local_role_group_id id='group'>
+    <principal id='G-COMPANY'>Auditor</principal>
+    <principal id='G-COMPANY'>Author</principal>
+  </local_role_group_id>
+ </local_role_group_ids>
 </local_roles_item>
\ No newline at end of file

master/bt5/slapos_erp5/LocalRolesTemplateItem/component_module.xml

@@ -5,4 +5,10 @@
    <item>Author</item>
   </role>
  </local_roles>
+ <local_role_group_ids>
+  <local_role_group_id id='group'>
+    <principal id='G-COMPANY'>Auditor</principal>
+    <principal id='G-COMPANY'>Author</principal>
+  </local_role_group_id>
+ </local_role_group_ids>
 </local_roles_item>
\ No newline at end of file

master/bt5/slapos_erp5/LocalRolesTemplateItem/computer_model_module.xml

@@ -9,4 +9,14 @@
    <item>Author</item>
   </role>
  </local_roles>
+ <local_role_group_ids>
+  <local_role_group_id id='group'>
+    <principal id='G-COMPANY'>Auditor</principal>
+    <principal id='G-COMPANY'>Author</principal>
+  </local_role_group_id>
+  <local_role_group_id id='user'>
+    <principal id='R-MEMBER'>Auditor</principal>
+    <principal id='R-MEMBER'>Author</principal>
+  </local_role_group_id>
+ </local_role_group_ids>
 </local_roles_item>
\ No newline at end of file

master/bt5/slapos_erp5/LocalRolesTemplateItem/computer_module.xml

@@ -15,4 +15,20 @@
    <item>Auditor</item>
   </role>
  </local_roles>
+ <local_role_group_ids>
+  <local_role_group_id id='computer'>
+    <principal id='R-COMPUTER'>Auditor</principal>
+  </local_role_group_id>
+  <local_role_group_id id='group'>
+    <principal id='G-COMPANY'>Auditor</principal>
+    <principal id='G-COMPANY'>Author</principal>
+  </local_role_group_id>
+  <local_role_group_id id='shadow'>
+    <principal id='R-SHADOW-PERSON'>Auditor</principal>
+  </local_role_group_id>
+  <local_role_group_id id='user'>
+    <principal id='R-MEMBER'>Auditor</principal>
+    <principal id='R-MEMBER'>Author</principal>
+  </local_role_group_id>
+ </local_role_group_ids>
 </local_roles_item>
\ No newline at end of file

master/bt5/slapos_erp5/LocalRolesTemplateItem/computer_network_module.xml

@@ -12,4 +12,17 @@
    <item>Auditor</item>
   </role>
  </local_roles>
+ <local_role_group_ids>
+  <local_role_group_id id='group'>
+    <principal id='G-COMPANY'>Auditor</principal>
+    <principal id='G-COMPANY'>Author</principal>
+  </local_role_group_id>
+  <local_role_group_id id='shadow'>
+    <principal id='R-SHADOW-PERSON'>Auditor</principal>
+  </local_role_group_id>
+  <local_role_group_id id='user'>
+    <principal id='R-MEMBER'>Auditor</principal>
+    <principal id='R-MEMBER'>Author</principal>
+  </local_role_group_id>
+ </local_role_group_ids>
 </local_roles_item>
\ No newline at end of file

master/bt5/slapos_erp5/LocalRolesTemplateItem/consumption_document_module.xml

@@ -12,4 +12,14 @@
    <item>Author</item>
   </role>
  </local_roles>
+ <local_role_group_ids>
+  <local_role_group_id id='group'>
+    <principal id='G-COMPANY'>Auditor</principal>
+    <principal id='G-COMPANY'>Author</principal>
+  </local_role_group_id>
+  <local_role_group_id id='user'>
+    <principal id='R-MEMBER'>Auditor</principal>
+    <principal id='R-MEMBER'>Author</principal>
+  </local_role_group_id>
+ </local_role_group_ids>
 </local_roles_item>
\ No newline at end of file

master/bt5/slapos_erp5/LocalRolesTemplateItem/credential_update_module.xml

@@ -9,4 +9,14 @@
    <item>Author</item>
   </role>
  </local_roles>
+ <local_role_group_ids>
+  <local_role_group_id id='group'>
+    <principal id='G-COMPANY'>Auditor</principal>
+    <principal id='G-COMPANY'>Author</principal>
+  </local_role_group_id>
+  <local_role_group_id id='user'>
+    <principal id='R-MEMBER'>Auditor</principal>
+    <principal id='R-MEMBER'>Author</principal>
+  </local_role_group_id>
+ </local_role_group_ids>
 </local_roles_item>
\ No newline at end of file

master/bt5/slapos_erp5/LocalRolesTemplateItem/currency_module.xml

@@ -11,4 +11,16 @@
    <item>Auditor</item>
   </role>
  </local_roles>
+ <local_role_group_ids>
+  <local_role_group_id id='group'>
+    <principal id='G-COMPANY'>Auditor</principal>
+    <principal id='G-COMPANY'>Author</principal>
+  </local_role_group_id>
+  <local_role_group_id id='shadow'>
+    <principal id='R-SHADOW-PERSON'>Auditor</principal>
+  </local_role_group_id>
+  <local_role_group_id id='user'>
+    <principal id='R-MEMBER'>Auditor</principal>
+  </local_role_group_id>
+ </local_role_group_ids>
 </local_roles_item>
\ No newline at end of file

master/bt5/slapos_erp5/LocalRolesTemplateItem/currency_module/EUR.xml

@@ -10,4 +10,15 @@
    <item>Auditor</item>
   </role>
  </local_roles>
+ <local_role_group_ids>
+  <local_role_group_id id='group'>
+    <principal id='G-COMPANY'>Assignor</principal>
+  </local_role_group_id>
+  <local_role_group_id id='shadow'>
+    <principal id='R-SHADOW-PERSON'>Auditor</principal>
+  </local_role_group_id>
+  <local_role_group_id id='user'>
+    <principal id='R-MEMBER'>Auditor</principal>
+  </local_role_group_id>
+ </local_role_group_ids>
 </local_roles_item>
\ No newline at end of file

master/bt5/slapos_erp5/LocalRolesTemplateItem/data_set_module.xml

@@ -14,4 +14,15 @@
    <item>Author</item>
   </role>
  </local_roles>
+ <local_role_group_ids>
+  <local_role_group_id id='group'>
+    <principal id='G-COMPANY'>Auditor</principal>
+    <principal id='G-COMPANY'>Author</principal>
+  </local_role_group_id>
+  <local_role_group_id id='user'>
+    <principal id='R-COMPUTER'>Author</principal>
+    <principal id='R-INSTANCE'>Author</principal>
+    <principal id='R-MEMBER'>Author</principal>
+  </local_role_group_id>
+ </local_role_group_ids>
 </local_roles_item>
\ No newline at end of file

master/bt5/slapos_erp5/LocalRolesTemplateItem/document_ingestion_module.xml

@@ -5,4 +5,10 @@
    <item>Author</item>
   </role>
  </local_roles>
+ <local_role_group_ids>
+  <local_role_group_id id='group'>
+    <principal id='G-COMPANY'>Auditor</principal>
+    <principal id='G-COMPANY'>Author</principal>
+  </local_role_group_id>
+ </local_role_group_ids>
 </local_roles_item>
\ No newline at end of file

master/bt5/slapos_erp5/LocalRolesTemplateItem/document_module.xml

@@ -14,4 +14,15 @@
    <item>Author</item>
   </role>
  </local_roles>
+ <local_role_group_ids>
+  <local_role_group_id id='group'>
+    <principal id='G-COMPANY'>Auditor</principal>
+    <principal id='G-COMPANY'>Author</principal>
+  </local_role_group_id>
+  <local_role_group_id id='user'>
+    <principal id='R-COMPUTER'>Author</principal>
+    <principal id='R-INSTANCE'>Author</principal>
+    <principal id='R-MEMBER'>Author</principal>
+  </local_role_group_id>
+ </local_role_group_ids>
 </local_roles_item>
\ No newline at end of file

master/bt5/slapos_erp5/LocalRolesTemplateItem/event_module.xml

@@ -9,4 +9,14 @@
    <item>Author</item>
   </role>
  </local_roles>
+ <local_role_group_ids>
+  <local_role_group_id id='group'>
+    <principal id='G-COMPANY'>Auditor</principal>
+    <principal id='G-COMPANY'>Author</principal>
+  </local_role_group_id>
+  <local_role_group_id id='user'>
+    <principal id='R-MEMBER'>Auditor</principal>
+    <principal id='R-MEMBER'>Author</principal>
+  </local_role_group_id>
+ </local_role_group_ids>
 </local_roles_item>
\ No newline at end of file

master/bt5/slapos_erp5/LocalRolesTemplateItem/event_module/slapos_crm_web_message_template.xml

@@ -7,4 +7,12 @@
    <item>Auditor</item>
   </role>
  </local_roles>
+ <local_role_group_ids>
+  <local_role_group_id id='group'>
+    <principal id='G-COMPANY'>Assignor</principal>
+  </local_role_group_id>
+  <local_role_group_id id='user'>
+    <principal id='R-MEMBER'>Auditor</principal>
+  </local_role_group_id>
+ </local_role_group_ids>
 </local_roles_item>
\ No newline at end of file

master/bt5/slapos_erp5/LocalRolesTemplateItem/hosting_subscription_module.xml

@@ -15,4 +15,14 @@
    <item>Author</item>
   </role>
  </local_roles>
+ <local_role_group_ids>
+  <local_role_group_id id='group'>
+    <principal id='G-COMPANY'>Auditor</principal>
+    <principal id='G-COMPANY'>Author</principal>
+  </local_role_group_id>
+  <local_role_group_id id='user'>
+    <principal id='R-MEMBER'>Auditor</principal>
+    <principal id='R-MEMBER'>Author</principal>
+  </local_role_group_id>
+ </local_role_group_ids>
 </local_roles_item>
\ No newline at end of file

master/bt5/slapos_erp5/LocalRolesTemplateItem/image_module.xml

@@ -14,4 +14,15 @@
    <item>Author</item>
   </role>
  </local_roles>
+ <local_role_group_ids>
+  <local_role_group_id id='group'>
+    <principal id='G-COMPANY'>Auditor</principal>
+    <principal id='G-COMPANY'>Author</principal>
+  </local_role_group_id>
+  <local_role_group_id id='user'>
+    <principal id='R-COMPUTER'>Author</principal>
+    <principal id='R-INSTANCE'>Author</principal>
+    <principal id='R-MEMBER'>Author</principal>
+  </local_role_group_id>
+ </local_role_group_ids>
 </local_roles_item>
\ No newline at end of file

master/bt5/slapos_erp5/LocalRolesTemplateItem/inventory_module.xml

@@ -5,4 +5,10 @@
    <item>Author</item>
   </role>
  </local_roles>
+ <local_role_group_ids>
+  <local_role_group_id id='group'>
+    <principal id='G-COMPANY'>Auditor</principal>
+    <principal id='G-COMPANY'>Author</principal>
+  </local_role_group_id>
+ </local_role_group_ids>
 </local_roles_item>
\ No newline at end of file

master/bt5/slapos_erp5/LocalRolesTemplateItem/knowledge_pad_module.xml

@@ -5,4 +5,10 @@
    <item>Author</item>
   </role>
  </local_roles>
+ <local_role_group_ids>
+  <local_role_group_id id='group'>
+    <principal id='G-COMPANY'>Auditor</principal>
+    <principal id='G-COMPANY'>Author</principal>
+  </local_role_group_id>
+ </local_role_group_ids>
 </local_roles_item>
\ No newline at end of file

master/bt5/slapos_erp5/LocalRolesTemplateItem/meeting_module.xml

@@ -5,4 +5,10 @@
    <item>Author</item>
   </role>
  </local_roles>
+ <local_role_group_ids>
+  <local_role_group_id id='group'>
+    <principal id='G-COMPANY'>Auditor</principal>
+    <principal id='G-COMPANY'>Author</principal>
+  </local_role_group_id>
+ </local_role_group_ids>
 </local_roles_item>
\ No newline at end of file

master/bt5/slapos_erp5/LocalRolesTemplateItem/notification_message_module.xml

@@ -5,4 +5,10 @@
    <item>Author</item>
   </role>
  </local_roles>
+ <local_role_group_ids>
+  <local_role_group_id id='group'>
+    <principal id='G-COMPANY'>Auditor</principal>
+    <principal id='G-COMPANY'>Author</principal>
+  </local_role_group_id>
+ </local_role_group_ids>
 </local_roles_item>
\ No newline at end of file

master/bt5/slapos_erp5/LocalRolesTemplateItem/open_sale_order_module.xml

@@ -5,4 +5,10 @@
    <item>Author</item>
   </role>
  </local_roles>
+ <local_role_group_ids>
+  <local_role_group_id id='group'>
+    <principal id='G-COMPANY'>Auditor</principal>
+    <principal id='G-COMPANY'>Author</principal>
+  </local_role_group_id>
+ </local_role_group_ids>
 </local_roles_item>
\ No newline at end of file

master/bt5/slapos_erp5/LocalRolesTemplateItem/organisation_module.xml

@@ -23,5 +23,9 @@
   <local_role_group_id id='shadow'>
     <principal id='R-SHADOW-PERSON'>Auditor</principal>
   </local_role_group_id>
+  <local_role_group_id id='user'>
+    <principal id='R-MEMBER'>Auditor</principal>
+    <principal id='R-MEMBER'>Author</principal>
+  </local_role_group_id>
  </local_role_group_ids>
 </local_roles_item>
\ No newline at end of file

master/bt5/slapos_erp5/LocalRolesTemplateItem/organisation_module/slapos.xml

 <local_roles_item>
  <local_roles>
+  <role id='ERP5TypeTestCase'>
+   <item>Assignee</item>
+  </role>
   <role id='G-COMPANY'>
    <item>Assignor</item>
   </role>
@@ -10,4 +13,15 @@
    <item>Auditor</item>
   </role>
  </local_roles>
+ <local_role_group_ids>
+  <local_role_group_id id='group'>
+    <principal id='G-COMPANY'>Assignor</principal>
+  </local_role_group_id>
+  <local_role_group_id id='shadow'>
+    <principal id='R-SHADOW-PERSON'>Auditor</principal>
+  </local_role_group_id>
+  <local_role_group_id id='user'>
+    <principal id='ERP5TypeTestCase'>Assignee</principal>
+  </local_role_group_id>
+ </local_role_group_ids>
 </local_roles_item>
\ No newline at end of file

master/bt5/slapos_erp5/LocalRolesTemplateItem/organisation_module/slapos/bank_account.xml

@@ -4,4 +4,9 @@
    <item>Assignor</item>
   </role>
  </local_roles>
+ <local_role_group_ids>
+  <local_role_group_id id='group'>
+    <principal id='G-COMPANY'>Assignor</principal>
+  </local_role_group_id>
+ </local_role_group_ids>
 </local_roles_item>
\ No newline at end of file

master/bt5/slapos_erp5/LocalRolesTemplateItem/person_module.xml

@@ -11,4 +11,16 @@
    <item>Auditor</item>
   </role>
  </local_roles>
+ <local_role_group_ids>
+  <local_role_group_id id='group'>
+    <principal id='G-COMPANY'>Auditor</principal>
+    <principal id='G-COMPANY'>Author</principal>
+  </local_role_group_id>
+  <local_role_group_id id='shadow'>
+    <principal id='R-SHADOW-PERSON'>Auditor</principal>
+  </local_role_group_id>
+  <local_role_group_id id='user'>
+    <principal id='R-MEMBER'>Auditor</principal>
+  </local_role_group_id>
+ </local_role_group_ids>
 </local_roles_item>
\ No newline at end of file

master/bt5/slapos_erp5/LocalRolesTemplateItem/portal_contributions.xml

@@ -14,4 +14,15 @@
    <item>Author</item>
   </role>
  </local_roles>
+ <local_role_group_ids>
+  <local_role_group_id id='group'>
+    <principal id='G-COMPANY'>Auditor</principal>
+    <principal id='G-COMPANY'>Author</principal>
+  </local_role_group_id>
+  <local_role_group_id id='user'>
+    <principal id='R-COMPUTER'>Author</principal>
+    <principal id='R-INSTANCE'>Author</principal>
+    <principal id='R-MEMBER'>Author</principal>
+  </local_role_group_id>
+ </local_role_group_ids>
 </local_roles_item>
\ No newline at end of file

master/bt5/slapos_erp5/LocalRolesTemplateItem/portal_gadgets.xml

@@ -5,4 +5,10 @@
    <item>Author</item>
   </role>
  </local_roles>
+ <local_role_group_ids>
+  <local_role_group_id id='group'>
+    <principal id='G-COMPANY'>Auditor</principal>
+    <principal id='G-COMPANY'>Author</principal>
+  </local_role_group_id>
+ </local_role_group_ids>
 </local_roles_item>
\ No newline at end of file

master/bt5/slapos_erp5/LocalRolesTemplateItem/portal_integrations.xml

@@ -8,4 +8,13 @@
    <item>Auditor</item>
   </role>
  </local_roles>
+ <local_role_group_ids>
+  <local_role_group_id id='group'>
+    <principal id='G-COMPANY'>Auditor</principal>
+    <principal id='G-COMPANY'>Author</principal>
+  </local_role_group_id>
+  <local_role_group_id id='shadow'>
+    <principal id='R-SHADOW-PERSON'>Auditor</principal>
+  </local_role_group_id>
+ </local_role_group_ids>
 </local_roles_item>
\ No newline at end of file

master/bt5/slapos_erp5/LocalRolesTemplateItem/portal_integrations/slapos_payzen_test_integration.xml

@@ -8,4 +8,13 @@
    <item>Author</item>
   </role>
  </local_roles>
+ <local_role_group_ids>
+  <local_role_group_id id='group'>
+    <principal id='G-COMPANY'>Assignor</principal>
+  </local_role_group_id>
+  <local_role_group_id id='shadow'>
+    <principal id='R-SHADOW-PERSON'>Auditor</principal>
+    <principal id='R-SHADOW-PERSON'>Author</principal>
+  </local_role_group_id>
+ </local_role_group_ids>
 </local_roles_item>
\ No newline at end of file

master/bt5/slapos_erp5/LocalRolesTemplateItem/product_module.xml

@@ -5,4 +5,10 @@
    <item>Author</item>
   </role>
  </local_roles>
+ <local_role_group_ids>
+  <local_role_group_id id='group'>
+    <principal id='G-COMPANY'>Auditor</principal>
+    <principal id='G-COMPANY'>Author</principal>
+  </local_role_group_id>
+ </local_role_group_ids>
 </local_roles_item>
\ No newline at end of file

master/bt5/slapos_erp5/LocalRolesTemplateItem/project_module.xml

@@ -15,4 +15,17 @@
    <item>Auditor</item>
   </role>
  </local_roles>
+ <local_role_group_ids>
+  <local_role_group_id id='group'>
+    <principal id='G-COMPANY'>Auditor</principal>
+    <principal id='G-COMPANY'>Author</principal>
+  </local_role_group_id>
+  <local_role_group_id id='shadow'>
+    <principal id='R-SHADOW-PERSON'>Auditor</principal>
+  </local_role_group_id>
+  <local_role_group_id id='user'>
+    <principal id='R-MEMBER'>Auditor</principal>
+    <principal id='R-MEMBER'>Author</principal>
+  </local_role_group_id>
+ </local_role_group_ids>
 </local_roles_item>
\ No newline at end of file

master/bt5/slapos_erp5/LocalRolesTemplateItem/purchase_order_module.xml

@@ -5,4 +5,10 @@
    <item>Author</item>
   </role>
  </local_roles>
+ <local_role_group_ids>
+  <local_role_group_id id='group'>
+    <principal id='G-COMPANY'>Auditor</principal>
+    <principal id='G-COMPANY'>Author</principal>
+  </local_role_group_id>
+ </local_role_group_ids>
 </local_roles_item>
\ No newline at end of file

master/bt5/slapos_erp5/LocalRolesTemplateItem/purchase_trade_condition_module.xml

@@ -5,4 +5,10 @@
    <item>Author</item>
   </role>
  </local_roles>
+ <local_role_group_ids>
+  <local_role_group_id id='group'>
+    <principal id='G-COMPANY'>Auditor</principal>
+    <principal id='G-COMPANY'>Author</principal>
+  </local_role_group_id>
+ </local_role_group_ids>
 </local_roles_item>
\ No newline at end of file

master/bt5/slapos_erp5/LocalRolesTemplateItem/query_module.xml

@@ -5,4 +5,10 @@
    <item>Author</item>
   </role>
  </local_roles>
+ <local_role_group_ids>
+  <local_role_group_id id='group'>
+    <principal id='G-COMPANY'>Auditor</principal>
+    <principal id='G-COMPANY'>Author</principal>
+  </local_role_group_id>
+ </local_role_group_ids>
 </local_roles_item>
\ No newline at end of file

master/bt5/slapos_erp5/LocalRolesTemplateItem/regularisation_request_module.xml

@@ -8,4 +8,13 @@
    <item>Auditor</item>
   </role>
  </local_roles>
+ <local_role_group_ids>
+  <local_role_group_id id='group'>
+    <principal id='G-COMPANY'>Auditor</principal>
+    <principal id='G-COMPANY'>Author</principal>
+  </local_role_group_id>
+  <local_role_group_id id='user'>
+    <principal id='R-MEMBER'>Auditor</principal>
+  </local_role_group_id>
+ </local_role_group_ids>
 </local_roles_item>
\ No newline at end of file

master/bt5/slapos_erp5/LocalRolesTemplateItem/regularisation_request_module/slapos_crm_regularisation_request_template.xml

@@ -7,4 +7,12 @@
    <item>Auditor</item>
   </role>
  </local_roles>
+ <local_role_group_ids>
+  <local_role_group_id id='group'>
+    <principal id='G-COMPANY'>Assignor</principal>
+  </local_role_group_id>
+  <local_role_group_id id='user'>
+    <principal id='R-MEMBER'>Auditor</principal>
+  </local_role_group_id>
+ </local_role_group_ids>
 </local_roles_item>
\ No newline at end of file

master/bt5/slapos_erp5/LocalRolesTemplateItem/sale_opportunity_module.xml

@@ -5,4 +5,10 @@
    <item>Author</item>
   </role>
  </local_roles>
+ <local_role_group_ids>
+  <local_role_group_id id='group'>
+    <principal id='G-COMPANY'>Auditor</principal>
+    <principal id='G-COMPANY'>Author</principal>
+  </local_role_group_id>
+ </local_role_group_ids>
 </local_roles_item>
\ No newline at end of file

master/bt5/slapos_erp5/LocalRolesTemplateItem/sale_order_module.xml

@@ -5,4 +5,10 @@
    <item>Author</item>
   </role>
  </local_roles>
+ <local_role_group_ids>
+  <local_role_group_id id='group'>
+    <principal id='G-COMPANY'>Auditor</principal>
+    <principal id='G-COMPANY'>Author</principal>
+  </local_role_group_id>
+ </local_role_group_ids>
 </local_roles_item>
\ No newline at end of file

master/bt5/slapos_erp5/LocalRolesTemplateItem/sale_packing_list_module.xml

@@ -8,4 +8,13 @@
    <item>Auditor</item>
   </role>
  </local_roles>
+ <local_role_group_ids>
+  <local_role_group_id id='group'>
+    <principal id='G-COMPANY'>Auditor</principal>
+    <principal id='G-COMPANY'>Author</principal>
+  </local_role_group_id>
+  <local_role_group_id id='user'>
+    <principal id='R-MEMBER'>Auditor</principal>
+  </local_role_group_id>
+ </local_role_group_ids>
 </local_roles_item>
\ No newline at end of file

master/bt5/slapos_erp5/LocalRolesTemplateItem/sale_trade_condition_module.xml

@@ -8,4 +8,13 @@
    <item>Auditor</item>
   </role>
  </local_roles>
+ <local_role_group_ids>
+  <local_role_group_id id='group'>
+    <principal id='G-COMPANY'>Auditor</principal>
+    <principal id='G-COMPANY'>Author</principal>
+  </local_role_group_id>
+  <local_role_group_id id='user'>
+    <principal id='R-MEMBER'>Auditor</principal>
+  </local_role_group_id>
+ </local_role_group_ids>
 </local_roles_item>
\ No newline at end of file

master/bt5/slapos_erp5/LocalRolesTemplateItem/service_module.xml

@@ -8,4 +8,13 @@
    <item>Auditor</item>
   </role>
  </local_roles>
+ <local_role_group_ids>
+  <local_role_group_id id='group'>
+    <principal id='G-COMPANY'>Auditor</principal>
+    <principal id='G-COMPANY'>Author</principal>
+  </local_role_group_id>
+  <local_role_group_id id='user'>
+    <principal id='R-MEMBER'>Auditor</principal>
+  </local_role_group_id>
+ </local_role_group_ids>
 </local_roles_item>
\ No newline at end of file

master/bt5/slapos_erp5/LocalRolesTemplateItem/service_module/cpu_load_percent.xml

@@ -7,4 +7,12 @@
    <item>Auditor</item>
   </role>
  </local_roles>
+ <local_role_group_ids>
+  <local_role_group_id id='group'>
+    <principal id='G-COMPANY'>Assignor</principal>
+  </local_role_group_id>
+  <local_role_group_id id='user'>
+    <principal id='R-MEMBER'>Auditor</principal>
+  </local_role_group_id>
+ </local_role_group_ids>
 </local_roles_item>
\ No newline at end of file

master/bt5/slapos_erp5/LocalRolesTemplateItem/service_module/memory_used.xml

@@ -7,4 +7,12 @@
    <item>Auditor</item>
   </role>
  </local_roles>
+ <local_role_group_ids>
+  <local_role_group_id id='group'>
+    <principal id='G-COMPANY'>Assignor</principal>
+  </local_role_group_id>
+  <local_role_group_id id='user'>
+    <principal id='R-MEMBER'>Auditor</principal>
+  </local_role_group_id>
+ </local_role_group_ids>
 </local_roles_item>
\ No newline at end of file

master/bt5/slapos_erp5/LocalRolesTemplateItem/service_module/slapos_account_validation.xml

@@ -7,4 +7,12 @@
    <item>Auditor</item>
   </role>
  </local_roles>
+ <local_role_group_ids>
+  <local_role_group_id id='group'>
+    <principal id='G-COMPANY'>Assignor</principal>
+  </local_role_group_id>
+  <local_role_group_id id='user'>
+    <principal id='R-MEMBER'>Auditor</principal>
+  </local_role_group_id>
+ </local_role_group_ids>
 </local_roles_item>
\ No newline at end of file

master/bt5/slapos_erp5/LocalRolesTemplateItem/service_module/slapos_crm_acknowledgement.xml

@@ -7,4 +7,12 @@
    <item>Auditor</item>
   </role>
  </local_roles>
+ <local_role_group_ids>
+  <local_role_group_id id='group'>
+    <principal id='G-COMPANY'>Assignor</principal>
+  </local_role_group_id>
+  <local_role_group_id id='user'>
+    <principal id='R-MEMBER'>Auditor</principal>
+  </local_role_group_id>
+ </local_role_group_ids>
 </local_roles_item>
\ No newline at end of file

master/bt5/slapos_erp5/LocalRolesTemplateItem/service_module/slapos_crm_complaint.xml

@@ -7,4 +7,12 @@
    <item>Auditor</item>
   </role>
  </local_roles>
+ <local_role_group_ids>
+  <local_role_group_id id='group'>
+    <principal id='G-COMPANY'>Assignor</principal>
+  </local_role_group_id>
+  <local_role_group_id id='user'>
+    <principal id='R-MEMBER'>Auditor</principal>
+  </local_role_group_id>
+ </local_role_group_ids>
 </local_roles_item>
\ No newline at end of file

master/bt5/slapos_erp5/LocalRolesTemplateItem/service_module/slapos_crm_delete_acknowledgement.xml

@@ -7,4 +7,12 @@
    <item>Auditor</item>
   </role>
  </local_roles>
+ <local_role_group_ids>
+  <local_role_group_id id='group'>
+    <principal id='G-COMPANY'>Assignor</principal>
+  </local_role_group_id>
+  <local_role_group_id id='user'>
+    <principal id='R-MEMBER'>Auditor</principal>
+  </local_role_group_id>
+ </local_role_group_ids>
 </local_roles_item>
\ No newline at end of file

master/bt5/slapos_erp5/LocalRolesTemplateItem/service_module/slapos_crm_delete_reminder.xml

@@ -7,4 +7,12 @@
    <item>Auditor</item>
   </role>
  </local_roles>
+ <local_role_group_ids>
+  <local_role_group_id id='group'>
+    <principal id='G-COMPANY'>Assignor</principal>
+  </local_role_group_id>
+  <local_role_group_id id='user'>
+    <principal id='R-MEMBER'>Auditor</principal>
+  </local_role_group_id>
+ </local_role_group_ids>
 </local_roles_item>
\ No newline at end of file

master/bt5/slapos_erp5/LocalRolesTemplateItem/service_module/slapos_crm_information.xml

@@ -7,4 +7,12 @@
    <item>Auditor</item>
   </role>
  </local_roles>
+ <local_role_group_ids>
+  <local_role_group_id id='group'>
+    <principal id='G-COMPANY'>Assignor</principal>
+  </local_role_group_id>
+  <local_role_group_id id='user'>
+    <principal id='R-MEMBER'>Auditor</principal>
+  </local_role_group_id>
+ </local_role_group_ids>
 </local_roles_item>
\ No newline at end of file

master/bt5/slapos_erp5/LocalRolesTemplateItem/service_module/slapos_crm_invoice_cancellation.xml

@@ -7,4 +7,12 @@
    <item>Auditor</item>
   </role>
  </local_roles>
+ <local_role_group_ids>
+  <local_role_group_id id='group'>
+    <principal id='G-COMPANY'>Assignor</principal>
+  </local_role_group_id>
+  <local_role_group_id id='user'>
+    <principal id='R-MEMBER'>Auditor</principal>
+  </local_role_group_id>
+ </local_role_group_ids>
 </local_roles_item>
\ No newline at end of file

master/bt5/slapos_erp5/LocalRolesTemplateItem/service_module/slapos_crm_monitoring.xml

@@ -7,4 +7,12 @@
    <item>Auditor</item>
   </role>
  </local_roles>
+ <local_role_group_ids>
+  <local_role_group_id id='group'>
+    <principal id='G-COMPANY'>Assignor</principal>
+  </local_role_group_id>
+  <local_role_group_id id='user'>
+    <principal id='R-MEMBER'>Auditor</principal>
+  </local_role_group_id>
+ </local_role_group_ids>
 </local_roles_item>
\ No newline at end of file

master/bt5/slapos_erp5/LocalRolesTemplateItem/service_module/slapos_crm_spam.xml

@@ -7,4 +7,12 @@
    <item>Auditor</item>
   </role>
  </local_roles>
+ <local_role_group_ids>
+  <local_role_group_id id='group'>
+    <principal id='G-COMPANY'>Assignor</principal>
+  </local_role_group_id>
+  <local_role_group_id id='user'>
+    <principal id='R-MEMBER'>Auditor</principal>
+  </local_role_group_id>
+ </local_role_group_ids>
 </local_roles_item>
\ No newline at end of file

master/bt5/slapos_erp5/LocalRolesTemplateItem/service_module/slapos_crm_stop_acknowledgement.xml

@@ -7,4 +7,12 @@
    <item>Auditor</item>
   </role>
  </local_roles>
+ <local_role_group_ids>
+  <local_role_group_id id='group'>
+    <principal id='G-COMPANY'>Assignor</principal>
+  </local_role_group_id>
+  <local_role_group_id id='user'>
+    <principal id='R-MEMBER'>Auditor</principal>
+  </local_role_group_id>
+ </local_role_group_ids>
 </local_roles_item>
\ No newline at end of file

master/bt5/slapos_erp5/LocalRolesTemplateItem/service_module/slapos_crm_stop_reminder.xml

@@ -7,4 +7,12 @@
    <item>Auditor</item>
   </role>
  </local_roles>
+ <local_role_group_ids>
+  <local_role_group_id id='group'>
+    <principal id='G-COMPANY'>Assignor</principal>
+  </local_role_group_id>
+  <local_role_group_id id='user'>
+    <principal id='R-MEMBER'>Auditor</principal>
+  </local_role_group_id>
+ </local_role_group_ids>
 </local_roles_item>
\ No newline at end of file

master/bt5/slapos_erp5/LocalRolesTemplateItem/service_module/slapos_crm_upgrade.xml

@@ -7,4 +7,12 @@
    <item>Auditor</item>
   </role>
  </local_roles>
+ <local_role_group_ids>
+  <local_role_group_id id='group'>
+    <principal id='G-COMPANY'>Assignor</principal>
+  </local_role_group_id>
+  <local_role_group_id id='user'>
+    <principal id='R-MEMBER'>Auditor</principal>
+  </local_role_group_id>
+ </local_role_group_ids>
 </local_roles_item>
\ No newline at end of file

master/bt5/slapos_erp5/LocalRolesTemplateItem/service_module/slapos_discount.xml

@@ -7,4 +7,12 @@
    <item>Auditor</item>
   </role>
  </local_roles>
+ <local_role_group_ids>
+  <local_role_group_id id='group'>
+    <principal id='G-COMPANY'>Assignor</principal>
+  </local_role_group_id>
+  <local_role_group_id id='user'>
+    <principal id='R-MEMBER'>Auditor</principal>
+  </local_role_group_id>
+ </local_role_group_ids>
 </local_roles_item>
\ No newline at end of file

master/bt5/slapos_erp5/LocalRolesTemplateItem/service_module/slapos_instance_cleanup.xml

@@ -7,4 +7,12 @@
    <item>Auditor</item>
   </role>
  </local_roles>
+ <local_role_group_ids>
+  <local_role_group_id id='group'>
+    <principal id='G-COMPANY'>Assignor</principal>
+  </local_role_group_id>
+  <local_role_group_id id='user'>
+    <principal id='R-MEMBER'>Auditor</principal>
+  </local_role_group_id>
+ </local_role_group_ids>
 </local_roles_item>
\ No newline at end of file

master/bt5/slapos_erp5/LocalRolesTemplateItem/service_module/slapos_instance_hosting.xml

@@ -7,4 +7,12 @@
    <item>Auditor</item>
   </role>
  </local_roles>
+ <local_role_group_ids>
+  <local_role_group_id id='group'>
+    <principal id='G-COMPANY'>Assignor</principal>
+  </local_role_group_id>
+  <local_role_group_id id='user'>
+    <principal id='R-MEMBER'>Auditor</principal>
+  </local_role_group_id>
+ </local_role_group_ids>
 </local_roles_item>
\ No newline at end of file

master/bt5/slapos_erp5/LocalRolesTemplateItem/service_module/slapos_instance_setup.xml

@@ -7,4 +7,12 @@
    <item>Auditor</item>
   </role>
  </local_roles>
+ <local_role_group_ids>
+  <local_role_group_id id='group'>
+    <principal id='G-COMPANY'>Assignor</principal>
+  </local_role_group_id>
+  <local_role_group_id id='user'>
+    <principal id='R-MEMBER'>Auditor</principal>
+  </local_role_group_id>
+ </local_role_group_ids>
 </local_roles_item>
\ No newline at end of file

master/bt5/slapos_erp5/LocalRolesTemplateItem/service_module/slapos_instance_subscription.xml

@@ -7,4 +7,12 @@
    <item>Auditor</item>
   </role>
  </local_roles>
+ <local_role_group_ids>
+  <local_role_group_id id='group'>
+    <principal id='G-COMPANY'>Assignor</principal>
+  </local_role_group_id>
+  <local_role_group_id id='user'>
+    <principal id='R-MEMBER'>Auditor</principal>
+  </local_role_group_id>
+ </local_role_group_ids>
 </local_roles_item>
\ No newline at end of file

master/bt5/slapos_erp5/LocalRolesTemplateItem/service_module/slapos_instance_update.xml

@@ -7,4 +7,12 @@
    <item>Auditor</item>
   </role>
  </local_roles>
+ <local_role_group_ids>
+  <local_role_group_id id='group'>
+    <principal id='G-COMPANY'>Assignor</principal>
+  </local_role_group_id>
+  <local_role_group_id id='user'>
+    <principal id='R-MEMBER'>Auditor</principal>
+  </local_role_group_id>
+ </local_role_group_ids>
 </local_roles_item>
\ No newline at end of file

master/bt5/slapos_erp5/LocalRolesTemplateItem/service_module/slapos_netdrive_consumption.xml

@@ -7,4 +7,12 @@
    <item>Auditor</item>
   </role>
  </local_roles>
+ <local_role_group_ids>
+  <local_role_group_id id='group'>
+    <principal id='G-COMPANY'>Assignor</principal>
+  </local_role_group_id>
+  <local_role_group_id id='user'>
+    <principal id='R-MEMBER'>Auditor</principal>
+  </local_role_group_id>
+ </local_role_group_ids>
 </local_roles_item>
\ No newline at end of file

master/bt5/slapos_erp5/LocalRolesTemplateItem/service_module/slapos_tax.xml

@@ -7,4 +7,12 @@
    <item>Auditor</item>
   </role>
  </local_roles>
+ <local_role_group_ids>
+  <local_role_group_id id='group'>
+    <principal id='G-COMPANY'>Assignor</principal>
+  </local_role_group_id>
+  <local_role_group_id id='user'>
+    <principal id='R-MEMBER'>Auditor</principal>
+  </local_role_group_id>
+ </local_role_group_ids>
 </local_roles_item>
\ No newline at end of file

master/bt5/slapos_erp5/LocalRolesTemplateItem/service_module/zero_emission_ratio.xml

@@ -7,4 +7,12 @@
    <item>Auditor</item>
   </role>
  </local_roles>
+ <local_role_group_ids>
+  <local_role_group_id id='group'>
+    <principal id='G-COMPANY'>Assignor</principal>
+  </local_role_group_id>
+  <local_role_group_id id='user'>
+    <principal id='R-MEMBER'>Auditor</principal>
+  </local_role_group_id>
+ </local_role_group_ids>
 </local_roles_item>
\ No newline at end of file

master/bt5/slapos_erp5/LocalRolesTemplateItem/software_installation_module.xml

@@ -12,4 +12,17 @@
    <item>Author</item>
   </role>
  </local_roles>
+ <local_role_group_ids>
+  <local_role_group_id id='computer'>
+    <principal id='R-COMPUTER'>Auditor</principal>
+  </local_role_group_id>
+  <local_role_group_id id='group'>
+    <principal id='G-COMPANY'>Auditor</principal>
+    <principal id='G-COMPANY'>Author</principal>
+  </local_role_group_id>
+  <local_role_group_id id='user'>
+    <principal id='R-MEMBER'>Auditor</principal>
+    <principal id='R-MEMBER'>Author</principal>
+  </local_role_group_id>
+ </local_role_group_ids>
 </local_roles_item>
\ No newline at end of file

master/bt5/slapos_erp5/LocalRolesTemplateItem/software_instance_module.xml

@@ -16,4 +16,14 @@
    <item>Author</item>
   </role>
  </local_roles>
+ <local_role_group_ids>
+  <local_role_group_id id='group'>
+    <principal id='G-COMPANY'>Auditor</principal>
+    <principal id='G-COMPANY'>Author</principal>
+  </local_role_group_id>
+  <local_role_group_id id='user'>
+    <principal id='R-MEMBER'>Auditor</principal>
+    <principal id='R-MEMBER'>Author</principal>
+  </local_role_group_id>
+ </local_role_group_ids>
 </local_roles_item>
\ No newline at end of file

master/bt5/slapos_erp5/LocalRolesTemplateItem/software_product_module.xml

@@ -8,4 +8,13 @@
    <item>Auditor</item>
   </role>
  </local_roles>
+ <local_role_group_ids>
+  <local_role_group_id id='group'>
+    <principal id='G-COMPANY'>Auditor</principal>
+    <principal id='G-COMPANY'>Author</principal>
+  </local_role_group_id>
+  <local_role_group_id id='user'>
+    <principal id='R-MEMBER'>Auditor</principal>
+  </local_role_group_id>
+ </local_role_group_ids>
 </local_roles_item>
\ No newline at end of file