accounting: allow Associate role to pass transitions on accounting transactions

f0808ac6 (workflow: add workflow transition guard for non-user
actions as well., 2015-11-18) broke some custom security
configurations where doing an action on a document would modify an
accounting transaction - but the user doing this action does not have
access to accounting.

This repairs the situation for accounting, by using the Associate
role. The idea is that for such patterns where users "do something
which will interact with accounting", the users also need an
Associate role on accounting transaction portal types, which is in
line with the meaning of Associate.

bt5/erp5_accounting/WorkflowTemplateItem/portal_workflow/accounting_workflow/transition_confirm.xml

@@ -42,15 +42,18 @@
         <item>
             <key> <string>guard_permission</string> </key>
             <value>
-              <tuple>
-                <string>Modify portal content</string>
-              </tuple>
+              <tuple/>
             </value>
         </item>
         <item>
             <key> <string>guard_role</string> </key>
             <value>
-              <tuple/>
+              <tuple>
+                <string>Assignee</string>
+                <string>Assignor</string>
+                <string>Associate</string>
+                <string>Owner</string>
+              </tuple>
             </value>
         </item>
         <item>

bt5/erp5_accounting/WorkflowTemplateItem/portal_workflow/accounting_workflow/transition_deliver.xml

@@ -48,6 +48,7 @@
             <value>
               <tuple>
                 <string>Assignor</string>
+                <string>Associate</string>
               </tuple>
             </value>
         </item>

bt5/erp5_accounting/WorkflowTemplateItem/portal_workflow/accounting_workflow/transition_plan.xml

@@ -40,15 +40,18 @@
         <item>
             <key> <string>guard_permission</string> </key>
             <value>
-              <tuple>
-                <string>Modify portal content</string>
-              </tuple>
+              <tuple/>
             </value>
         </item>
         <item>
             <key> <string>guard_role</string> </key>
             <value>
-              <tuple/>
+              <tuple>
+                <string>Assignee</string>
+                <string>Assignor</string>
+                <string>Associate</string>
+                <string>Owner</string>
+              </tuple>
             </value>
         </item>
         <item>

bt5/erp5_accounting/WorkflowTemplateItem/portal_workflow/accounting_workflow/transition_restart.xml

@@ -50,6 +50,7 @@
               <tuple>
                 <string>Assignee</string>
                 <string>Assignor</string>
+                <string>Associate</string>
               </tuple>
             </value>
         </item>

bt5/erp5_accounting/WorkflowTemplateItem/portal_workflow/accounting_workflow/transition_start.xml

@@ -41,15 +41,17 @@
         <item>
             <key> <string>guard_permission</string> </key>
             <value>
-              <tuple>
-                <string>Modify portal content</string>
-              </tuple>
+              <tuple/>
             </value>
         </item>
         <item>
             <key> <string>guard_role</string> </key>
             <value>
-              <tuple/>
+              <tuple>
+                <string>Assignee</string>
+                <string>Assignor</string>
+                <string>Associate</string>
+              </tuple>
             </value>
         </item>
         <item>

bt5/erp5_accounting/WorkflowTemplateItem/portal_workflow/accounting_workflow/transition_stop.xml

@@ -51,6 +51,7 @@
               <tuple>
                 <string>Assignor</string>
                 <string>Assignee</string>
+                <string>Associate</string>
               </tuple>
             </value>
         </item>

bt5/erp5_accounting/WorkflowTemplateItem/portal_workflow/internal_invoice_transaction_simulation_workflow/transition_cancel.xml

@@ -48,9 +48,10 @@
             <key> <string>guard_role</string> </key>
             <value>
               <tuple>
-                <string>Assignor</string>
                 <string>Assignee</string>
+                <string>Assignor</string>
                 <string>Associate</string>
+                <string>Owner</string>
               </tuple>
             </value>
         </item>

bt5/erp5_accounting/WorkflowTemplateItem/portal_workflow/internal_invoice_transaction_simulation_workflow/transition_confirm.xml

@@ -41,15 +41,18 @@
         <item>
             <key> <string>guard_permission</string> </key>
             <value>
-              <tuple>
-                <string>Modify portal content</string>
-              </tuple>
+              <tuple/>
             </value>
         </item>
         <item>
             <key> <string>guard_role</string> </key>
             <value>
-              <tuple/>
+              <tuple>
+                <string>Assignee</string>
+                <string>Assignor</string>
+                <string>Associate</string>
+                <string>Owner</string>
+              </tuple>
             </value>
         </item>
         <item>

bt5/erp5_accounting/WorkflowTemplateItem/portal_workflow/internal_invoice_transaction_simulation_workflow/transition_deliver.xml

@@ -48,6 +48,7 @@
             <value>
               <tuple>
                 <string>Assignor</string>
+                <string>Associate</string>
               </tuple>
             </value>
         </item>

bt5/erp5_accounting/WorkflowTemplateItem/portal_workflow/internal_invoice_transaction_simulation_workflow/transition_plan.xml

@@ -40,15 +40,18 @@
         <item>
             <key> <string>guard_permission</string> </key>
             <value>
-              <tuple>
-                <string>Modify portal content</string>
-              </tuple>
+              <tuple/>
             </value>
         </item>
         <item>
             <key> <string>guard_role</string> </key>
             <value>
-              <tuple/>
+              <tuple>
+                <string>Assignee</string>
+                <string>Assignor</string>
+                <string>Associate</string>
+                <string>Owner</string>
+              </tuple>
             </value>
         </item>
         <item>

bt5/erp5_accounting/WorkflowTemplateItem/portal_workflow/internal_invoice_transaction_simulation_workflow/transition_restart.xml

@@ -68,6 +68,7 @@
               <tuple>
                 <string>Assignee</string>
                 <string>Assignor</string>
+                <string>Associate</string>
               </tuple>
             </value>
         </item>

bt5/erp5_accounting/WorkflowTemplateItem/portal_workflow/internal_invoice_transaction_simulation_workflow/transition_start.xml

@@ -59,15 +59,17 @@
         <item>
             <key> <string>guard_permission</string> </key>
             <value>
-              <tuple>
-                <string>Modify portal content</string>
-              </tuple>
+              <tuple/>
             </value>
         </item>
         <item>
             <key> <string>guard_role</string> </key>
             <value>
-              <tuple/>
+              <tuple>
+                <string>Assignee</string>
+                <string>Assignor</string>
+                <string>Associate</string>
+              </tuple>
             </value>
         </item>
         <item>

bt5/erp5_accounting/WorkflowTemplateItem/portal_workflow/internal_invoice_transaction_simulation_workflow/transition_stop.xml

@@ -51,6 +51,7 @@
               <tuple>
                 <string>Assignee</string>
                 <string>Assignor</string>
+                <string>Associate</string>
               </tuple>
             </value>
         </item>