slapos_erp5: do not show dedicated Allocation Supply to all users

master/bt5/slapos_erp5/PortalTypeRolesTemplateItem/Allocation%20Supply.xml

 <type_roles>
+  <role id='Auditor'>
+   <property id='title'>Customer</property>
+   <property id='description'>Monovalued role</property>
+   <property id='condition'>python: (here.getDestinationValue(portal_type='Person') is not None) and (here.getValidationState() == 'validated')</property>
+   <property id='base_category_script'>ERP5Type_getSecurityCategoryFromContent</property>
+   <multi_property id='categories'>local_role_group/user</multi_property>
+   <multi_property id='base_category'>destination</multi_property>
+  </role>
   <role id='Auditor'>
    <property id='title'>Project Customer</property>
-   <property id='description'>XXX add local role group</property>
-   <property id='condition'>python: context.getDestinationProject("") != ""</property>
+   <property id='description'>XXX add local role group
+
+Only show to all project customer if it is not specific to a dedicated user</property>
+   <property id='condition'>python: (context.getDestinationProject("") != "") and (context.getDestination(None) is None) and (context.getValidationState() == 'validated')</property>
    <property id='base_category_script'>ERP5Type_getSecurityCategoryFromContent</property>
    <multi_property id='category'>function/customer</multi_property>
    <multi_property id='base_category'>destination_project</multi_property>

master/bt5/slapos_erp5/WorkflowTemplateItem/portal_workflow/local_permission_slapos_interaction_workflow/interaction_AllocationSupply_edit.xml

@@ -56,7 +56,9 @@
             <key> <string>trigger_method_id</string> </key>
             <value>
               <tuple>
-                <string>_setDestinationProject.*</string>
+                <string>_setDestination.*</string>
+                <string>validate</string>
+                <string>invalidate</string>
               </tuple>
             </value>
         </item>