slapos_erp5: instance of the project can access compute nodes

master/bt5/slapos_erp5/PortalTypeRolesTemplateItem/Compute%20Node.xml

@@ -14,4 +14,11 @@
    <multi_property id='categories'>local_role_group/computer</multi_property>
    <multi_property id='base_category'>destination_decision</multi_property>
   </role>
+  <role id='Auditor'>
+   <property id='title'>Software Instance</property>
+   <property id='condition'>python: context.getFollowUp("") != ""</property>
+   <property id='base_category_script'>ERP5Type_getSecurityCategoryFromContent</property>
+   <multi_property id='category'>role/instance</multi_property>
+   <multi_property id='base_category'>follow_up</multi_property>
+  </role>
 </type_roles>
\ No newline at end of file

master/bt5/slapos_erp5/SkinTemplateItem/portal_skins/slapos_core/ERP5Type_getSecurityCategoryMapping.py

@@ -20,6 +20,7 @@ return (
 
   # Instance security
   ('ERP5Type_getSoftwareInstanceSecurityCategory', ['role']),
+  ('ERP5Type_getSoftwareInstanceSecurityCategory', ['destination_project', 'role']),
   ('ERP5Type_getSoftwareInstanceSecurityCategory', ['aggregate']),
 
 )