slapos_erp5: drop Modification permissions if document uses an automated ledger

master/bt5/slapos_erp5/PortalTypeRolesTemplateItem/Accounting%20Transaction.xml

 <type_roles>
   <role id='Assignor'>
    <property id='title'>Group company</property>
+   <property id='condition'>python: context.getLedger("") != "automated"</property>
    <multi_property id='categories'>local_role_group/group</multi_property>
    <multi_property id='category'>group/company</multi_property>
    <multi_property id='base_category'>group</multi_property>

master/bt5/slapos_erp5/PortalTypeRolesTemplateItem/Balance%20Transaction.xml

 <type_roles>
   <role id='Assignor'>
    <property id='title'>Group company</property>
+   <property id='condition'>python: context.getLedger("") != "automated"</property>
    <multi_property id='categories'>local_role_group/group</multi_property>
    <multi_property id='category'>group/company</multi_property>
    <multi_property id='base_category'>group</multi_property>

master/bt5/slapos_erp5/PortalTypeRolesTemplateItem/Open%20Sale%20Order.xml

 <type_roles>
   <role id='Assignor'>
    <property id='title'>Group company</property>
+   <property id='condition'>python: context.getLedger("") != "automated"</property>
    <multi_property id='categories'>local_role_group/group</multi_property>
    <multi_property id='category'>group/company</multi_property>
    <multi_property id='base_category'>group</multi_property>

master/bt5/slapos_erp5/PortalTypeRolesTemplateItem/Payment%20Transaction.xml

 <type_roles>
   <role id='Assignor'>
    <property id='title'>Group company</property>
+   <property id='condition'>python: context.getLedger("") != "automated"</property>
    <multi_property id='categories'>local_role_group/group</multi_property>
    <multi_property id='category'>group/company</multi_property>
    <multi_property id='base_category'>group</multi_property>
@@ -21,7 +22,7 @@
   </role>
   <role id='Auditor'>
    <property id='title'>User</property>
-   <property id='condition'>python: here.getDestinationSection('', portal_type='Person') != ''</property>
+   <property id='condition'>python: (here.getDestinationSection('', portal_type='Person') != '') and (context.getLedger("") == "automated")</property>
    <property id='base_category_script'>ERP5Type_getSecurityCategoryFromContent</property>
    <multi_property id='categories'>local_role_group/user</multi_property>
    <multi_property id='base_category'>destination_section</multi_property>

master/bt5/slapos_erp5/PortalTypeRolesTemplateItem/Purchase%20Invoice%20Transaction.xml

 <type_roles>
   <role id='Assignor'>
    <property id='title'>Group company</property>
+   <property id='condition'>python: context.getLedger("") != "automated"</property>
    <multi_property id='categories'>local_role_group/group</multi_property>
    <multi_property id='category'>group/company</multi_property>
    <multi_property id='base_category'>group</multi_property>

master/bt5/slapos_erp5/PortalTypeRolesTemplateItem/Sale%20Invoice%20Transaction.xml

 <type_roles>
   <role id='Assignor'>
    <property id='title'>Group company</property>
+   <property id='condition'>python: context.getLedger("") != "automated"</property>
    <multi_property id='categories'>local_role_group/group</multi_property>
    <multi_property id='category'>group/company</multi_property>
    <multi_property id='base_category'>group</multi_property>
   </role>
   <role id='Assignee'>
    <property id='title'>Person Shadow</property>
+   <property id='condition'>python: context.getLedger("") == "automated"</property>
    <multi_property id='categories'>local_role_group/shadow</multi_property>
    <multi_property id='category'>role/shadow/person</multi_property>
    <multi_property id='base_category'>role</multi_property>
   </role>
   <role id='Auditor'>
    <property id='title'>User</property>
-   <property id='condition'>python: here.getDestinationSection('', portal_type='Person') != ''</property>
+   <property id='condition'>python: (here.getDestinationSection('', portal_type='Person') != '') and (context.getLedger("") == "automated")</property>
    <property id='base_category_script'>ERP5Type_getSecurityCategoryFromContent</property>
    <multi_property id='categories'>local_role_group/user</multi_property>
    <multi_property id='base_category'>destination_section</multi_property>