slapos_erp5: only provide Author access to computer on Consumption Document Module

master/bt5/slapos_erp5/LocalRolesTemplateItem/consumption_document_module.xml

 <local_roles_item>
  <local_roles>
-  <role id='G-COMPANY'>
-   <item>Auditor</item>
-   <item>Author</item>
-  </role>
   <role id='R-COMPUTER'>
    <item>Author</item>
   </role>
-  <role id='R-MEMBER'>
-   <item>Auditor</item>
-   <item>Author</item>
-  </role>
  </local_roles>
  <local_role_group_ids>
   <local_role_group_id id='computer'>
     <principal id='R-COMPUTER'>Author</principal>
   </local_role_group_id>
-  <local_role_group_id id='group'>
-    <principal id='G-COMPANY'>Auditor</principal>
-    <principal id='G-COMPANY'>Author</principal>
-  </local_role_group_id>
-  <local_role_group_id id='user'>
-    <principal id='R-MEMBER'>Auditor</principal>
-    <principal id='R-MEMBER'>Author</principal>
-  </local_role_group_id>
  </local_role_group_ids>
 </local_roles_item>
\ No newline at end of file

master/bt5/slapos_erp5/PortalTypeRolesTemplateItem/Consumption%20Document%20Module.xml

@@ -5,16 +5,4 @@
    <multi_property id='category'>role/computer</multi_property>
    <multi_property id='base_category'>role</multi_property>
   </role>
-  <role id='Author; Auditor'>
-   <property id='title'>Group company</property>
-   <multi_property id='categories'>local_role_group/group</multi_property>
-   <multi_property id='category'>group/company</multi_property>
-   <multi_property id='base_category'>group</multi_property>
-  </role>
-  <role id='Auditor; Author'>
-   <property id='title'>Member</property>
-   <multi_property id='categories'>local_role_group/user</multi_property>
-   <multi_property id='category'>role/member</multi_property>
-   <multi_property id='base_category'>role</multi_property>
-  </role>
 </type_roles>
\ No newline at end of file

master/bt5/slapos_erp5/TestTemplateItem/portal_components/test.erp5.testSlapOSERP5GroupRoleSecurity.py

@@ -2000,3 +2000,12 @@ class TestRestrictedAccessToken(TestSlapOSGroupRoleSecurityMixin):
     self.assertRoles(delivery, self.user_id, ['Owner'])
     self.assertRoles(delivery, person.getUserId(), ['Auditor'])
 
+
+class TestConsumptionDocumentModule(TestSlapOSGroupRoleSecurityMixin):
+  def test_ConsumptionDocumentModule(self):
+    module = self.portal.consumption_document_module
+    self.assertSecurityGroup(module,
+        ['R-COMPUTER', module.Base_getOwnerId()], False)
+    self.assertRoles(module, 'R-COMPUTER', ['Author'])
+    self.assertRoles(module, module.Base_getOwnerId(), ['Owner'])
+