slapos_erp5: create trade condition which could be applied to subscribe to a virtual master

master/bt5/slapos_erp5/PortalTypeRolesTemplateItem/Sale%20Trade%20Condition.xml

@@ -7,7 +7,7 @@
   </role>
   <role id='Auditor'>
    <property id='title'>Destination Member</property>
-   <property id='condition'>python: context.getDestination('', portal_type='Person') != ""
+   <property id='condition'>python: (context.getValidationState() == 'validated') and (context.getDestination('', portal_type='Person') != "")
 </property>
    <property id='base_category_script'>ERP5Type_getSecurityCategoryFromContent</property>
    <multi_property id='categories'>local_role_group/user</multi_property>
@@ -15,12 +15,20 @@
   </role>
   <role id='Auditor'>
    <property id='title'>Destination Project Member</property>
-   <property id='condition'>python: context.getDestinationProject('', portal_type='Project') != ""
+   <property id='condition'>python: (context.getValidationState() == 'validated') and (context.getDestination('') == "") and (context.getDestinationProject('') != "")
 </property>
    <property id='base_category_script'>ERP5Type_getSecurityCategoryFromContent</property>
    <multi_property id='categories'>local_role_group/project</multi_property>
    <multi_property id='base_category'>destination_project</multi_property>
   </role>
+  <role id='Auditor'>
+   <property id='title'>Global for all Customers</property>
+   <property id='condition'>python: (context.getValidationState() == 'validated') and (context.getDestination('') == "") and (context.getDestinationProject('') == "")
+</property>
+   <multi_property id='categories'>local_role_group/function</multi_property>
+   <multi_property id='category'>function/customer</multi_property>
+   <multi_property id='base_category'>function</multi_property>
+  </role>
   <role id='Auditor'>
    <property id='title'>Person Shadow</property>
    <multi_property id='categories'>local_role_group/shadow</multi_property>