openerp - odoo: user cannot read from an object -

in odoo user cannot read object sale.order
in group warehouse/manager has rights: read , write on sale.order
got in shell:

[gcc 4.8.2] on linux2 type "help", "copyright", "credits" or "license" more information. (console) >>> so=self.pool.get('sale.order').browse(self._cr, 60, 100) >>> so.name traceback (most recent call last):   file "<console>", line 1, in <module>   file "/opt/odoo/odoo/openerp/fields.py", line 820, in __get__     self.determine_value(record)   file "/opt/odoo/odoo/openerp/fields.py", line 913, in determine_value     record._prefetch_field(self)   file "/opt/odoo/odoo/openerp/api.py", line 266, in wrapper     return new_api(self, *args, **kwargs)   file "/opt/odoo/odoo/openerp/models.py", line 3246, in _prefetch_field     result = self.read(list(fnames), load='_classic_write')   file "/opt/odoo/odoo/openerp/api.py", line 266, in wrapper     return new_api(self, *args, **kwargs)   file "/opt/odoo/odoo/openerp/models.py", line 3191, in read     values[name] = field.convert_to_read(record[name], use_name_get)   file "/opt/odoo/odoo/openerp/models.py", line 5641, in __getitem__     return self._fields[key].__get__(self, type(self))   file "/opt/odoo/odoo/openerp/fields.py", line 813, in __get__     return record._cache[self]   file "/opt/odoo/odoo/openerp/models.py", line 6024, in __getitem__     return value.get() if isinstance(value, specialvalue) else value   file "/opt/odoo/odoo/openerp/fields.py", line 55, in     raise self.exception accesserror: ('accesserror', u'the requested operation cannot completed due security restrictions. please contact system administrator.\n\n(document type: sale.order, operation: read)') 

do have idea problem ?

these following rules access rights in odoo.

global rules subtractive, must matched record accessible

group rules additive, if of them matches (and global rules match) record accessible

so need here following:

head settings -> security -> record rules use search search "object contains sale.order"

now try activating/de-activating rules see 1 of them causes issue. remember there rule not allow user see orders has not created.

start there