I am just testing and a novice so it might be entirely my fault. I am using Odoo v8
When loggin in as user.
Menu > Sales > Customers
Clicking on Sales order, then trying to Cancel Order the error is produced. The order is created by admin, but is for this customer. User has portal access is template user. Has access rights as user to sales. technical, public and is assigned Customer status.
---- error
AccessError
The requested operation cannot be completed due to security restrictions. Please contact your system administrator.
(Document type: stock.picking, Operation: read)
The user that you're logging in with doesn't have read rights on the table stock.picking, that is why you're getting this error. Give the user access to warehouse and it should be fine I believe.
Thing is giving access to warehouse is what this user should not have. By doing so user can access stockmoves etc... So not ideal. And it did not solve the problem. Still same error Client logs in --> can view their quotation or sales. Accept / Deny / Cancel or create invoice them. Now I think that Odoo doesnt really support this. Because best scenario would be that the client also creates a sale (purchase) order to us. This is the reason I am giving access, so a client can order at 03h00 and when distribution walks in at lets say 05h00 they can dispatch the order. For me that would really mean taking full advantage of the full capacity or this erp. I love it from my end. But doesnt really give the same ability towards customers... And no portal webshop isnt something I am looking for.. nice for shop kiddies but not for business use.