slapos_erp5: set local_roles_group

6167a06f · Romain Courteaud · b7be689e · 6167a06f · 6167a06f · 6167a06f
Commit 6167a06f authored Feb 05, 2024 by Romain Courteaud
95 changed files
--- a/master/bt5/slapos_erp5/LocalRolesTemplateItem/access_token_module.xml
+++ b/master/bt5/slapos_erp5/LocalRolesTemplateItem/access_token_module.xml
@@ -4,4 +4,9 @@
   <item>Author</item>
  </role>
 </local_roles>
+ <local_role_group_ids>
+  <local_role_group_id id='function'>
+    <principal id='F-PRODUCTION*'>Author</principal>
+  </local_role_group_id>
+ </local_role_group_ids>
 </local_roles_item>
\ No newline at end of file
--- a/master/bt5/slapos_erp5/LocalRolesTemplateItem/accounting_module.xml
+++ b/master/bt5/slapos_erp5/LocalRolesTemplateItem/accounting_module.xml
@@ -19,6 +19,7 @@
    <principal id='F-ACCOUNTING*'>Auditor</principal>
    <principal id='F-ACCOUNTING*'>Author</principal>
    <principal id='F-CUSTOMER'>Auditor</principal>
+    <principal id='F-PRODUCTION*'>Auditor</principal>
  </local_role_group_id>
  <local_role_group_id id='shadow'>
    <principal id='R-SHADOW-PERSON'>Assignor</principal>

--- a/master/bt5/slapos_erp5/LocalRolesTemplateItem/allocation_supply_module.xml
+++ b/master/bt5/slapos_erp5/LocalRolesTemplateItem/allocation_supply_module.xml
@@ -11,6 +11,8 @@
 <local_role_group_ids>
  <local_role_group_id id='function'>
    <principal id='F-CUSTOMER'>Auditor</principal>
+    <principal id='F-PRODUCTION*'>Auditor</principal>
+    <principal id='F-PRODUCTION*'>Author</principal>
  </local_role_group_id>
 </local_role_group_ids>
 </local_roles_item>
\ No newline at end of file
--- a/master/bt5/slapos_erp5/LocalRolesTemplateItem/compute_node_module.xml
+++ b/master/bt5/slapos_erp5/LocalRolesTemplateItem/compute_node_module.xml
@@ -17,9 +17,12 @@
 <local_role_group_ids>
  <local_role_group_id id='computer'>
    <principal id='R-COMPUTER'>Auditor</principal>
+    <principal id='R-INSTANCE'>Auditor</principal>
  </local_role_group_id>
  <local_role_group_id id='function'>
    <principal id='F-CUSTOMER'>Auditor</principal>
+    <principal id='F-PRODUCTION*'>Auditor</principal>
+    <principal id='F-PRODUCTION*'>Author</principal>
  </local_role_group_id>
 </local_role_group_ids>
 </local_roles_item>
\ No newline at end of file
--- a/master/bt5/slapos_erp5/LocalRolesTemplateItem/computer_model_module.xml
+++ b/master/bt5/slapos_erp5/LocalRolesTemplateItem/computer_model_module.xml
@@ -14,6 +14,8 @@
 <local_role_group_ids>
  <local_role_group_id id='function'>
    <principal id='F-CUSTOMER'>Auditor</principal>
+    <principal id='F-PRODUCTION*'>Auditor</principal>
+    <principal id='F-PRODUCTION*'>Author</principal>
  </local_role_group_id>
  <local_role_group_id id='shadow'>
    <principal id='R-SHADOW-PERSON'>Auditor</principal>

--- a/master/bt5/slapos_erp5/LocalRolesTemplateItem/computer_network_module.xml
+++ b/master/bt5/slapos_erp5/LocalRolesTemplateItem/computer_network_module.xml
@@ -14,6 +14,8 @@
 <local_role_group_ids>
  <local_role_group_id id='function'>
    <principal id='F-CUSTOMER'>Auditor</principal>
+    <principal id='F-PRODUCTION*'>Auditor</principal>
+    <principal id='F-PRODUCTION*'>Author</principal>
  </local_role_group_id>
  <local_role_group_id id='shadow'>
    <principal id='R-SHADOW-PERSON'>Auditor</principal>

--- a/master/bt5/slapos_erp5/LocalRolesTemplateItem/credential_update_module.xml
+++ b/master/bt5/slapos_erp5/LocalRolesTemplateItem/credential_update_module.xml
@@ -23,6 +23,8 @@
    <principal id='F-ACCOUNTING*'>Author</principal>
    <principal id='F-CUSTOMER'>Auditor</principal>
    <principal id='F-CUSTOMER'>Author</principal>
+    <principal id='F-PRODUCTION*'>Auditor</principal>
+    <principal id='F-PRODUCTION*'>Author</principal>
    <principal id='F-SALE*'>Auditor</principal>
    <principal id='F-SALE*'>Author</principal>
  </local_role_group_id>

--- a/master/bt5/slapos_erp5/LocalRolesTemplateItem/currency_module.xml
+++ b/master/bt5/slapos_erp5/LocalRolesTemplateItem/currency_module.xml
@@ -22,6 +22,7 @@
    <principal id='F-ACCOUNTING*'>Auditor</principal>
    <principal id='F-ACCOUNTING*'>Author</principal>
    <principal id='F-CUSTOMER'>Auditor</principal>
+    <principal id='F-PRODUCTION*'>Auditor</principal>
    <principal id='F-SALE*'>Auditor</principal>
  </local_role_group_id>
  <local_role_group_id id='shadow'>

--- a/master/bt5/slapos_erp5/LocalRolesTemplateItem/event_module.xml
+++ b/master/bt5/slapos_erp5/LocalRolesTemplateItem/event_module.xml
@@ -13,6 +13,8 @@
  <local_role_group_id id='function'>
    <principal id='F-CUSTOMER'>Auditor</principal>
    <principal id='F-CUSTOMER'>Author</principal>
+    <principal id='F-PRODUCTION*'>Auditor</principal>
+    <principal id='F-PRODUCTION*'>Author</principal>
  </local_role_group_id>
 </local_role_group_ids>
 </local_roles_item>
\ No newline at end of file
--- a/master/bt5/slapos_erp5/LocalRolesTemplateItem/instance_tree_module.xml
+++ b/master/bt5/slapos_erp5/LocalRolesTemplateItem/instance_tree_module.xml
@@ -17,10 +17,12 @@
 <local_role_group_ids>
  <local_role_group_id id='computer'>
    <principal id='R-COMPUTER'>Auditor</principal>
+    <principal id='R-INSTANCE'>Auditor</principal>
  </local_role_group_id>
  <local_role_group_id id='function'>
    <principal id='F-CUSTOMER'>Auditor</principal>
    <principal id='F-CUSTOMER'>Author</principal>
+    <principal id='F-PRODUCTION*'>Auditor</principal>
  </local_role_group_id>
 </local_role_group_ids>
 </local_roles_item>
\ No newline at end of file
--- a/master/bt5/slapos_erp5/LocalRolesTemplateItem/person_module.xml
+++ b/master/bt5/slapos_erp5/LocalRolesTemplateItem/person_module.xml
@@ -23,6 +23,7 @@
    <principal id='F-ACCOUNTING*'>Auditor</principal>
    <principal id='F-ACCOUNTING*'>Author</principal>
    <principal id='F-CUSTOMER'>Auditor</principal>
+    <principal id='F-PRODUCTION*'>Auditor</principal>
    <principal id='F-SALE*'>Auditor</principal>
    <principal id='F-SALE*'>Author</principal>
  </local_role_group_id>

--- a/master/bt5/slapos_erp5/LocalRolesTemplateItem/project_module.xml
+++ b/master/bt5/slapos_erp5/LocalRolesTemplateItem/project_module.xml
@@ -23,10 +23,12 @@
 <local_role_group_ids>
  <local_role_group_id id='computer'>
    <principal id='R-COMPUTER'>Auditor</principal>
+    <principal id='R-INSTANCE'>Auditor</principal>
  </local_role_group_id>
  <local_role_group_id id='function'>
    <principal id='F-ACCOUNTING*'>Auditor</principal>
    <principal id='F-CUSTOMER'>Auditor</principal>
+    <principal id='F-PRODUCTION*'>Auditor</principal>
    <principal id='F-SALE*'>Auditor</principal>
    <principal id='F-SALE*'>Author</principal>
  </local_role_group_id>

--- a/master/bt5/slapos_erp5/LocalRolesTemplateItem/regularisation_request_module.xml
+++ b/master/bt5/slapos_erp5/LocalRolesTemplateItem/regularisation_request_module.xml
@@ -10,6 +10,7 @@
 <local_role_group_ids>
  <local_role_group_id id='function'>
    <principal id='F-CUSTOMER'>Auditor</principal>
+    <principal id='F-PRODUCTION*'>Auditor</principal>
  </local_role_group_id>
 </local_role_group_ids>
 </local_roles_item>
\ No newline at end of file
--- a/master/bt5/slapos_erp5/LocalRolesTemplateItem/service_module.xml
+++ b/master/bt5/slapos_erp5/LocalRolesTemplateItem/service_module.xml
@@ -15,7 +15,10 @@
 </local_roles>
 <local_role_group_ids>
  <local_role_group_id id='function'>
+    <principal id='F-ACCOUNTING*'>Auditor</principal>
    <principal id='F-CUSTOMER'>Auditor</principal>
+    <principal id='F-PRODUCTION*'>Auditor</principal>
+    <principal id='F-SALE*'>Auditor</principal>
  </local_role_group_id>
 </local_role_group_ids>
 </local_roles_item>
\ No newline at end of file
--- a/master/bt5/slapos_erp5/LocalRolesTemplateItem/service_module/cpu_load_percent.xml
+++ b/master/bt5/slapos_erp5/LocalRolesTemplateItem/service_module/cpu_load_percent.xml
@@ -13,4 +13,12 @@
   <item>Auditor</item>
  </role>
 </local_roles>
+ <local_role_group_ids>
+  <local_role_group_id id='function'>
+    <principal id='F-ACCOUNTING*'>Auditor</principal>
+    <principal id='F-CUSTOMER'>Auditor</principal>
+    <principal id='F-PRODUCTION*'>Auditor</principal>
+    <principal id='F-SALE*'>Auditor</principal>
+  </local_role_group_id>
+ </local_role_group_ids>
 </local_roles_item>
\ No newline at end of file
--- a/master/bt5/slapos_erp5/LocalRolesTemplateItem/service_module/memory_used.xml
+++ b/master/bt5/slapos_erp5/LocalRolesTemplateItem/service_module/memory_used.xml
@@ -13,4 +13,12 @@
   <item>Auditor</item>
  </role>
 </local_roles>
+ <local_role_group_ids>
+  <local_role_group_id id='function'>
+    <principal id='F-ACCOUNTING*'>Auditor</principal>
+    <principal id='F-CUSTOMER'>Auditor</principal>
+    <principal id='F-PRODUCTION*'>Auditor</principal>
+    <principal id='F-SALE*'>Auditor</principal>
+  </local_role_group_id>
+ </local_role_group_ids>
 </local_roles_item>
\ No newline at end of file
--- a/master/bt5/slapos_erp5/LocalRolesTemplateItem/service_module/slapos_account_validation.xml
+++ b/master/bt5/slapos_erp5/LocalRolesTemplateItem/service_module/slapos_account_validation.xml
@@ -13,4 +13,12 @@
   <item>Auditor</item>
  </role>
 </local_roles>
+ <local_role_group_ids>
+  <local_role_group_id id='function'>
+    <principal id='F-ACCOUNTING*'>Auditor</principal>
+    <principal id='F-CUSTOMER'>Auditor</principal>
+    <principal id='F-PRODUCTION*'>Auditor</principal>
+    <principal id='F-SALE*'>Auditor</principal>
+  </local_role_group_id>
+ </local_role_group_ids>
 </local_roles_item>
\ No newline at end of file
--- a/master/bt5/slapos_erp5/LocalRolesTemplateItem/service_module/slapos_compute_node_subscription.xml
+++ b/master/bt5/slapos_erp5/LocalRolesTemplateItem/service_module/slapos_compute_node_subscription.xml
@@ -13,4 +13,12 @@
   <item>Auditor</item>
  </role>
 </local_roles>
+ <local_role_group_ids>
+  <local_role_group_id id='function'>
+    <principal id='F-ACCOUNTING*'>Auditor</principal>
+    <principal id='F-CUSTOMER'>Auditor</principal>
+    <principal id='F-PRODUCTION*'>Auditor</principal>
+    <principal id='F-SALE*'>Auditor</principal>
+  </local_role_group_id>
+ </local_role_group_ids>
 </local_roles_item>
\ No newline at end of file
--- a/master/bt5/slapos_erp5/LocalRolesTemplateItem/service_module/slapos_crm_acknowledgement.xml
+++ b/master/bt5/slapos_erp5/LocalRolesTemplateItem/service_module/slapos_crm_acknowledgement.xml
@@ -13,4 +13,12 @@
   <item>Auditor</item>
  </role>
 </local_roles>
+ <local_role_group_ids>
+  <local_role_group_id id='function'>
+    <principal id='F-ACCOUNTING*'>Auditor</principal>
+    <principal id='F-CUSTOMER'>Auditor</principal>
+    <principal id='F-PRODUCTION*'>Auditor</principal>
+    <principal id='F-SALE*'>Auditor</principal>
+  </local_role_group_id>
+ </local_role_group_ids>
 </local_roles_item>
\ No newline at end of file
--- a/master/bt5/slapos_erp5/LocalRolesTemplateItem/service_module/slapos_crm_complaint.xml
+++ b/master/bt5/slapos_erp5/LocalRolesTemplateItem/service_module/slapos_crm_complaint.xml
@@ -13,4 +13,12 @@
   <item>Auditor</item>
  </role>
 </local_roles>
+ <local_role_group_ids>
+  <local_role_group_id id='function'>
+    <principal id='F-ACCOUNTING*'>Auditor</principal>
+    <principal id='F-CUSTOMER'>Auditor</principal>
+    <principal id='F-PRODUCTION*'>Auditor</principal>
+    <principal id='F-SALE*'>Auditor</principal>
+  </local_role_group_id>
+ </local_role_group_ids>
 </local_roles_item>
\ No newline at end of file
--- a/master/bt5/slapos_erp5/LocalRolesTemplateItem/service_module/slapos_crm_delete_acknowledgement.xml
+++ b/master/bt5/slapos_erp5/LocalRolesTemplateItem/service_module/slapos_crm_delete_acknowledgement.xml
@@ -13,4 +13,12 @@
   <item>Auditor</item>
  </role>
 </local_roles>
+ <local_role_group_ids>
+  <local_role_group_id id='function'>
+    <principal id='F-ACCOUNTING*'>Auditor</principal>
+    <principal id='F-CUSTOMER'>Auditor</principal>
+    <principal id='F-PRODUCTION*'>Auditor</principal>
+    <principal id='F-SALE*'>Auditor</principal>
+  </local_role_group_id>
+ </local_role_group_ids>
 </local_roles_item>
\ No newline at end of file
--- a/master/bt5/slapos_erp5/LocalRolesTemplateItem/service_module/slapos_crm_delete_reminder.xml
+++ b/master/bt5/slapos_erp5/LocalRolesTemplateItem/service_module/slapos_crm_delete_reminder.xml
@@ -13,4 +13,12 @@
   <item>Auditor</item>
  </role>
 </local_roles>
+ <local_role_group_ids>
+  <local_role_group_id id='function'>
+    <principal id='F-ACCOUNTING*'>Auditor</principal>
+    <principal id='F-CUSTOMER'>Auditor</principal>
+    <principal id='F-PRODUCTION*'>Auditor</principal>
+    <principal id='F-SALE*'>Auditor</principal>
+  </local_role_group_id>
+ </local_role_group_ids>
 </local_roles_item>
\ No newline at end of file
--- a/master/bt5/slapos_erp5/LocalRolesTemplateItem/service_module/slapos_crm_information.xml
+++ b/master/bt5/slapos_erp5/LocalRolesTemplateItem/service_module/slapos_crm_information.xml
@@ -13,4 +13,12 @@
   <item>Auditor</item>
  </role>
 </local_roles>
+ <local_role_group_ids>
+  <local_role_group_id id='function'>
+    <principal id='F-ACCOUNTING*'>Auditor</principal>
+    <principal id='F-CUSTOMER'>Auditor</principal>
+    <principal id='F-PRODUCTION*'>Auditor</principal>
+    <principal id='F-SALE*'>Auditor</principal>
+  </local_role_group_id>
+ </local_role_group_ids>
 </local_roles_item>
\ No newline at end of file
--- a/master/bt5/slapos_erp5/LocalRolesTemplateItem/service_module/slapos_crm_invoice_cancellation.xml
+++ b/master/bt5/slapos_erp5/LocalRolesTemplateItem/service_module/slapos_crm_invoice_cancellation.xml
@@ -13,4 +13,12 @@
   <item>Auditor</item>
  </role>
 </local_roles>
+ <local_role_group_ids>
+  <local_role_group_id id='function'>
+    <principal id='F-ACCOUNTING*'>Auditor</principal>
+    <principal id='F-CUSTOMER'>Auditor</principal>
+    <principal id='F-PRODUCTION*'>Auditor</principal>
+    <principal id='F-SALE*'>Auditor</principal>
+  </local_role_group_id>
+ </local_role_group_ids>
 </local_roles_item>
\ No newline at end of file
--- a/master/bt5/slapos_erp5/LocalRolesTemplateItem/service_module/slapos_crm_monitoring.xml
+++ b/master/bt5/slapos_erp5/LocalRolesTemplateItem/service_module/slapos_crm_monitoring.xml
@@ -13,4 +13,12 @@
   <item>Auditor</item>
  </role>
 </local_roles>
+ <local_role_group_ids>
+  <local_role_group_id id='function'>
+    <principal id='F-ACCOUNTING*'>Auditor</principal>
+    <principal id='F-CUSTOMER'>Auditor</principal>
+    <principal id='F-PRODUCTION*'>Auditor</principal>
+    <principal id='F-SALE*'>Auditor</principal>
+  </local_role_group_id>
+ </local_role_group_ids>
 </local_roles_item>
\ No newline at end of file
--- a/master/bt5/slapos_erp5/LocalRolesTemplateItem/service_module/slapos_crm_spam.xml
+++ b/master/bt5/slapos_erp5/LocalRolesTemplateItem/service_module/slapos_crm_spam.xml
@@ -13,4 +13,12 @@
   <item>Auditor</item>
  </role>
 </local_roles>
+ <local_role_group_ids>
+  <local_role_group_id id='function'>
+    <principal id='F-ACCOUNTING*'>Auditor</principal>
+    <principal id='F-CUSTOMER'>Auditor</principal>
+    <principal id='F-PRODUCTION*'>Auditor</principal>
+    <principal id='F-SALE*'>Auditor</principal>
+  </local_role_group_id>
+ </local_role_group_ids>
 </local_roles_item>
\ No newline at end of file
--- a/master/bt5/slapos_erp5/LocalRolesTemplateItem/service_module/slapos_crm_stop_acknowledgement.xml
+++ b/master/bt5/slapos_erp5/LocalRolesTemplateItem/service_module/slapos_crm_stop_acknowledgement.xml
@@ -13,4 +13,12 @@
   <item>Auditor</item>
  </role>
 </local_roles>
+ <local_role_group_ids>
+  <local_role_group_id id='function'>
+    <principal id='F-ACCOUNTING*'>Auditor</principal>
+    <principal id='F-CUSTOMER'>Auditor</principal>
+    <principal id='F-PRODUCTION*'>Auditor</principal>
+    <principal id='F-SALE*'>Auditor</principal>
+  </local_role_group_id>
+ </local_role_group_ids>
 </local_roles_item>
\ No newline at end of file
--- a/master/bt5/slapos_erp5/LocalRolesTemplateItem/service_module/slapos_crm_stop_reminder.xml
+++ b/master/bt5/slapos_erp5/LocalRolesTemplateItem/service_module/slapos_crm_stop_reminder.xml
@@ -13,4 +13,12 @@
   <item>Auditor</item>
  </role>
 </local_roles>
+ <local_role_group_ids>
+  <local_role_group_id id='function'>
+    <principal id='F-ACCOUNTING*'>Auditor</principal>
+    <principal id='F-CUSTOMER'>Auditor</principal>
+    <principal id='F-PRODUCTION*'>Auditor</principal>
+    <principal id='F-SALE*'>Auditor</principal>
+  </local_role_group_id>
+ </local_role_group_ids>
 </local_roles_item>
\ No newline at end of file
--- a/master/bt5/slapos_erp5/LocalRolesTemplateItem/service_module/slapos_crm_upgrade.xml
+++ b/master/bt5/slapos_erp5/LocalRolesTemplateItem/service_module/slapos_crm_upgrade.xml
@@ -13,4 +13,12 @@
   <item>Auditor</item>
  </role>
 </local_roles>
+ <local_role_group_ids>
+  <local_role_group_id id='function'>
+    <principal id='F-ACCOUNTING*'>Auditor</principal>
+    <principal id='F-CUSTOMER'>Auditor</principal>
+    <principal id='F-PRODUCTION*'>Auditor</principal>
+    <principal id='F-SALE*'>Auditor</principal>
+  </local_role_group_id>
+ </local_role_group_ids>
 </local_roles_item>
\ No newline at end of file
--- a/master/bt5/slapos_erp5/LocalRolesTemplateItem/service_module/slapos_discount.xml
+++ b/master/bt5/slapos_erp5/LocalRolesTemplateItem/service_module/slapos_discount.xml
@@ -13,4 +13,12 @@
   <item>Auditor</item>
  </role>
 </local_roles>
+ <local_role_group_ids>
+  <local_role_group_id id='function'>
+    <principal id='F-ACCOUNTING*'>Auditor</principal>
+    <principal id='F-CUSTOMER'>Auditor</principal>
+    <principal id='F-PRODUCTION*'>Auditor</principal>
+    <principal id='F-SALE*'>Auditor</principal>
+  </local_role_group_id>
+ </local_role_group_ids>
 </local_roles_item>
\ No newline at end of file
--- a/master/bt5/slapos_erp5/LocalRolesTemplateItem/service_module/slapos_instance_cleanup.xml
+++ b/master/bt5/slapos_erp5/LocalRolesTemplateItem/service_module/slapos_instance_cleanup.xml
@@ -13,4 +13,12 @@
   <item>Auditor</item>
  </role>
 </local_roles>
+ <local_role_group_ids>
+  <local_role_group_id id='function'>
+    <principal id='F-ACCOUNTING*'>Auditor</principal>
+    <principal id='F-CUSTOMER'>Auditor</principal>
+    <principal id='F-PRODUCTION*'>Auditor</principal>
+    <principal id='F-SALE*'>Auditor</principal>
+  </local_role_group_id>
+ </local_role_group_ids>
 </local_roles_item>
\ No newline at end of file
--- a/master/bt5/slapos_erp5/LocalRolesTemplateItem/service_module/slapos_instance_hosting.xml
+++ b/master/bt5/slapos_erp5/LocalRolesTemplateItem/service_module/slapos_instance_hosting.xml
@@ -13,4 +13,12 @@
   <item>Auditor</item>
  </role>
 </local_roles>
+ <local_role_group_ids>
+  <local_role_group_id id='function'>
+    <principal id='F-ACCOUNTING*'>Auditor</principal>
+    <principal id='F-CUSTOMER'>Auditor</principal>
+    <principal id='F-PRODUCTION*'>Auditor</principal>
+    <principal id='F-SALE*'>Auditor</principal>
+  </local_role_group_id>
+ </local_role_group_ids>
 </local_roles_item>
\ No newline at end of file
--- a/master/bt5/slapos_erp5/LocalRolesTemplateItem/service_module/slapos_instance_setup.xml
+++ b/master/bt5/slapos_erp5/LocalRolesTemplateItem/service_module/slapos_instance_setup.xml
@@ -13,4 +13,12 @@
   <item>Auditor</item>
  </role>
 </local_roles>
+ <local_role_group_ids>
+  <local_role_group_id id='function'>
+    <principal id='F-ACCOUNTING*'>Auditor</principal>
+    <principal id='F-CUSTOMER'>Auditor</principal>
+    <principal id='F-PRODUCTION*'>Auditor</principal>
+    <principal id='F-SALE*'>Auditor</principal>
+  </local_role_group_id>
+ </local_role_group_ids>
 </local_roles_item>
\ No newline at end of file
--- a/master/bt5/slapos_erp5/LocalRolesTemplateItem/service_module/slapos_instance_subscription.xml
+++ b/master/bt5/slapos_erp5/LocalRolesTemplateItem/service_module/slapos_instance_subscription.xml
@@ -13,4 +13,12 @@
   <item>Auditor</item>
  </role>
 </local_roles>
+ <local_role_group_ids>
+  <local_role_group_id id='function'>
+    <principal id='F-ACCOUNTING*'>Auditor</principal>
+    <principal id='F-CUSTOMER'>Auditor</principal>
+    <principal id='F-PRODUCTION*'>Auditor</principal>
+    <principal id='F-SALE*'>Auditor</principal>
+  </local_role_group_id>
+ </local_role_group_ids>
 </local_roles_item>
\ No newline at end of file
--- a/master/bt5/slapos_erp5/LocalRolesTemplateItem/service_module/slapos_instance_update.xml
+++ b/master/bt5/slapos_erp5/LocalRolesTemplateItem/service_module/slapos_instance_update.xml
@@ -13,4 +13,12 @@
   <item>Auditor</item>
  </role>
 </local_roles>
+ <local_role_group_ids>
+  <local_role_group_id id='function'>
+    <principal id='F-ACCOUNTING*'>Auditor</principal>
+    <principal id='F-CUSTOMER'>Auditor</principal>
+    <principal id='F-PRODUCTION*'>Auditor</principal>
+    <principal id='F-SALE*'>Auditor</principal>
+  </local_role_group_id>
+ </local_role_group_ids>
 </local_roles_item>
\ No newline at end of file
--- a/master/bt5/slapos_erp5/LocalRolesTemplateItem/service_module/slapos_netdrive_consumption.xml
+++ b/master/bt5/slapos_erp5/LocalRolesTemplateItem/service_module/slapos_netdrive_consumption.xml
@@ -13,4 +13,12 @@
   <item>Auditor</item>
  </role>
 </local_roles>
+ <local_role_group_ids>
+  <local_role_group_id id='function'>
+    <principal id='F-ACCOUNTING*'>Auditor</principal>
+    <principal id='F-CUSTOMER'>Auditor</principal>
+    <principal id='F-PRODUCTION*'>Auditor</principal>
+    <principal id='F-SALE*'>Auditor</principal>
+  </local_role_group_id>
+ </local_role_group_ids>
 </local_roles_item>
\ No newline at end of file
--- a/master/bt5/slapos_erp5/LocalRolesTemplateItem/service_module/slapos_reservation_fee.xml
+++ b/master/bt5/slapos_erp5/LocalRolesTemplateItem/service_module/slapos_reservation_fee.xml
@@ -13,4 +13,12 @@
   <item>Auditor</item>
  </role>
 </local_roles>
+ <local_role_group_ids>
+  <local_role_group_id id='function'>
+    <principal id='F-ACCOUNTING*'>Auditor</principal>
+    <principal id='F-CUSTOMER'>Auditor</principal>
+    <principal id='F-PRODUCTION*'>Auditor</principal>
+    <principal id='F-SALE*'>Auditor</principal>
+  </local_role_group_id>
+ </local_role_group_ids>
 </local_roles_item>
\ No newline at end of file
--- a/master/bt5/slapos_erp5/LocalRolesTemplateItem/service_module/slapos_reservation_refund.xml
+++ b/master/bt5/slapos_erp5/LocalRolesTemplateItem/service_module/slapos_reservation_refund.xml
@@ -13,4 +13,12 @@
   <item>Auditor</item>
  </role>
 </local_roles>
+ <local_role_group_ids>
+  <local_role_group_id id='function'>
+    <principal id='F-ACCOUNTING*'>Auditor</principal>
+    <principal id='F-CUSTOMER'>Auditor</principal>
+    <principal id='F-PRODUCTION*'>Auditor</principal>
+    <principal id='F-SALE*'>Auditor</principal>
+  </local_role_group_id>
+ </local_role_group_ids>
 </local_roles_item>
\ No newline at end of file
--- a/master/bt5/slapos_erp5/LocalRolesTemplateItem/service_module/slapos_tax.xml
+++ b/master/bt5/slapos_erp5/LocalRolesTemplateItem/service_module/slapos_tax.xml
@@ -13,4 +13,12 @@
   <item>Auditor</item>
  </role>
 </local_roles>
+ <local_role_group_ids>
+  <local_role_group_id id='function'>
+    <principal id='F-ACCOUNTING*'>Auditor</principal>
+    <principal id='F-CUSTOMER'>Auditor</principal>
+    <principal id='F-PRODUCTION*'>Auditor</principal>
+    <principal id='F-SALE*'>Auditor</principal>
+  </local_role_group_id>
+ </local_role_group_ids>
 </local_roles_item>
\ No newline at end of file
--- a/master/bt5/slapos_erp5/LocalRolesTemplateItem/service_module/slapos_virtual_master_subscription.xml
+++ b/master/bt5/slapos_erp5/LocalRolesTemplateItem/service_module/slapos_virtual_master_subscription.xml
@@ -13,4 +13,12 @@
   <item>Auditor</item>
  </role>
 </local_roles>
+ <local_role_group_ids>
+  <local_role_group_id id='function'>
+    <principal id='F-ACCOUNTING*'>Auditor</principal>
+    <principal id='F-CUSTOMER'>Auditor</principal>
+    <principal id='F-PRODUCTION*'>Auditor</principal>
+    <principal id='F-SALE*'>Auditor</principal>
+  </local_role_group_id>
+ </local_role_group_ids>
 </local_roles_item>
\ No newline at end of file
--- a/master/bt5/slapos_erp5/LocalRolesTemplateItem/service_module/zero_emission_ratio.xml
+++ b/master/bt5/slapos_erp5/LocalRolesTemplateItem/service_module/zero_emission_ratio.xml
@@ -13,4 +13,12 @@
   <item>Auditor</item>
  </role>
 </local_roles>
+ <local_role_group_ids>
+  <local_role_group_id id='function'>
+    <principal id='F-ACCOUNTING*'>Auditor</principal>
+    <principal id='F-CUSTOMER'>Auditor</principal>
+    <principal id='F-PRODUCTION*'>Auditor</principal>
+    <principal id='F-SALE*'>Auditor</principal>
+  </local_role_group_id>
+ </local_role_group_ids>
 </local_roles_item>
\ No newline at end of file
--- a/master/bt5/slapos_erp5/LocalRolesTemplateItem/software_instance_module.xml
+++ b/master/bt5/slapos_erp5/LocalRolesTemplateItem/software_instance_module.xml
@@ -18,10 +18,13 @@
 <local_role_group_ids>
  <local_role_group_id id='computer'>
    <principal id='R-COMPUTER'>Auditor</principal>
+    <principal id='R-INSTANCE'>Auditor</principal>
+    <principal id='R-INSTANCE'>Author</principal>
  </local_role_group_id>
  <local_role_group_id id='function'>
    <principal id='F-CUSTOMER'>Auditor</principal>
    <principal id='F-CUSTOMER'>Author</principal>
+    <principal id='F-PRODUCTION*'>Auditor</principal>
  </local_role_group_id>
 </local_role_group_ids>
 </local_roles_item>
\ No newline at end of file
--- a/master/bt5/slapos_erp5/LocalRolesTemplateItem/software_product_module.xml
+++ b/master/bt5/slapos_erp5/LocalRolesTemplateItem/software_product_module.xml
@@ -11,6 +11,8 @@
 <local_role_group_ids>
  <local_role_group_id id='function'>
    <principal id='F-CUSTOMER'>Auditor</principal>
+    <principal id='F-PRODUCTION*'>Auditor</principal>
+    <principal id='F-PRODUCTION*'>Author</principal>
  </local_role_group_id>
 </local_role_group_ids>
 </local_roles_item>
\ No newline at end of file
--- a/master/bt5/slapos_erp5/LocalRolesTemplateItem/support_request_module.xml
+++ b/master/bt5/slapos_erp5/LocalRolesTemplateItem/support_request_module.xml
@@ -13,6 +13,8 @@
  <local_role_group_id id='function'>
    <principal id='F-CUSTOMER'>Auditor</principal>
    <principal id='F-CUSTOMER'>Author</principal>
+    <principal id='F-PRODUCTION*'>Auditor</principal>
+    <principal id='F-PRODUCTION*'>Author</principal>
  </local_role_group_id>
 </local_role_group_ids>
 </local_roles_item>
\ No newline at end of file
--- a/master/bt5/slapos_erp5/LocalRolesTemplateItem/upgrade_decision_module.xml
+++ b/master/bt5/slapos_erp5/LocalRolesTemplateItem/upgrade_decision_module.xml
@@ -10,6 +10,7 @@
 <local_role_group_ids>
  <local_role_group_id id='function'>
    <principal id='F-CUSTOMER'>Auditor</principal>
+    <principal id='F-PRODUCTION*'>Auditor</principal>
  </local_role_group_id>
 </local_role_group_ids>
 </local_roles_item>
\ No newline at end of file
--- a/master/bt5/slapos_erp5/LocalRolesTemplateItem/web_page_module.xml
+++ b/master/bt5/slapos_erp5/LocalRolesTemplateItem/web_page_module.xml
@@ -5,4 +5,10 @@
   <item>Author</item>
  </role>
 </local_roles>
+ <local_role_group_ids>
+  <local_role_group_id id='function'>
+    <principal id='F-MARKETING*'>Auditor</principal>
+    <principal id='F-MARKETING*'>Author</principal>
+  </local_role_group_id>
+ </local_role_group_ids>
 </local_roles_item>
\ No newline at end of file
--- a/master/bt5/slapos_erp5/PortalTypeRolesTemplateItem/Access%20Token%20Module.xml
+++ b/master/bt5/slapos_erp5/PortalTypeRolesTemplateItem/Access%20Token%20Module.xml
 <type_roles>
  <role id='Author'>
   <property id='title'>Production</property>
+   <multi_property id='categories'>local_role_group/function</multi_property>
   <multi_property id='category'>function/production*</multi_property>
   <multi_property id='base_category'>function</multi_property>
  </role>

--- a/master/bt5/slapos_erp5/PortalTypeRolesTemplateItem/Accounting%20Transaction%20Module.xml
+++ b/master/bt5/slapos_erp5/PortalTypeRolesTemplateItem/Accounting%20Transaction%20Module.xml
@@ -19,6 +19,7 @@
  </role>
  <role id='Auditor'>
   <property id='title'>Production</property>
+   <multi_property id='categories'>local_role_group/function</multi_property>
   <multi_property id='category'>function/production*</multi_property>
   <multi_property id='base_category'>function</multi_property>
  </role>

--- a/master/bt5/slapos_erp5/PortalTypeRolesTemplateItem/Acknowledgement.xml
+++ b/master/bt5/slapos_erp5/PortalTypeRolesTemplateItem/Acknowledgement.xml
@@ -20,6 +20,7 @@
   <property id='description'>XXX add local role group</property>
   <property id='condition'>python: context.getDestinationProject('', portal_type='Project') != ""</property>
   <property id='base_category_script'>ERP5Type_getSecurityCategoryFromContent</property>
+   <multi_property id='categories'>local_role_group/project</multi_property>
   <multi_property id='category'>function/production/agent</multi_property>
   <multi_property id='base_category'>destination_project</multi_property>
  </role>
@@ -28,6 +29,7 @@
   <property id='description'>XXX add local role group</property>
   <property id='condition'>python: context.getDestinationProject('', portal_type='Project') != ""</property>
   <property id='base_category_script'>ERP5Type_getSecurityCategoryFromContent</property>
+   <multi_property id='categories'>local_role_group/project</multi_property>
   <multi_property id='category'>function/production/manager</multi_property>
   <multi_property id='base_category'>destination_project</multi_property>
  </role>
@@ -50,6 +52,7 @@
   <property id='description'>XXX add local role group</property>
   <property id='condition'>python: context.getSourceProject('', portal_type='Project') != ""</property>
   <property id='base_category_script'>ERP5Type_getSecurityCategoryFromContent</property>
+   <multi_property id='categories'>local_role_group/project</multi_property>
   <multi_property id='category'>function/production/agent</multi_property>
   <multi_property id='base_category'>source_project</multi_property>
   <multi_property id='base_category'>function</multi_property>
@@ -59,6 +62,7 @@
   <property id='description'>XXX add local role group</property>
   <property id='condition'>python: context.getSourceProject('', portal_type='Project') != ""</property>
   <property id='base_category_script'>ERP5Type_getSecurityCategoryFromContent</property>
+   <multi_property id='categories'>local_role_group/project</multi_property>
   <multi_property id='category'>function/production/manager</multi_property>
   <multi_property id='base_category'>source_project</multi_property>
   <multi_property id='base_category'>function</multi_property>

--- a/master/bt5/slapos_erp5/PortalTypeRolesTemplateItem/Allocation%20Supply%20Module.xml
+++ b/master/bt5/slapos_erp5/PortalTypeRolesTemplateItem/Allocation%20Supply%20Module.xml
@@ -7,6 +7,7 @@
  </role>
  <role id='Auditor; Author'>
   <property id='title'>Production</property>
+   <multi_property id='categories'>local_role_group/function</multi_property>
   <multi_property id='category'>function/production*</multi_property>
   <multi_property id='base_category'>function</multi_property>
  </role>

--- a/master/bt5/slapos_erp5/PortalTypeRolesTemplateItem/Allocation%20Supply.xml
+++ b/master/bt5/slapos_erp5/PortalTypeRolesTemplateItem/Allocation%20Supply.xml
@@ -14,6 +14,7 @@
 Only show to all project customer if it is not specific to a dedicated user</property>
   <property id='condition'>python: (context.getDestinationProject("") != "") and (context.getDestination(None) is None) and (context.getValidationState() == 'validated')</property>
   <property id='base_category_script'>ERP5Type_getSecurityCategoryFromContent</property>
+   <multi_property id='categories'>local_role_group/project</multi_property>
   <multi_property id='category'>function/customer</multi_property>
   <multi_property id='base_category'>destination_project</multi_property>
  </role>
@@ -22,6 +23,7 @@ Only show to all project customer if it is not specific to a dedicated user</pro
   <property id='description'>XXX add local role group</property>
   <property id='condition'>python: context.getDestinationProject("") != ""</property>
   <property id='base_category_script'>ERP5Type_getSecurityCategoryFromContent</property>
+   <multi_property id='categories'>local_role_group/project</multi_property>
   <multi_property id='category'>function/production/agent</multi_property>
   <multi_property id='base_category'>destination_project</multi_property>
  </role>
@@ -30,6 +32,7 @@ Only show to all project customer if it is not specific to a dedicated user</pro
   <property id='description'>XXX add local role group</property>
   <property id='condition'>python: context.getDestinationProject("") != ""</property>
   <property id='base_category_script'>ERP5Type_getSecurityCategoryFromContent</property>
+   <multi_property id='categories'>local_role_group/project</multi_property>
   <multi_property id='category'>function/production/manager</multi_property>
   <multi_property id='base_category'>destination_project</multi_property>
  </role>

--- a/master/bt5/slapos_erp5/PortalTypeRolesTemplateItem/Certificate%20Login.xml
+++ b/master/bt5/slapos_erp5/PortalTypeRolesTemplateItem/Certificate%20Login.xml
@@ -10,6 +10,7 @@
   <property id='title'>Project Production Agent</property>
   <property id='condition'>python: (here.getParentValue().getPortalType() == 'Compute Node') and (here.getParentValue().getFollowUp(None) is not None)</property>
   <property id='base_category_script'>ERP5Type_getSecurityCategoryFromParentContent</property>
+   <multi_property id='categories'>local_role_group/project</multi_property>
   <multi_property id='category'>function/production/agent</multi_property>
   <multi_property id='base_category'>follow_up</multi_property>
  </role>
@@ -17,6 +18,7 @@
   <property id='title'>Project Production Manager</property>
   <property id='condition'>python: (here.getParentValue().getPortalType() == 'Compute Node') and (here.getParentValue().getFollowUp(None) is not None)</property>
   <property id='base_category_script'>ERP5Type_getSecurityCategoryFromParentContent</property>
+   <multi_property id='categories'>local_role_group/project</multi_property>
   <multi_property id='category'>function/production/manager</multi_property>
   <multi_property id='base_category'>follow_up</multi_property>
  </role>

--- a/master/bt5/slapos_erp5/PortalTypeRolesTemplateItem/Compute%20Node%20Module.xml
+++ b/master/bt5/slapos_erp5/PortalTypeRolesTemplateItem/Compute%20Node%20Module.xml
@@ -7,6 +7,7 @@
  </role>
  <role id='Auditor'>
   <property id='title'>Instance</property>
+   <multi_property id='categories'>local_role_group/computer</multi_property>
   <multi_property id='category'>role/instance</multi_property>
   <multi_property id='base_category'>role</multi_property>
  </role>
@@ -18,6 +19,7 @@
  </role>
  <role id='Auditor; Author'>
   <property id='title'>Production</property>
+   <multi_property id='categories'>local_role_group/function</multi_property>
   <multi_property id='category'>function/production*</multi_property>
   <multi_property id='base_category'>function</multi_property>
  </role>

--- a/master/bt5/slapos_erp5/PortalTypeRolesTemplateItem/Compute%20Node.xml
+++ b/master/bt5/slapos_erp5/PortalTypeRolesTemplateItem/Compute%20Node.xml
@@ -4,6 +4,7 @@
   <property id='description'>XXX add local role group</property>
   <property id='condition'>python: context.getFollowUp("") != ""</property>
   <property id='base_category_script'>ERP5Type_getSecurityCategoryFromContent</property>
+   <multi_property id='categories'>local_role_group/project</multi_property>
   <multi_property id='category'>function/customer</multi_property>
   <multi_property id='base_category'>follow_up</multi_property>
  </role>
@@ -12,6 +13,7 @@
   <property id='description'>XXX add local role group</property>
   <property id='condition'>python: context.getFollowUp("") != ""</property>
   <property id='base_category_script'>ERP5Type_getSecurityCategoryFromContent</property>
+   <multi_property id='categories'>local_role_group/project</multi_property>
   <multi_property id='category'>function/production/agent</multi_property>
   <multi_property id='base_category'>follow_up</multi_property>
  </role>
@@ -20,6 +22,7 @@
   <property id='description'>XXX add local role group</property>
   <property id='condition'>python: context.getFollowUp("") != ""</property>
   <property id='base_category_script'>ERP5Type_getSecurityCategoryFromContent</property>
+   <multi_property id='categories'>local_role_group/project</multi_property>
   <multi_property id='category'>function/production/manager</multi_property>
   <multi_property id='base_category'>follow_up</multi_property>
  </role>
@@ -34,6 +37,7 @@
   <property id='title'>Software Instance</property>
   <property id='condition'>python: context.getFollowUp("") != ""</property>
   <property id='base_category_script'>ERP5Type_getSecurityCategoryFromContent</property>
+   <multi_property id='categories'>local_role_group/project</multi_property>
   <multi_property id='category'>role/instance</multi_property>
   <multi_property id='base_category'>follow_up</multi_property>
  </role>

--- a/master/bt5/slapos_erp5/PortalTypeRolesTemplateItem/Computer%20Model%20Module.xml
+++ b/master/bt5/slapos_erp5/PortalTypeRolesTemplateItem/Computer%20Model%20Module.xml
@@ -13,6 +13,7 @@
  </role>
  <role id='Auditor; Author'>
   <property id='title'>Production</property>
+   <multi_property id='categories'>local_role_group/function</multi_property>
   <multi_property id='category'>function/production*</multi_property>
   <multi_property id='base_category'>function</multi_property>
  </role>

--- a/master/bt5/slapos_erp5/PortalTypeRolesTemplateItem/Computer%20Model.xml
+++ b/master/bt5/slapos_erp5/PortalTypeRolesTemplateItem/Computer%20Model.xml
@@ -10,6 +10,7 @@
   <property id='description'>XXX add local role group</property>
   <property id='condition'>python: context.getFollowUp("") != ""</property>
   <property id='base_category_script'>ERP5Type_getSecurityCategoryFromContent</property>
+   <multi_property id='categories'>local_role_group/project</multi_property>
   <multi_property id='category'>function/customer</multi_property>
   <multi_property id='base_category'>follow_up</multi_property>
  </role>
@@ -18,6 +19,7 @@
   <property id='description'>XXX add local role group</property>
   <property id='condition'>python: context.getFollowUp("") != ""</property>
   <property id='base_category_script'>ERP5Type_getSecurityCategoryFromContent</property>
+   <multi_property id='categories'>local_role_group/project</multi_property>
   <multi_property id='category'>function/production/agent</multi_property>
   <multi_property id='base_category'>follow_up</multi_property>
  </role>
@@ -26,6 +28,7 @@
   <property id='description'>XXX add local role group</property>
   <property id='condition'>python: context.getFollowUp("") != ""</property>
   <property id='base_category_script'>ERP5Type_getSecurityCategoryFromContent</property>
+   <multi_property id='categories'>local_role_group/project</multi_property>
   <multi_property id='category'>function/production/manager</multi_property>
   <multi_property id='base_category'>follow_up</multi_property>
  </role>

--- a/master/bt5/slapos_erp5/PortalTypeRolesTemplateItem/Computer%20Network%20Module.xml
+++ b/master/bt5/slapos_erp5/PortalTypeRolesTemplateItem/Computer%20Network%20Module.xml
@@ -13,6 +13,7 @@
  </role>
  <role id='Auditor; Author'>
   <property id='title'>Production</property>
+   <multi_property id='categories'>local_role_group/function</multi_property>
   <multi_property id='category'>function/production*</multi_property>
   <multi_property id='base_category'>function</multi_property>
  </role>

--- a/master/bt5/slapos_erp5/PortalTypeRolesTemplateItem/Computer%20Network.xml
+++ b/master/bt5/slapos_erp5/PortalTypeRolesTemplateItem/Computer%20Network.xml
@@ -10,6 +10,7 @@
   <property id='description'>XXX add local role group</property>
   <property id='condition'>python: context.getFollowUp("") != ""</property>
   <property id='base_category_script'>ERP5Type_getSecurityCategoryFromContent</property>
+   <multi_property id='categories'>local_role_group/project</multi_property>
   <multi_property id='category'>function/customer</multi_property>
   <multi_property id='base_category'>follow_up</multi_property>
  </role>
@@ -18,6 +19,7 @@
   <property id='description'>XXX add local role group</property>
   <property id='condition'>python: context.getFollowUp("") != ""</property>
   <property id='base_category_script'>ERP5Type_getSecurityCategoryFromContent</property>
+   <multi_property id='categories'>local_role_group/project</multi_property>
   <multi_property id='category'>function/production/agent</multi_property>
   <multi_property id='base_category'>follow_up</multi_property>
  </role>
@@ -26,6 +28,7 @@
   <property id='description'>XXX add local role group</property>
   <property id='condition'>python: context.getFollowUp("") != ""</property>
   <property id='base_category_script'>ERP5Type_getSecurityCategoryFromContent</property>
+   <multi_property id='categories'>local_role_group/project</multi_property>
   <multi_property id='category'>function/production/manager</multi_property>
   <multi_property id='base_category'>follow_up</multi_property>
  </role>

--- a/master/bt5/slapos_erp5/PortalTypeRolesTemplateItem/Credential%20Update%20Module.xml
+++ b/master/bt5/slapos_erp5/PortalTypeRolesTemplateItem/Credential%20Update%20Module.xml
@@ -13,6 +13,7 @@
  </role>
  <role id='Author; Auditor'>
   <property id='title'>Production</property>
+   <multi_property id='categories'>local_role_group/function</multi_property>
   <multi_property id='category'>function/production*</multi_property>
   <multi_property id='base_category'>function</multi_property>
  </role>

--- a/master/bt5/slapos_erp5/PortalTypeRolesTemplateItem/Currency%20Module.xml
+++ b/master/bt5/slapos_erp5/PortalTypeRolesTemplateItem/Currency%20Module.xml
@@ -19,6 +19,7 @@
  </role>
  <role id='Auditor'>
   <property id='title'>Production</property>
+   <multi_property id='categories'>local_role_group/function</multi_property>
   <multi_property id='category'>function/production*</multi_property>
   <multi_property id='base_category'>function</multi_property>
  </role>

--- a/master/bt5/slapos_erp5/PortalTypeRolesTemplateItem/Currency.xml
+++ b/master/bt5/slapos_erp5/PortalTypeRolesTemplateItem/Currency.xml
@@ -14,6 +14,7 @@
  </role>
  <role id='Auditor'>
   <property id='title'>Member</property>
+   <multi_property id='categories'>local_role_group/function</multi_property>
   <multi_property id='category'>function/customer</multi_property>
   <multi_property id='base_category'>function</multi_property>
  </role>
@@ -25,11 +26,13 @@
  </role>
  <role id='Auditor'>
   <property id='title'>Production</property>
+   <multi_property id='categories'>local_role_group/function</multi_property>
   <multi_property id='category'>function/production*</multi_property>
   <multi_property id='base_category'>function</multi_property>
  </role>
  <role id='Auditor'>
   <property id='title'>Sale</property>
+   <multi_property id='categories'>local_role_group/function</multi_property>
   <multi_property id='category'>function/sale*</multi_property>
   <multi_property id='base_category'>function</multi_property>
  </role>

--- a/master/bt5/slapos_erp5/PortalTypeRolesTemplateItem/Event%20Module.xml
+++ b/master/bt5/slapos_erp5/PortalTypeRolesTemplateItem/Event%20Module.xml
@@ -7,6 +7,7 @@
  </role>
  <role id='Auditor; Author'>
   <property id='title'>Production</property>
+   <multi_property id='categories'>local_role_group/function</multi_property>
   <multi_property id='category'>function/production*</multi_property>
   <multi_property id='base_category'>function</multi_property>
  </role>

--- a/master/bt5/slapos_erp5/PortalTypeRolesTemplateItem/Fax%20Message.xml
+++ b/master/bt5/slapos_erp5/PortalTypeRolesTemplateItem/Fax%20Message.xml
@@ -20,6 +20,7 @@
   <property id='description'>XXX add local role group</property>
   <property id='condition'>python: context.getDestinationProject('', portal_type='Project') != ""</property>
   <property id='base_category_script'>ERP5Type_getSecurityCategoryFromContent</property>
+   <multi_property id='categories'>local_role_group/project</multi_property>
   <multi_property id='category'>function/production/agent</multi_property>
   <multi_property id='base_category'>destination_project</multi_property>
  </role>
@@ -28,6 +29,7 @@
   <property id='description'>XXX add local role group</property>
   <property id='condition'>python: context.getDestinationProject('', portal_type='Project') != ""</property>
   <property id='base_category_script'>ERP5Type_getSecurityCategoryFromContent</property>
+   <multi_property id='categories'>local_role_group/project</multi_property>
   <multi_property id='category'>function/production/manager</multi_property>
   <multi_property id='base_category'>destination_project</multi_property>
  </role>
@@ -50,6 +52,7 @@
   <property id='description'>XXX add local role group</property>
   <property id='condition'>python: context.getSourceProject('', portal_type='Project') != ""</property>
   <property id='base_category_script'>ERP5Type_getSecurityCategoryFromContent</property>
+   <multi_property id='categories'>local_role_group/project</multi_property>
   <multi_property id='category'>function/production/agent</multi_property>
   <multi_property id='base_category'>source_project</multi_property>
   <multi_property id='base_category'>function</multi_property>
@@ -59,6 +62,7 @@
   <property id='description'>XXX add local role group</property>
   <property id='condition'>python: context.getSourceProject('', portal_type='Project') != ""</property>
   <property id='base_category_script'>ERP5Type_getSecurityCategoryFromContent</property>
+   <multi_property id='categories'>local_role_group/project</multi_property>
   <multi_property id='category'>function/production/manager</multi_property>
   <multi_property id='base_category'>source_project</multi_property>
   <multi_property id='base_category'>function</multi_property>

--- a/master/bt5/slapos_erp5/PortalTypeRolesTemplateItem/Instance%20Node.xml
+++ b/master/bt5/slapos_erp5/PortalTypeRolesTemplateItem/Instance%20Node.xml
@@ -4,6 +4,7 @@
   <property id='description'>XXX add local role group</property>
   <property id='condition'>python: context.getFollowUp("") != ""</property>
   <property id='base_category_script'>ERP5Type_getSecurityCategoryFromContent</property>
+   <multi_property id='categories'>local_role_group/project</multi_property>
   <multi_property id='category'>function/customer</multi_property>
   <multi_property id='base_category'>follow_up</multi_property>
  </role>
@@ -12,6 +13,7 @@
   <property id='description'>XXX add local role group</property>
   <property id='condition'>python: context.getFollowUp("") != ""</property>
   <property id='base_category_script'>ERP5Type_getSecurityCategoryFromContent</property>
+   <multi_property id='categories'>local_role_group/project</multi_property>
   <multi_property id='category'>function/production/agent</multi_property>
   <multi_property id='base_category'>follow_up</multi_property>
  </role>
@@ -20,6 +22,7 @@
   <property id='description'>XXX add local role group</property>
   <property id='condition'>python: context.getFollowUp("") != ""</property>
   <property id='base_category_script'>ERP5Type_getSecurityCategoryFromContent</property>
+   <multi_property id='categories'>local_role_group/project</multi_property>
   <multi_property id='category'>function/production/manager</multi_property>
   <multi_property id='base_category'>follow_up</multi_property>
  </role>

--- a/master/bt5/slapos_erp5/PortalTypeRolesTemplateItem/Instance%20Tree%20Module.xml
+++ b/master/bt5/slapos_erp5/PortalTypeRolesTemplateItem/Instance%20Tree%20Module.xml
@@ -7,11 +7,13 @@
  </role>
  <role id='Auditor'>
   <property id='title'>Instance</property>
+   <multi_property id='categories'>local_role_group/computer</multi_property>
   <multi_property id='category'>role/instance</multi_property>
   <multi_property id='base_category'>role</multi_property>
  </role>
  <role id='Auditor'>
   <property id='title'>Production</property>
+   <multi_property id='categories'>local_role_group/function</multi_property>
   <multi_property id='category'>function/production*</multi_property>
   <multi_property id='base_category'>function</multi_property>
  </role>

--- a/master/bt5/slapos_erp5/PortalTypeRolesTemplateItem/Instance%20Tree.xml
+++ b/master/bt5/slapos_erp5/PortalTypeRolesTemplateItem/Instance%20Tree.xml
@@ -10,6 +10,7 @@
   <property id='description'>XXX add local role group</property>
   <property id='condition'>python: context.getFollowUp("") != ""</property>
   <property id='base_category_script'>ERP5Type_getSecurityCategoryFromContent</property>
+   <multi_property id='categories'>local_role_group/project</multi_property>
   <multi_property id='category'>function/production/agent</multi_property>
   <multi_property id='base_category'>follow_up</multi_property>
  </role>
@@ -18,6 +19,7 @@
   <property id='description'>XXX add local role group</property>
   <property id='condition'>python: context.getFollowUp("") != ""</property>
   <property id='base_category_script'>ERP5Type_getSecurityCategoryFromContent</property>
+   <multi_property id='categories'>local_role_group/project</multi_property>
   <multi_property id='category'>function/production/manager</multi_property>
   <multi_property id='base_category'>follow_up</multi_property>
  </role>

--- a/master/bt5/slapos_erp5/PortalTypeRolesTemplateItem/Letter.xml
+++ b/master/bt5/slapos_erp5/PortalTypeRolesTemplateItem/Letter.xml
@@ -20,6 +20,7 @@
   <property id='description'>XXX add local role group</property>
   <property id='condition'>python: context.getDestinationProject('', portal_type='Project') != ""</property>
   <property id='base_category_script'>ERP5Type_getSecurityCategoryFromContent</property>
+   <multi_property id='categories'>local_role_group/project</multi_property>
   <multi_property id='category'>function/production/agent</multi_property>
   <multi_property id='base_category'>destination_project</multi_property>
  </role>
@@ -28,6 +29,7 @@
   <property id='description'>XXX add local role group</property>
   <property id='condition'>python: context.getDestinationProject('', portal_type='Project') != ""</property>
   <property id='base_category_script'>ERP5Type_getSecurityCategoryFromContent</property>
+   <multi_property id='categories'>local_role_group/project</multi_property>
   <multi_property id='category'>function/production/manager</multi_property>
   <multi_property id='base_category'>destination_project</multi_property>
  </role>
@@ -50,6 +52,7 @@
   <property id='description'>XXX add local role group</property>
   <property id='condition'>python: context.getSourceProject('', portal_type='Project') != ""</property>
   <property id='base_category_script'>ERP5Type_getSecurityCategoryFromContent</property>
+   <multi_property id='categories'>local_role_group/project</multi_property>
   <multi_property id='category'>function/production/agent</multi_property>
   <multi_property id='base_category'>source_project</multi_property>
   <multi_property id='base_category'>function</multi_property>
@@ -59,6 +62,7 @@
   <property id='description'>XXX add local role group</property>
   <property id='condition'>python: context.getSourceProject('', portal_type='Project') != ""</property>
   <property id='base_category_script'>ERP5Type_getSecurityCategoryFromContent</property>
+   <multi_property id='categories'>local_role_group/project</multi_property>
   <multi_property id='category'>function/production/manager</multi_property>
   <multi_property id='base_category'>source_project</multi_property>
   <multi_property id='base_category'>function</multi_property>

--- a/master/bt5/slapos_erp5/PortalTypeRolesTemplateItem/Mail%20Message.xml
+++ b/master/bt5/slapos_erp5/PortalTypeRolesTemplateItem/Mail%20Message.xml
@@ -20,6 +20,7 @@
   <property id='description'>XXX add local role group</property>
   <property id='condition'>python: context.getDestinationProject('', portal_type='Project') != ""</property>
   <property id='base_category_script'>ERP5Type_getSecurityCategoryFromContent</property>
+   <multi_property id='categories'>local_role_group/project</multi_property>
   <multi_property id='category'>function/production/agent</multi_property>
   <multi_property id='base_category'>destination_project</multi_property>
  </role>
@@ -28,6 +29,7 @@
   <property id='description'>XXX add local role group</property>
   <property id='condition'>python: context.getDestinationProject('', portal_type='Project') != ""</property>
   <property id='base_category_script'>ERP5Type_getSecurityCategoryFromContent</property>
+   <multi_property id='categories'>local_role_group/project</multi_property>
   <multi_property id='category'>function/production/manager</multi_property>
   <multi_property id='base_category'>destination_project</multi_property>
  </role>
@@ -50,6 +52,7 @@
   <property id='description'>XXX add local role group</property>
   <property id='condition'>python: context.getSourceProject('', portal_type='Project') != ""</property>
   <property id='base_category_script'>ERP5Type_getSecurityCategoryFromContent</property>
+   <multi_property id='categories'>local_role_group/project</multi_property>
   <multi_property id='category'>function/production/agent</multi_property>
   <multi_property id='base_category'>source_project</multi_property>
   <multi_property id='base_category'>function</multi_property>
@@ -59,6 +62,7 @@
   <property id='description'>XXX add local role group</property>
   <property id='condition'>python: context.getSourceProject('', portal_type='Project') != ""</property>
   <property id='base_category_script'>ERP5Type_getSecurityCategoryFromContent</property>
+   <multi_property id='categories'>local_role_group/project</multi_property>
   <multi_property id='category'>function/production/manager</multi_property>
   <multi_property id='base_category'>source_project</multi_property>
   <multi_property id='base_category'>function</multi_property>

--- a/master/bt5/slapos_erp5/PortalTypeRolesTemplateItem/Note.xml
+++ b/master/bt5/slapos_erp5/PortalTypeRolesTemplateItem/Note.xml
@@ -20,6 +20,7 @@
   <property id='description'>XXX add local role group</property>
   <property id='condition'>python: context.getDestinationProject('', portal_type='Project') != ""</property>
   <property id='base_category_script'>ERP5Type_getSecurityCategoryFromContent</property>
+   <multi_property id='categories'>local_role_group/project</multi_property>
   <multi_property id='category'>function/production/agent</multi_property>
   <multi_property id='base_category'>destination_project</multi_property>
  </role>
@@ -28,6 +29,7 @@
   <property id='description'>XXX add local role group</property>
   <property id='condition'>python: context.getDestinationProject('', portal_type='Project') != ""</property>
   <property id='base_category_script'>ERP5Type_getSecurityCategoryFromContent</property>
+   <multi_property id='categories'>local_role_group/project</multi_property>
   <multi_property id='category'>function/production/manager</multi_property>
   <multi_property id='base_category'>destination_project</multi_property>
  </role>
@@ -50,6 +52,7 @@
   <property id='description'>XXX add local role group</property>
   <property id='condition'>python: context.getSourceProject('', portal_type='Project') != ""</property>
   <property id='base_category_script'>ERP5Type_getSecurityCategoryFromContent</property>
+   <multi_property id='categories'>local_role_group/project</multi_property>
   <multi_property id='category'>function/production/agent</multi_property>
   <multi_property id='base_category'>source_project</multi_property>
   <multi_property id='base_category'>function</multi_property>
@@ -59,6 +62,7 @@
   <property id='description'>XXX add local role group</property>
   <property id='condition'>python: context.getSourceProject('', portal_type='Project') != ""</property>
   <property id='base_category_script'>ERP5Type_getSecurityCategoryFromContent</property>
+   <multi_property id='categories'>local_role_group/project</multi_property>
   <multi_property id='category'>function/production/manager</multi_property>
   <multi_property id='base_category'>source_project</multi_property>
   <multi_property id='base_category'>function</multi_property>

--- a/master/bt5/slapos_erp5/PortalTypeRolesTemplateItem/Payzen%20Event.xml
+++ b/master/bt5/slapos_erp5/PortalTypeRolesTemplateItem/Payzen%20Event.xml
@@ -2,6 +2,7 @@
  <role id='Auditor'>
   <property id='title'>Information System</property>
   <property id='description'>XXX local role group</property>
+   <multi_property id='categories'>local_role_group/function</multi_property>
   <multi_property id='category'>function/is*</multi_property>
   <multi_property id='base_category'>function</multi_property>
  </role>

--- a/master/bt5/slapos_erp5/PortalTypeRolesTemplateItem/Person%20Module.xml
+++ b/master/bt5/slapos_erp5/PortalTypeRolesTemplateItem/Person%20Module.xml
@@ -19,6 +19,7 @@
  </role>
  <role id='Auditor'>
   <property id='title'>Production</property>
+   <multi_property id='categories'>local_role_group/function</multi_property>
   <multi_property id='category'>function/production*</multi_property>
   <multi_property id='base_category'>function</multi_property>
  </role>

--- a/master/bt5/slapos_erp5/PortalTypeRolesTemplateItem/Phone%20Call.xml
+++ b/master/bt5/slapos_erp5/PortalTypeRolesTemplateItem/Phone%20Call.xml
@@ -20,6 +20,7 @@
   <property id='description'>XXX add local role group</property>
   <property id='condition'>python: context.getDestinationProject('', portal_type='Project') != ""</property>
   <property id='base_category_script'>ERP5Type_getSecurityCategoryFromContent</property>
+   <multi_property id='categories'>local_role_group/project</multi_property>
   <multi_property id='category'>function/production/agent</multi_property>
   <multi_property id='base_category'>destination_project</multi_property>
  </role>
@@ -28,6 +29,7 @@
   <property id='description'>XXX add local role group</property>
   <property id='condition'>python: context.getDestinationProject('', portal_type='Project') != ""</property>
   <property id='base_category_script'>ERP5Type_getSecurityCategoryFromContent</property>
+   <multi_property id='categories'>local_role_group/project</multi_property>
   <multi_property id='category'>function/production/manager</multi_property>
   <multi_property id='base_category'>destination_project</multi_property>
  </role>
@@ -50,6 +52,7 @@
   <property id='description'>XXX add local role group</property>
   <property id='condition'>python: context.getSourceProject('', portal_type='Project') != ""</property>
   <property id='base_category_script'>ERP5Type_getSecurityCategoryFromContent</property>
+   <multi_property id='categories'>local_role_group/project</multi_property>
   <multi_property id='category'>function/production/agent</multi_property>
   <multi_property id='base_category'>source_project</multi_property>
   <multi_property id='base_category'>function</multi_property>
@@ -59,6 +62,7 @@
   <property id='description'>XXX add local role group</property>
   <property id='condition'>python: context.getSourceProject('', portal_type='Project') != ""</property>
   <property id='base_category_script'>ERP5Type_getSecurityCategoryFromContent</property>
+   <multi_property id='categories'>local_role_group/project</multi_property>
   <multi_property id='category'>function/production/manager</multi_property>
   <multi_property id='base_category'>source_project</multi_property>
   <multi_property id='base_category'>function</multi_property>

--- a/master/bt5/slapos_erp5/PortalTypeRolesTemplateItem/Project%20Module.xml
+++ b/master/bt5/slapos_erp5/PortalTypeRolesTemplateItem/Project%20Module.xml
@@ -13,6 +13,7 @@
  </role>
  <role id='Auditor'>
   <property id='title'>Instance</property>
+   <multi_property id='categories'>local_role_group/computer</multi_property>
   <multi_property id='category'>role/instance</multi_property>
   <multi_property id='base_category'>role</multi_property>
  </role>
@@ -24,6 +25,7 @@
  </role>
  <role id='Auditor'>
   <property id='title'>Production</property>
+   <multi_property id='categories'>local_role_group/function</multi_property>
   <multi_property id='category'>function/production*</multi_property>
   <multi_property id='base_category'>function</multi_property>
  </role>

--- a/master/bt5/slapos_erp5/PortalTypeRolesTemplateItem/Regularisation%20Request%20Module.xml
+++ b/master/bt5/slapos_erp5/PortalTypeRolesTemplateItem/Regularisation%20Request%20Module.xml
 <type_roles>
  <role id='Auditor'>
   <property id='title'>Production</property>
+   <multi_property id='categories'>local_role_group/function</multi_property>
   <multi_property id='category'>function/production*</multi_property>
   <multi_property id='base_category'>function</multi_property>
  </role>

--- a/master/bt5/slapos_erp5/PortalTypeRolesTemplateItem/Regularisation%20Request.xml
+++ b/master/bt5/slapos_erp5/PortalTypeRolesTemplateItem/Regularisation%20Request.xml
@@ -11,6 +11,7 @@
   <property id='description'>XXX add local role group</property>
   <property id='condition'>python: context.getDestinationProject('', portal_type='Project') != ""</property>
   <property id='base_category_script'>ERP5Type_getSecurityCategoryFromContent</property>
+   <multi_property id='categories'>local_role_group/project</multi_property>
   <multi_property id='category'>function/production/agent</multi_property>
   <multi_property id='base_category'>destination_project</multi_property>
  </role>
@@ -19,6 +20,7 @@
   <property id='description'>XXX add local role group</property>
   <property id='condition'>python: context.getDestinationProject('', portal_type='Project') != ""</property>
   <property id='base_category_script'>ERP5Type_getSecurityCategoryFromContent</property>
+   <multi_property id='categories'>local_role_group/project</multi_property>
   <multi_property id='category'>function/production/manager</multi_property>
   <multi_property id='base_category'>destination_project</multi_property>
  </role>
@@ -39,6 +41,7 @@
   <property id='description'>XXX add local role group</property>
   <property id='condition'>python: context.getSourceProject('', portal_type='Project') != ""</property>
   <property id='base_category_script'>ERP5Type_getSecurityCategoryFromContent</property>
+   <multi_property id='categories'>local_role_group/project</multi_property>
   <multi_property id='category'>function/production/agent</multi_property>
   <multi_property id='base_category'>source_project</multi_property>
   <multi_property id='base_category'>function</multi_property>
@@ -48,6 +51,7 @@
   <property id='description'>XXX add local role group</property>
   <property id='condition'>python: context.getSourceProject('', portal_type='Project') != ""</property>
   <property id='base_category_script'>ERP5Type_getSecurityCategoryFromContent</property>
+   <multi_property id='categories'>local_role_group/project</multi_property>
   <multi_property id='category'>function/production/manager</multi_property>
   <multi_property id='base_category'>source_project</multi_property>
   <multi_property id='base_category'>function</multi_property>

--- a/master/bt5/slapos_erp5/PortalTypeRolesTemplateItem/Remote%20Node.xml
+++ b/master/bt5/slapos_erp5/PortalTypeRolesTemplateItem/Remote%20Node.xml
@@ -4,6 +4,7 @@
   <property id='description'>XXX add local role group</property>
   <property id='condition'>python: context.getFollowUp("") != ""</property>
   <property id='base_category_script'>ERP5Type_getSecurityCategoryFromContent</property>
+   <multi_property id='categories'>local_role_group/project</multi_property>
   <multi_property id='category'>function/customer</multi_property>
   <multi_property id='base_category'>follow_up</multi_property>
  </role>
@@ -12,6 +13,7 @@
   <property id='description'>XXX add local role group</property>
   <property id='condition'>python: context.getFollowUp("") != ""</property>
   <property id='base_category_script'>ERP5Type_getSecurityCategoryFromContent</property>
+   <multi_property id='categories'>local_role_group/project</multi_property>
   <multi_property id='category'>function/production/agent</multi_property>
   <multi_property id='base_category'>follow_up</multi_property>
  </role>
@@ -20,6 +22,7 @@
   <property id='description'>XXX add local role group</property>
   <property id='condition'>python: context.getFollowUp("") != ""</property>
   <property id='base_category_script'>ERP5Type_getSecurityCategoryFromContent</property>
+   <multi_property id='categories'>local_role_group/project</multi_property>
   <multi_property id='category'>function/production/manager</multi_property>
   <multi_property id='base_category'>follow_up</multi_property>
  </role>

--- a/master/bt5/slapos_erp5/PortalTypeRolesTemplateItem/Service%20Module.xml
+++ b/master/bt5/slapos_erp5/PortalTypeRolesTemplateItem/Service%20Module.xml
@@ -2,6 +2,7 @@
  <role id='Auditor'>
   <property id='title'>Accounting</property>
   <property id='description'>`Sale` people can NOT create/modify `Service`. This comes from the `bt5`, and can be really fragile to change for now.</property>
+   <multi_property id='categories'>local_role_group/function</multi_property>
   <multi_property id='category'>function/accounting*</multi_property>
   <multi_property id='base_category'>function</multi_property>
  </role>
@@ -9,6 +10,7 @@
   <property id='title'>Project Compute Node Manager</property>
   <property id='description'>XXX TODO
 add local roles group</property>
+   <multi_property id='categories'>local_role_group/function</multi_property>
   <multi_property id='category'>function/production*</multi_property>
   <multi_property id='base_category'>function</multi_property>
  </role>
@@ -21,6 +23,7 @@ add local roles group</property>
  <role id='Auditor'>
   <property id='title'>Sale</property>
   <property id='description'>`Sale` people can NOT create/modify `Service`. This comes from the `bt5`, and can be really fragile to change for now.</property>
+   <multi_property id='categories'>local_role_group/function</multi_property>
   <multi_property id='category'>function/sale*</multi_property>
   <multi_property id='base_category'>function</multi_property>
  </role>

--- a/master/bt5/slapos_erp5/PortalTypeRolesTemplateItem/Service.xml
+++ b/master/bt5/slapos_erp5/PortalTypeRolesTemplateItem/Service.xml
@@ -5,6 +5,7 @@
 XXX TODO
 add local roles group</property>
+   <multi_property id='categories'>local_role_group/function</multi_property>
   <multi_property id='category'>function/accounting*</multi_property>
   <multi_property id='base_category'>function</multi_property>
  </role>
@@ -12,11 +13,13 @@ add local roles group</property>
   <property id='title'>Project Compute Node Manager</property>
   <property id='description'>XXX TODO
 add local roles group</property>
+   <multi_property id='categories'>local_role_group/function</multi_property>
   <multi_property id='category'>function/production*</multi_property>
   <multi_property id='base_category'>function</multi_property>
  </role>
  <role id='Auditor'>
   <property id='title'>Project Customer</property>
+   <multi_property id='categories'>local_role_group/function</multi_property>
   <multi_property id='category'>function/customer</multi_property>
   <multi_property id='base_category'>function</multi_property>
  </role>
@@ -26,6 +29,7 @@ add local roles group</property>
 XXX TODO
 add local roles group</property>
+   <multi_property id='categories'>local_role_group/function</multi_property>
   <multi_property id='category'>function/sale*</multi_property>
   <multi_property id='base_category'>function</multi_property>
  </role>

--- a/master/bt5/slapos_erp5/PortalTypeRolesTemplateItem/Short%20Message.xml
+++ b/master/bt5/slapos_erp5/PortalTypeRolesTemplateItem/Short%20Message.xml
@@ -20,6 +20,7 @@
   <property id='description'>XXX add local role group</property>
   <property id='condition'>python: context.getDestinationProject('', portal_type='Project') != ""</property>
   <property id='base_category_script'>ERP5Type_getSecurityCategoryFromContent</property>
+   <multi_property id='categories'>local_role_group/project</multi_property>
   <multi_property id='category'>function/production/agent</multi_property>
   <multi_property id='base_category'>destination_project</multi_property>
  </role>
@@ -28,6 +29,7 @@
   <property id='description'>XXX add local role group</property>
   <property id='condition'>python: context.getDestinationProject('', portal_type='Project') != ""</property>
   <property id='base_category_script'>ERP5Type_getSecurityCategoryFromContent</property>
+   <multi_property id='categories'>local_role_group/project</multi_property>
   <multi_property id='category'>function/production/manager</multi_property>
   <multi_property id='base_category'>destination_project</multi_property>
  </role>
@@ -50,6 +52,7 @@
   <property id='description'>XXX add local role group</property>
   <property id='condition'>python: context.getSourceProject('', portal_type='Project') != ""</property>
   <property id='base_category_script'>ERP5Type_getSecurityCategoryFromContent</property>
+   <multi_property id='categories'>local_role_group/project</multi_property>
   <multi_property id='category'>function/production/agent</multi_property>
   <multi_property id='base_category'>source_project</multi_property>
   <multi_property id='base_category'>function</multi_property>
@@ -59,6 +62,7 @@
   <property id='description'>XXX add local role group</property>
   <property id='condition'>python: context.getSourceProject('', portal_type='Project') != ""</property>
   <property id='base_category_script'>ERP5Type_getSecurityCategoryFromContent</property>
+   <multi_property id='categories'>local_role_group/project</multi_property>
   <multi_property id='category'>function/production/manager</multi_property>
   <multi_property id='base_category'>source_project</multi_property>
   <multi_property id='base_category'>function</multi_property>

--- a/master/bt5/slapos_erp5/PortalTypeRolesTemplateItem/Site%20Message.xml
+++ b/master/bt5/slapos_erp5/PortalTypeRolesTemplateItem/Site%20Message.xml
@@ -20,6 +20,7 @@
   <property id='description'>XXX add local role group</property>
   <property id='condition'>python: context.getDestinationProject('', portal_type='Project') != ""</property>
   <property id='base_category_script'>ERP5Type_getSecurityCategoryFromContent</property>
+   <multi_property id='categories'>local_role_group/project</multi_property>
   <multi_property id='category'>function/production/agent</multi_property>
   <multi_property id='base_category'>destination_project</multi_property>
  </role>
@@ -28,6 +29,7 @@
   <property id='description'>XXX add local role group</property>
   <property id='condition'>python: context.getDestinationProject('', portal_type='Project') != ""</property>
   <property id='base_category_script'>ERP5Type_getSecurityCategoryFromContent</property>
+   <multi_property id='categories'>local_role_group/project</multi_property>
   <multi_property id='category'>function/production/manager</multi_property>
   <multi_property id='base_category'>destination_project</multi_property>
  </role>
@@ -50,6 +52,7 @@
   <property id='description'>XXX add local role group</property>
   <property id='condition'>python: context.getSourceProject('', portal_type='Project') != ""</property>
   <property id='base_category_script'>ERP5Type_getSecurityCategoryFromContent</property>
+   <multi_property id='categories'>local_role_group/project</multi_property>
   <multi_property id='category'>function/production/agent</multi_property>
   <multi_property id='base_category'>source_project</multi_property>
   <multi_property id='base_category'>function</multi_property>
@@ -59,6 +62,7 @@
   <property id='description'>XXX add local role group</property>
   <property id='condition'>python: context.getSourceProject('', portal_type='Project') != ""</property>
   <property id='base_category_script'>ERP5Type_getSecurityCategoryFromContent</property>
+   <multi_property id='categories'>local_role_group/project</multi_property>
   <multi_property id='category'>function/production/manager</multi_property>
   <multi_property id='base_category'>source_project</multi_property>
   <multi_property id='base_category'>function</multi_property>

--- a/master/bt5/slapos_erp5/PortalTypeRolesTemplateItem/Slave%20Instance.xml
+++ b/master/bt5/slapos_erp5/PortalTypeRolesTemplateItem/Slave%20Instance.xml
@@ -22,6 +22,7 @@
   <property id='description'>XXX add local role group</property>
   <property id='condition'>python: context.getFollowUp("") != ""</property>
   <property id='base_category_script'>ERP5Type_getSecurityCategoryFromContent</property>
+   <multi_property id='categories'>local_role_group/project</multi_property>
   <multi_property id='category'>function/production/agent</multi_property>
   <multi_property id='base_category'>follow_up</multi_property>
  </role>
@@ -30,6 +31,7 @@
   <property id='description'>XXX add local role group</property>
   <property id='condition'>python: context.getFollowUp("") != ""</property>
   <property id='base_category_script'>ERP5Type_getSecurityCategoryFromContent</property>
+   <multi_property id='categories'>local_role_group/project</multi_property>
   <multi_property id='category'>function/production/manager</multi_property>
   <multi_property id='base_category'>follow_up</multi_property>
  </role>

--- a/master/bt5/slapos_erp5/PortalTypeRolesTemplateItem/Software%20Installation%20Module.xml
+++ b/master/bt5/slapos_erp5/PortalTypeRolesTemplateItem/Software%20Installation%20Module.xml
@@ -13,6 +13,7 @@
  </role>
  <role id='Auditor; Author'>
   <property id='title'>Production</property>
+   <multi_property id='categories'>local_role_group/function</multi_property>
   <multi_property id='category'>function/production*</multi_property>
   <multi_property id='base_category'>function</multi_property>
  </role>

--- a/master/bt5/slapos_erp5/PortalTypeRolesTemplateItem/Software%20Installation.xml
+++ b/master/bt5/slapos_erp5/PortalTypeRolesTemplateItem/Software%20Installation.xml
@@ -10,6 +10,7 @@
   <property id='description'>XXX add local role group</property>
   <property id='condition'>python: context.getFollowUp("") != ""</property>
   <property id='base_category_script'>ERP5Type_getSecurityCategoryFromContent</property>
+   <multi_property id='categories'>local_role_group/project</multi_property>
   <multi_property id='category'>function/customer</multi_property>
   <multi_property id='base_category'>follow_up</multi_property>
  </role>
@@ -18,6 +19,7 @@
   <property id='description'>XXX project local role group</property>
   <property id='condition'>python: context.getFollowUp("") != ""</property>
   <property id='base_category_script'>ERP5Type_getSecurityCategoryFromContent</property>
+   <multi_property id='categories'>local_role_group/project</multi_property>
   <multi_property id='category'>function/production/agent</multi_property>
   <multi_property id='base_category'>follow_up</multi_property>
  </role>
@@ -26,6 +28,7 @@
   <property id='description'>XXX project local role group</property>
   <property id='condition'>python: context.getFollowUp("") != ""</property>
   <property id='base_category_script'>ERP5Type_getSecurityCategoryFromContent</property>
+   <multi_property id='categories'>local_role_group/project</multi_property>
   <multi_property id='category'>function/production/manager</multi_property>
   <multi_property id='base_category'>follow_up</multi_property>
  </role>

--- a/master/bt5/slapos_erp5/PortalTypeRolesTemplateItem/Software%20Instance%20Module.xml
+++ b/master/bt5/slapos_erp5/PortalTypeRolesTemplateItem/Software%20Instance%20Module.xml
@@ -7,11 +7,13 @@
  </role>
  <role id='Auditor; Author'>
   <property id='title'>Instance</property>
+   <multi_property id='categories'>local_role_group/computer</multi_property>
   <multi_property id='category'>role/instance</multi_property>
   <multi_property id='base_category'>role</multi_property>
  </role>
  <role id='Auditor'>
   <property id='title'>Production</property>
+   <multi_property id='categories'>local_role_group/function</multi_property>
   <multi_property id='category'>function/production*</multi_property>
   <multi_property id='base_category'>function</multi_property>
  </role>

--- a/master/bt5/slapos_erp5/PortalTypeRolesTemplateItem/Software%20Instance.xml
+++ b/master/bt5/slapos_erp5/PortalTypeRolesTemplateItem/Software%20Instance.xml
@@ -22,6 +22,7 @@
   <property id='description'>XXX add local role group</property>
   <property id='condition'>python: context.getFollowUp("") != ""</property>
   <property id='base_category_script'>ERP5Type_getSecurityCategoryFromContent</property>
+   <multi_property id='categories'>local_role_group/project</multi_property>
   <multi_property id='category'>function/production/agent</multi_property>
   <multi_property id='base_category'>follow_up</multi_property>
  </role>
@@ -30,6 +31,7 @@
   <property id='description'>XXX add local role group</property>
   <property id='condition'>python: context.getFollowUp("") != ""</property>
   <property id='base_category_script'>ERP5Type_getSecurityCategoryFromContent</property>
+   <multi_property id='categories'>local_role_group/project</multi_property>
   <multi_property id='category'>function/production/manager</multi_property>
   <multi_property id='base_category'>follow_up</multi_property>
  </role>

--- a/master/bt5/slapos_erp5/PortalTypeRolesTemplateItem/Software%20Product%20Module.xml
+++ b/master/bt5/slapos_erp5/PortalTypeRolesTemplateItem/Software%20Product%20Module.xml
@@ -7,6 +7,7 @@
  </role>
  <role id='Auditor; Author'>
   <property id='title'>Production</property>
+   <multi_property id='categories'>local_role_group/function</multi_property>
   <multi_property id='category'>function/production*</multi_property>
   <multi_property id='base_category'>function</multi_property>
  </role>

--- a/master/bt5/slapos_erp5/PortalTypeRolesTemplateItem/Software%20Product.xml
+++ b/master/bt5/slapos_erp5/PortalTypeRolesTemplateItem/Software%20Product.xml
@@ -4,6 +4,7 @@
   <property id='description'>XXX add local role group</property>
   <property id='condition'>python: context.getFollowUp("") != ""</property>
   <property id='base_category_script'>ERP5Type_getSecurityCategoryFromContent</property>
+   <multi_property id='categories'>local_role_group/project</multi_property>
   <multi_property id='category'>function/customer</multi_property>
   <multi_property id='base_category'>follow_up</multi_property>
  </role>
@@ -12,6 +13,7 @@
   <property id='description'>XXX add local role group</property>
   <property id='condition'>python: context.getFollowUp("") != ""</property>
   <property id='base_category_script'>ERP5Type_getSecurityCategoryFromContent</property>
+   <multi_property id='categories'>local_role_group/project</multi_property>
   <multi_property id='category'>function/production/agent</multi_property>
   <multi_property id='base_category'>follow_up</multi_property>
  </role>
@@ -20,6 +22,7 @@
   <property id='description'>XXX add local role group</property>
   <property id='condition'>python: context.getFollowUp("") != ""</property>
   <property id='base_category_script'>ERP5Type_getSecurityCategoryFromContent</property>
+   <multi_property id='categories'>local_role_group/project</multi_property>
   <multi_property id='category'>function/production/manager</multi_property>
   <multi_property id='base_category'>follow_up</multi_property>
  </role>

--- a/master/bt5/slapos_erp5/PortalTypeRolesTemplateItem/Support%20Request%20Module.xml
+++ b/master/bt5/slapos_erp5/PortalTypeRolesTemplateItem/Support%20Request%20Module.xml
 <type_roles>
  <role id='Auditor; Author'>
   <property id='title'>Production</property>
+   <multi_property id='categories'>local_role_group/function</multi_property>
   <multi_property id='category'>function/production*</multi_property>
   <multi_property id='base_category'>function</multi_property>
  </role>

--- a/master/bt5/slapos_erp5/PortalTypeRolesTemplateItem/Support%20Request.xml
+++ b/master/bt5/slapos_erp5/PortalTypeRolesTemplateItem/Support%20Request.xml
@@ -11,6 +11,7 @@
   <property id='description'>XXX add local role group</property>
   <property id='condition'>python: context.getDestinationProject('', portal_type='Project') != ""</property>
   <property id='base_category_script'>ERP5Type_getSecurityCategoryFromContent</property>
+   <multi_property id='categories'>local_role_group/project</multi_property>
   <multi_property id='category'>function/production/agent</multi_property>
   <multi_property id='base_category'>destination_project</multi_property>
  </role>
@@ -19,6 +20,7 @@
   <property id='description'>XXX add local role group</property>
   <property id='condition'>python: context.getDestinationProject('', portal_type='Project') != ""</property>
   <property id='base_category_script'>ERP5Type_getSecurityCategoryFromContent</property>
+   <multi_property id='categories'>local_role_group/project</multi_property>
   <multi_property id='category'>function/production/manager</multi_property>
   <multi_property id='base_category'>destination_project</multi_property>
  </role>
@@ -41,6 +43,7 @@
   <property id='description'>XXX add local role group</property>
   <property id='condition'>python: context.getSourceProject('', portal_type='Project') != ""</property>
   <property id='base_category_script'>ERP5Type_getSecurityCategoryFromContent</property>
+   <multi_property id='categories'>local_role_group/project</multi_property>
   <multi_property id='category'>function/production/agent</multi_property>
   <multi_property id='base_category'>source_project</multi_property>
   <multi_property id='base_category'>function</multi_property>
@@ -50,6 +53,7 @@
   <property id='description'>XXX add local role group</property>
   <property id='condition'>python: context.getSourceProject('', portal_type='Project') != ""</property>
   <property id='base_category_script'>ERP5Type_getSecurityCategoryFromContent</property>
+   <multi_property id='categories'>local_role_group/project</multi_property>
   <multi_property id='category'>function/production/manager</multi_property>
   <multi_property id='base_category'>source_project</multi_property>
   <multi_property id='base_category'>function</multi_property>

--- a/master/bt5/slapos_erp5/PortalTypeRolesTemplateItem/Upgrade%20Decision%20Module.xml
+++ b/master/bt5/slapos_erp5/PortalTypeRolesTemplateItem/Upgrade%20Decision%20Module.xml
 <type_roles>
  <role id='Auditor'>
   <property id='title'>Production</property>
+   <multi_property id='categories'>local_role_group/function</multi_property>
   <multi_property id='category'>function/production*</multi_property>
   <multi_property id='base_category'>function</multi_property>
  </role>

--- a/master/bt5/slapos_erp5/PortalTypeRolesTemplateItem/Upgrade%20Decision.xml
+++ b/master/bt5/slapos_erp5/PortalTypeRolesTemplateItem/Upgrade%20Decision.xml
@@ -4,6 +4,7 @@
   <property id='description'>XXX add local role group</property>
   <property id='condition'>python: context.getDestinationProject('', portal_type='Project') != ""</property>
   <property id='base_category_script'>ERP5Type_getSecurityCategoryFromContent</property>
+   <multi_property id='categories'>local_role_group/project</multi_property>
   <multi_property id='category'>function/production/agent</multi_property>
   <multi_property id='base_category'>destination_project</multi_property>
  </role>
@@ -12,6 +13,7 @@
   <property id='description'>XXX add local role group</property>
   <property id='condition'>python: context.getDestinationProject('', portal_type='Project') != ""</property>
   <property id='base_category_script'>ERP5Type_getSecurityCategoryFromContent</property>
+   <multi_property id='categories'>local_role_group/project</multi_property>
   <multi_property id='category'>function/production/manager</multi_property>
   <multi_property id='base_category'>destination_project</multi_property>
  </role>
@@ -20,6 +22,7 @@
   <property id='description'>XXX add local role group</property>
   <property id='condition'>python: context.getSourceProject('', portal_type='Project') != ""</property>
   <property id='base_category_script'>ERP5Type_getSecurityCategoryFromContent</property>
+   <multi_property id='categories'>local_role_group/project</multi_property>
   <multi_property id='category'>function/production/agent</multi_property>
   <multi_property id='base_category'>source_project</multi_property>
   <multi_property id='base_category'>function</multi_property>
@@ -29,6 +32,7 @@
   <property id='description'>XXX add local role group</property>
   <property id='condition'>python: context.getSourceProject('', portal_type='Project') != ""</property>
   <property id='base_category_script'>ERP5Type_getSecurityCategoryFromContent</property>
+   <multi_property id='categories'>local_role_group/project</multi_property>
   <multi_property id='category'>function/production/manager</multi_property>
   <multi_property id='base_category'>source_project</multi_property>
   <multi_property id='base_category'>function</multi_property>

--- a/master/bt5/slapos_erp5/PortalTypeRolesTemplateItem/Visit.xml
+++ b/master/bt5/slapos_erp5/PortalTypeRolesTemplateItem/Visit.xml
@@ -20,6 +20,7 @@
   <property id='description'>XXX add local role group</property>
   <property id='condition'>python: context.getDestinationProject('', portal_type='Project') != ""</property>
   <property id='base_category_script'>ERP5Type_getSecurityCategoryFromContent</property>
+   <multi_property id='categories'>local_role_group/project</multi_property>
   <multi_property id='category'>function/production/agent</multi_property>
   <multi_property id='base_category'>destination_project</multi_property>
  </role>
@@ -28,6 +29,7 @@
   <property id='description'>XXX add local role group</property>
   <property id='condition'>python: context.getDestinationProject('', portal_type='Project') != ""</property>
   <property id='base_category_script'>ERP5Type_getSecurityCategoryFromContent</property>
+   <multi_property id='categories'>local_role_group/project</multi_property>
   <multi_property id='category'>function/production/manager</multi_property>
   <multi_property id='base_category'>destination_project</multi_property>
  </role>
@@ -50,6 +52,7 @@
   <property id='description'>XXX add local role group</property>
   <property id='condition'>python: context.getSourceProject('', portal_type='Project') != ""</property>
   <property id='base_category_script'>ERP5Type_getSecurityCategoryFromContent</property>
+   <multi_property id='categories'>local_role_group/project</multi_property>
   <multi_property id='category'>function/production/agent</multi_property>
   <multi_property id='base_category'>source_project</multi_property>
   <multi_property id='base_category'>function</multi_property>
@@ -59,6 +62,7 @@
   <property id='description'>XXX add local role group</property>
   <property id='condition'>python: context.getSourceProject('', portal_type='Project') != ""</property>
   <property id='base_category_script'>ERP5Type_getSecurityCategoryFromContent</property>
+   <multi_property id='categories'>local_role_group/project</multi_property>
   <multi_property id='category'>function/production/manager</multi_property>
   <multi_property id='base_category'>source_project</multi_property>
   <multi_property id='base_category'>function</multi_property>

--- a/master/bt5/slapos_erp5/PortalTypeRolesTemplateItem/Web%20Message.xml
+++ b/master/bt5/slapos_erp5/PortalTypeRolesTemplateItem/Web%20Message.xml
@@ -20,6 +20,7 @@
   <property id='description'>XXX add local role group</property>
   <property id='condition'>python: context.getDestinationProject('', portal_type='Project') != ""</property>
   <property id='base_category_script'>ERP5Type_getSecurityCategoryFromContent</property>
+   <multi_property id='categories'>local_role_group/project</multi_property>
   <multi_property id='category'>function/production/agent</multi_property>
   <multi_property id='base_category'>destination_project</multi_property>
  </role>
@@ -28,6 +29,7 @@
   <property id='description'>XXX add local role group</property>
   <property id='condition'>python: context.getDestinationProject('', portal_type='Project') != ""</property>
   <property id='base_category_script'>ERP5Type_getSecurityCategoryFromContent</property>
+   <multi_property id='categories'>local_role_group/project</multi_property>
   <multi_property id='category'>function/production/manager</multi_property>
   <multi_property id='base_category'>destination_project</multi_property>
  </role>
@@ -50,6 +52,7 @@
   <property id='description'>XXX add local role group</property>
   <property id='condition'>python: context.getSourceProject('', portal_type='Project') != ""</property>
   <property id='base_category_script'>ERP5Type_getSecurityCategoryFromContent</property>
+   <multi_property id='categories'>local_role_group/project</multi_property>
   <multi_property id='category'>function/production/agent</multi_property>
   <multi_property id='base_category'>source_project</multi_property>
   <multi_property id='base_category'>function</multi_property>
@@ -59,6 +62,7 @@
   <property id='description'>XXX add local role group</property>
   <property id='condition'>python: context.getSourceProject('', portal_type='Project') != ""</property>
   <property id='base_category_script'>ERP5Type_getSecurityCategoryFromContent</property>
+   <multi_property id='categories'>local_role_group/project</multi_property>
   <multi_property id='category'>function/production/manager</multi_property>
   <multi_property id='base_category'>source_project</multi_property>
   <multi_property id='base_category'>function</multi_property>

--- a/master/bt5/slapos_erp5/PortalTypeRolesTemplateItem/Web%20Page%20Module.xml
+++ b/master/bt5/slapos_erp5/PortalTypeRolesTemplateItem/Web%20Page%20Module.xml
 <type_roles>
  <role id='Author; Auditor'>
   <property id='title'>Marketing</property>
+   <multi_property id='categories'>local_role_group/function</multi_property>
   <multi_property id='category'>function/marketing*</multi_property>
   <multi_property id='base_category'>function</multi_property>
  </role>

--- a/master/bt5/slapos_erp5/PortalTypeRolesTemplateItem/Wechat%20Event.xml
+++ b/master/bt5/slapos_erp5/PortalTypeRolesTemplateItem/Wechat%20Event.xml
@@ -2,6 +2,7 @@
  <role id='Auditor'>
   <property id='title'>Information System</property>
   <property id='description'>XXX local role group</property>
+   <multi_property id='categories'>local_role_group/function</multi_property>
   <multi_property id='category'>function/is*</multi_property>
   <multi_property id='base_category'>function</multi_property>
  </role>