slapos_cloud: SlapOSVirtualMasterSourceProjectConstraint requires source_project or destination_project

* drop transfer from another Project
* drop allocation_scope/open categories
* drop Item_getSecurityCategoryFromMovementDestinationSection
* drop Item_getSecurityCategoryFromMovementDestinationSection
* drop Item_getSecurityCategoryFromMovementDestinationProject
* drop Item_getSecurityCategoryFromMovementDestination
* drop SoftwareInstance_getSecurityCategoryFromMovementSpecialiseDestinationProject
* drop ERP5Type_getSecurityCategoryFromAssignmentDestinationClientOrganisation
* switch event/ticket roles to virtual master security
* drop Event_getSecurityCategoryFromMovementFollowUpAggregateComputeNodeDestinationSection
* drop Event_getSecurityCategoryFromMovementFollowUpAggregateDestination
* delete Event_getSecurityCategoryFromMovementFollowUpAggregateDestinationProject
* drop Item_getSecurityCategoryFromMovementAggregateDestinationProject
* drop Item_getSecurityCategoryFromMovementAggregateDestinationSection
* drop Item_getSecurityCategoryFromMovementAggregateDestination
* drop Item_getSecurityCategoryFromMovementAggregateComputeNodeDestinationSection
* drop SoftwareInstance_getSecurityCategoryFromMovementSpecialiseDestination
* drop Item_getSecurityCategoryFromMovementLineAggregateDestinationProject
* drop Item_getSecurityCategoryFromMovementLineAggregateDestination
* drop Item_getSecurityCategoryFromMovementLineAggregateComputeNodeDestinationSection
* provide access to Compute Node Manager on Upgrade Decision
* delivery/movement must use source_project instead of follow_up
* delivery/movement must use source_project instead of follow_up
* drop query module security
* drop Compute Partition roles
  It must be visible by all project members
* instance of the project can access compute nodes
* do not make Credit Card readable
* drop data set security
* only accountant can create/update Account
* add function local_role_group
* use function local_role_group on Account
* use function local_role_group on account
* only accountant can read/write accounting transactions.
  Ledger is used as write condition
* accounting period are only readable/writable by accountant
* accounting period are only readable/writable by accountant
* provide access on compute node to project customer/production
* give read access to project production
* provide access to production on software installation
* switch admin to production manager in tests
* no need for group/role in assignment. Use parent function too
* provide access to function/production on Instance Tree
* provide access to instance for function/production users
* provide access to function/production* on support request
* provide access to function/production on event module
* provide access to regularisation request to function/production
* drop roles for DMS portal types
  It does not seem used.
* provide read/write access to function/production to Computer Network
* provide access to function/is to System Event
* provide access to function/is on Assignment
* provide access to person module
* provide read only access to project/customer on software product
* provide readonly access to project/customer on software release
* test set server allocation_scope to open
* provide readonly access for project/customer on accounting module
* provide readonly access for project/customer on compute node module

* automated ledger path
* add ledger to the accounting template
* only add a project assignment for the existing admin user
* create normal user with the project customer assignment
* update cdn subscription test
  project reference needed
* add project for chinese subscription
* project needed for scenario tests
* all Subscription/Trial object must be linked to a Project
* test: user need to be linked to a project
* propagate source project
* delivery/movement must use source_project instead of follow_up
* set source_project on event
* delivery/movement must use source_project instead of follow_up
* use source_project instead of follow_up
* use source_project instead of follow_up
* test set server allocation_scope/open

* add virtual master contraint to tickets and events portal types
* propagate project from Regularisation Request to event
* delivery/movement must use source_project instead of follow_up
* set source_project on event
* stop setting person as source_project

* add source_project constraint on all portal type requiring a ledger
* set the source_project on the open sale order
* propagate source_project in the simulation/builder
* remove source_project constraint from the ledger property sheet
* add SlapOSVirtualMasterSourceProjectConstraint on all accounting portal types

* drop ComputerNetwork_getSoftwareReleaseAllocableState
  source_administration is not used anymore on Compute Node
* source_administration is not used anymore on Compute Node
* drop transfer from another Project
* drop transfer from another Project
* drop transfer from another Project
* drop transfer from another Project
* drop allocation_scope/open categories
* drop allocation_scope/open categories
* move test function to mixin
* drop ERP5Type_getSecurityCategoryFromAssignmentDestinationClientOrganisation
* add SlapOSVirtualMasterSourceProjectConstraint
* force source_project accessors when using SlapOSVirtualMasterSourceProjectConstraint
* use instance/computer project in the security mapping
* test use production/manager to request compute node
* allocation_scope/open/public and friend do not exist anymore
* only allocate on allocation_scope/open
* only allocate on allocation_scope/open

All compute nodes are public now

* subscription scenario needs project now
* project is needed when requesting an instance
* hardcode automated ledger category for the newly created sale packing list
* hardcode automated ledger category for the newly created accounting transactions

* add SlapOSLedgerConstraint
* add SlapOSLedgerConstraint on all * Transaction
  XXX FOrces tests to fail as much as possible if ledger is not configured.
  Add test to ensure constraint is configured
* hardcode automated ledger category for the newly created sale packing list
* propagate ledger in the simulation tree
* build ledger category from delivery builders
* aggregate ledger from order builder
* ensure ledger category is allowed on the portal type when using the constraint
* requires ledger on Hosting Subscription, Open Sale Order and Sale Packing List
* hardcode ledger value on Open Sale Order and Hosting Subscription
* open order must propagate the ledger value
* automated ledger path
* add ledger to the accounting template
* source_administration is not used anymore on Compute Node
* source_administration is not used anymore on Compute Node

* slapos member user are not allowed anymore to create compute node
* no need to create a dedicated local_roles from compute node source_administration
  Only slapos manager will handle compute nodes
* duplicate test_default_scenario to happily break it
* drop friend/personal in new scenario test
* all members can allocation on all compute nodes
* give user security group based on function (to access some module) and project/function (to access documents)
* only a project computer manager can create compute nodes
* only project computer manager is assignor on compute node
* need a project assignment to create a compute node
* drop group security on Instance Tree
* drop group security from Software Instance
* project member only need Auditor role on it
* add customer project assignment
* remove source_administration interaction workflow on Compute Node and add follow_up instead
* Software Installation: move interaction workflow from destination_section to follow_up
* give role on Software Installation to Project Compute Node Manager
* shadow user do not need access to Compute Node anymore
* only project comp manager can create SOftware Installation
* project customer can create software instance
* project customer can create instance tree
* project people can only view the project module
* also check PAS plugins which are not supposed to be activated
* drop PAS shadow user plugins
* drop shadow access from compute node module
* drop shadow from compute node module
* drop shadow role from computer module
* drop shadow role from person* portal types
* drop shadow role on project module
* Revert "slapos_erp5: drop PAS shadow user plugins"
  Needed for accounting
* Revert "slapos_erp5: drop shadow role from person* portal types"

* open personal
* allocation scope is meaningless to restrict allocation permission
* add follow_up category on Compute Node
  To attach to a project
* require a project reference when requesting a compute node
* requesting a compute node requires a project
* increase error verbosity
* stop using shadow to allocate instance
  Use project only
* set follow up on Instance Tree and Software Instance portal type
* requesting an instance tree requires a project
* assert project reference is provided
* propagate follow up when requesting instance
* requesting an instance requires a project
* add follow_up accessor on compute partition
* no need for follow_up on Compute Partition
* directly search follow_up value on parent Compute Node
* use new related key format
* drop source_administration from Compute Node
* drop source_administration on Compute Node
* drop source_administration from Compute Node
* Software Installation drop destination_section and use follow_up
* stop setting role/member on Assignment by default
* requesting an instance tree need a project reference
* add SlapOSVirtualMasterConstraint
  XXX TODO fix broken TALES expression which prevent entering invaludated/suspended
* configure SlapOSVirtualMasterConstraint on most slapos cloud portal types
  XXX TODO check if some are missing
* SlapOSVirtualMasterConstraint need f#+=!$ TALES expression

* project reference is required for compute node
* require a project when requesting an instance tree

This reverts commit 53f61021.

This reverts commit 730b0f11.

slapos_accounting:

* no need to create open order slowly
* trade condition has more than one supply line
* WIP create open order for compute node
* alarm to create compute node open order
* categrory
* define comp node subscription price

slapos_cloud:

* approve computer again

slapos_subscription_request:

* trigger compute node open order creation

* XXX do not approve computer by default
  TODO: create open order related to the computer usage
* drop useless requestComputeNodeRegistration workflow transition
  This transition does nothing.

* restore previous price setting
* set round price
* disable invoice generation for consumption to see test impacted
* XXX consumption price must be set to 0
  XXX migrate existing packing list

Try to understand why price is not always copied

slapos_accounting: restore original price

The new versions do not include any price informations.
It is needed to create new Trade Condition which inherite from those versions.

Update preference to use those latest trade conditions.

slapos_accounting: factorise code

slapos_wechat: use reference sale trade condition

slapos_erp5: check sale trade condition reference

sale trade condition are versionned.

Clarify trade condition title