669ba0fd8a
The FP sale report template (report_fp_sale_portrait) walks into fp.part.catalog records, which portal users don't have ACL on - they'd hit 'You are not allowed to access Fusion Plating - Part Catalog' when rendering. Standard /report/pdf/ route runs as the authed user, so the template traversal fails. Mirror the portal_download_coc pattern: gate on _document_check_access for the portal job (customer can only ever reach their own data), then render the report via ir.actions.report.sudo()._render_qweb_pdf so the QWeb template traversal bypasses ACL. Return the PDF as an attachment with a friendly filename. Updates _fp_group_documents to point the From-You SO Confirmation link at this new route instead of /report/pdf/ directly. Co-Authored-By: Claude Opus 4.7 (1M context) <noreply@anthropic.com>