added some privs for sales module to postbooks.js