fix bug : external users should not see costprice and margin infos