Add group group_sale_secret_orders and use that instead of base.erp_manager.