Merge pull request #100 from OpenSPP/fix/spp-session-tracking-improvements

fix(spp_session_tracking): harden security, improve views, and add comprehensive tests

Author: gonzalesedwin1123

spp_case_session/views/session_views.xml

@@ -6,17 +6,15 @@
         <field name="model">spp.session</field>
         <field name="inherit_id" ref="spp_session_tracking.view_session_form" />
         <field name="arch" type="xml">
-            <xpath expr="//sheet/group[1]" position="before">
-                <div class="oe_button_box" name="button_box">
-                    <button
-                        name="action_view_cases"
-                        type="object"
-                        class="oe_stat_button"
-                        icon="fa-folder-open"
-                    >
-                        <field name="case_count" widget="statinfo" string="Cases" />
-                    </button>
-                </div>
+            <xpath expr="//div[hasclass('oe_button_box')]" position="inside">
+                <button
+                    name="action_view_cases"
+                    type="object"
+                    class="oe_stat_button"
+                    icon="fa-folder-open"
+                >
+                    <field name="case_count" widget="statinfo" string="Cases" />
+                </button>
             </xpath>
         </field>
     </record>