diff --git a/ext/custom-addons/dp_custom/security/security.xml b/ext/custom-addons/dp_custom/security/security.xml
index d0575208..3a999ea2 100644
--- a/ext/custom-addons/dp_custom/security/security.xml
+++ b/ext/custom-addons/dp_custom/security/security.xml
@@ -24,6 +24,10 @@
         <field name="name">Ändern des PG-Status erlauben</field>
         <field name="comment">Ändern des PG-Status erlauben</field>
     </record>
+    <record id="group_allow_change_shopping_cart" model="res.groups">
+        <field name="name">Ändern der Warenkorbnummer erlauben</field>
+        <field name="comment">Ändern der Warenlorbnummer erlauben</field>
+    </record>
     <record id="group_is_order_processor" model="res.groups">
         <field name="name">Ist Auftragsbearbeiter</field>
         <field name="comment">Ist Auftragsbearbeiter</field>
diff --git a/ext/custom-addons/dp_custom/views/sale_views.xml b/ext/custom-addons/dp_custom/views/sale_views.xml
index 4fa4b97a..b9a54ca7 100644
--- a/ext/custom-addons/dp_custom/views/sale_views.xml
+++ b/ext/custom-addons/dp_custom/views/sale_views.xml
@@ -39,7 +39,8 @@
             <field name="origin" position="replace"/>
             <field name="payment_term_id" position="after">
                 <field name="client_order_ref"/>
-                <field name="origin"/>
+                <field name="origin" groups="dp_custom.group_allow_change_shopping_cart"/>
+                <field name="origin" attrs="{'readonly':[('order_type','=', 'D')]}" groups="!dp_custom.group_allow_change_shopping_cart"/>
                 <field name="confirmation_nr"/>
                 <field name="order_type"/>
                 <field name="assembly_state" groups="dp_custom.group_allow_change_pg_status"/>