fields_security_dikasa/security/views/stock.xml

<?xml version="1.0" encoding="utf-8"?>
<openerp>
    <data>
      <record id="view_picking_form" model="ir.ui.view">
        <field name="name">view_picking_form</field>
        <field name="model">stock.picking</field>
        <field name="inherit_id" ref="stock.view_picking_form"/>
        <field name="arch" type="xml">

          <button name="action_confirm" states="draft" position="replace">
            <button name="action_confirm" states="draft" string="Mark as Todo" type="object" class="oe_highlight" groups="base.group_user" invisible="1"/>
          </button>

        </field>
      </record>

      <record id="view_move_form" model="ir.ui.view">
        <field name="name">view_move_form</field>
        <field name="model">stock.move</field>
        <field name="inherit_id" ref="stock.view_move_form"/>
        <field name="arch" type="xml">

          <button name="action_confirm" states="draft" position="replace">
            <button name="action_confirm" states="draft" string="Mark as Todo" type="object" class="oe_highlight" groups="base.group_user" invisible="1"/>
          </button>

          <button name="force_assign" states="confirmed" position="replace">
            <button name="force_assign" states="confirmed" string="Set Available" type="object" class="oe_highlight" invisible="1"/>
          </button>

        </field>
      </record>

      <record id="view_move_picking_form" model="ir.ui.view">
        <field name="name">view_move_picking_form</field>
        <field name="model">stock.move</field>
        <field name="inherit_id" ref="stock.view_move_picking_form"/>
        <field name="arch" type="xml">

          <button name="action_confirm" states="draft" position="replace">
            <button name="action_confirm" states="draft" string="Confirm" type="object" groups="base.group_user" invisible="1"/>
          </button>

          <button name="force_assign" states="confirmed" position="replace">
            <button name="force_assign" states="confirmed" string="Force Availability" type="object" groups="base.group_user" invisible="1"/>
          </button>

        </field>
      </record>


    </data>
  </openerp>