Monday, November 14, 2016
10 changes · master
Security fixes and vulnerability patches
Unsubscription links for mass mailings now include a secure token to prevent attackers from guessing link details and unsubscribing other people without permission. Old unsubscribe links will no longer work, but the change protects mailing lists and customer communication preferences.
Original PR description
Description of the issue/feature this PR addresses: Prevent brute force attacks that could perform unwanted unsubscriptions. Current behavior before PR: All parameters are plain text: mailing id, resource id and email. If you know the email, you can brute-force to get the ids and unsubscribe somebody. Desired behavior after PR is merged: A secure token is appended to the unsubscription URL, and access is denied if the incoming token does not match. Breaking change. This makes old URLs not work, that's why this patch goes to master. This is related to https://github.com/OCA/social/pull/58. ## I confirm I have signed the CLA and read the PR guidelines at www.odoo.com/submit-pr @Tecnativa
New functionality added to Odoo
FedEx Saturday Delivery charges are now shown as a separate line on the sales order instead of being bundled into the delivery cost. This makes value-added delivery services clearer for customers and easier for businesses to review or account for.
Original PR description
Description of the issue/feature this PR addresses: - Add Saturday Delivery option in fedex - TASK: https://www.odoo.com/web#id=24185&view_type=form&model=project.task&action=327&menu_id=4720 - PAD: https://pad.odoo.com/p/r.d00e2b1d45c89c9bd8d3fe6bbc674126 Current behavior before PR: - Separate sale order line for value added service charges(Saturday Delivery) was not created in sale order. Desired behavior after PR is merged: - separate sale order line for value added services charges(Saturday Delivery) is added in sale order. I confirm I have signed the CLA and read the PR guidelines at www.odoo.com/submit-pr
Enhancements to existing features
This update refines wording in the database management page to make labels or messages easier to understand. It is a small language improvement that helps users interpret the interface more clearly without changing functionality.
Resolved issues and error corrections
A small wording typo was corrected in the Live Chat settings interface. This improves clarity and polish for users without changing functionality or workflows.
This update improves wording in the delivery workflow to make messages easier to understand. It is a minor usability improvement that helps users interpret delivery-related information more clearly without changing core functionality.
The stock settings screen now limits the product owner option to developer mode. This keeps everyday configuration simpler while preserving access for advanced users who need it.
Original PR description
Description of the issue/feature this PR addresses: Task: https://www.odoo.com/web?debug=#id=29252&view_type=form&model=project.task&action=333&active_id=131&menu_id=4720 Pad:https://pad.odoo.com/p/r.cdf20dd207bdf416fa9ba4449e159a61 Current behavior before PR: Desired behavior after PR is merged: -- I confirm I have signed the CLA and read the PR guidelines at www.odoo.com/submit-pr
The Manufacturing app renames the product filter from "Components" to "BoM Components". This makes the filter clearer for users working with bills of materials and helps avoid confusion with other component-related concepts.
Original PR description
Description of the issue/feature this PR addresses: Task: https://www.odoo.com/web#id=29395&view_type=form&model=project.task&action=333&active_id=131&menu_id=4720 Pad: https://pad.odoo.com/p/r.f3222ed7c0613b11bd154aaa3625cdca Current behavior before PR: Desired behavior after PR is merged: -- I confirm I have signed the CLA and read the PR guidelines at www.odoo.com/submit-pr
The support contact details shown on the POSBox homepage have been corrected. This helps users reach the right support channel when they need assistance, reducing confusion and delays.
This update corrects wording in the payment area to make the interface clearer and more professional. It is a minor text-only fix with no expected impact on payment behavior or workflows.