Daily updates from Odoo
Thursday, June 28, 2018
1 change
Security fixes and vulnerability patches
Stock users no longer receive invoice access simply because the Repair module is installed. The repair order invoice creation button is now hidden for users who do not have permission to create invoices, reducing accidental access to billing actions.
Original PR description
Description of the issue/feature this PR addresses:
TASK: https://www.odoo.com/web?#id=1844702&action=333&active_id=131&model=project.task&view_type=form&menu_id=4720
PAD: https://pad.odoo.com/p/r.e24b56086473456ce83dba690f002312
Current behavior before PR:
- In current stock user can have access to invoices after repair module install
Desired behavior after PR is merged:
- Remove the stock user invoice right
- Hide the button "create invoice" on the repair order if the user doesn't have the right to create an invoice
I confirm I have signed the CLA and read the PR guidelines at www.odoo.com/submit-pr