Daily updates from Odoo
Monday, July 23, 2018
2 changes
Security fixes and vulnerability patches
This update strengthens security checks before generating financial, payroll, manufacturing, and HR reports. It helps prevent users from seeing report data for companies or records they no longer have permission to access, reducing the risk of unauthorized disclosure.
Original PR description
task: https://www.odoo.com/web#id=1823127&action=333&active_id=967&model=project.task&view_type=form&menu_id=4720 -- I confirm I have signed the CLA and read the PR guidelines at www.odoo.com/submit-pr
Accounting reports now enforce stricter access and company-scope checks so users only see financial information they are allowed to view. This reduces the risk of unauthorized access to sensitive accounting data across companies and report exports.
Original PR description
- Privatize methods - Check read access to account.move.line - Check multi-companies access in reports task: https://www.odoo.com/web#id=1823127&action=333&active_id=967&model=project.task&view_type=form&menu_id=4720