Daily updates from Odoo
Friday, November 22, 2019
2 changes
Security fixes and vulnerability patches
This change reverses part of a previous portal update because it could expose private information to portal users. It helps keep customer-facing portal access limited to appropriate business documents and data.
Original PR description
Purpose ======= This fix makes no sense because it exposes some private data to portal users. Fortunately it was only introduced in the master branch. Description of the issue/feature this PR addresses: Current behavior before PR: Desired behavior after PR is merged: -- I confirm I have signed the CLA and read the PR guidelines at www.odoo.com/submit-pr
This change reverses a recent portal update that could have exposed private information to external portal users. It helps keep helpdesk and subscription-related customer data appropriately protected before the change reaches a released version.
Original PR description
Purpose ======= This fix makes no sense because it exposes some private data to portal users. Fortunately it was only introduced in the master branch.