Daily updates from Odoo
Monday, November 25, 2019
1 change
Security fixes and vulnerability patches
This update reduces security exposure around payment providers by limiting access to sensitive configuration fields and tightening internal payment processing methods. It helps prevent unauthorized changes or misuse of payment provider accounts while also slightly improving payment form rendering performance.
Original PR description
Reduce the attack surface on payment providers by: - enforcing private methods everywhere a public one is not required for the modules to work - add group security on sensitive fields - avoid invisible sudoification of records through method calls task-1969945 Enterprise PR odoo/enterprise#4744