Odoo Changelog — 2020-05-14

Thursday, May 14, 2020

1 change · master

Security(1)

Security fixes and vulnerability patches

[MERGE] *: remove read access to ir.ui.view

Enterprisemasteraccount_consolidationaccount_reportsaccount_saftapprovals_purchasedata_cleaningdata_mergedelivery_bpostdelivery_uspshr_appraisalhr_payrollindustry_fsm_reportiotl10n_be_hr_payrolll10n_be_intrastatl10n_be_reportsl10n_co_ediweb_ganttweb_gridweb_studioSECURITY

This update removes broad read access to internal view definitions and ensures permissions are evaluated as the actual user. It helps prevent users from seeing actions they cannot perform and strengthens access control across many Enterprise apps.

Original PR description

Enterprise version of the changes made at odoo/odoo#44993 (where the changes are
explained in more details)

#access-control#permissions#security#views