Wednesday, July 1, 2020
1 change · master
Security fixes and vulnerability patches
This fix prevents employees without attendance access rights from manually changing their own past attendance records from their profile. It helps protect workforce time records from unauthorized edits and keeps attendance data reliable.
Original PR description
Steps to reproduce: - Let's consider a user U with no access to hr.attendance - Let's consider that U has made some check in and check out - Log with U - Go to your profile and on Last month Bug: U can modifiy manually his attendances. opw:2279682 X-original-commit: 53a4a95270622f3aa08136470fb627d51ed4b365