Daily updates from Odoo
Monday, July 27, 2020
1 change
Security fixes and vulnerability patches
Portal users now only see field service tasks that belong to their own company or linked partner, instead of all available field service tasks. This improves customer privacy and ensures customers access only relevant service information.
Original PR description
Before this commit, the visibility of fsm task was too broad. Once a custumer had access to fsm tasks he could see all of them. If is_fsm is true on the project and privacy_visibility = portal, only display the fsm tasks belonging to the partner linked to the portal user. If the partner is a person linked to a company, display all the tasks of this company. taskid: 2265562