Daily updates from Odoo
Monday, August 17, 2020
2 changes
Security fixes and vulnerability patches
This update adjusts several Enterprise apps to work with stricter access rules for internal system actions. It helps prevent unauthorized users from reading sensitive action records while keeping normal screens and workflows functioning as expected.
Original PR description
Enterprise part of odoo/odoo#53335
This update moves account-related action buttons to a more appropriate place on user profiles and fixes a helpdesk flow so visitors are authenticated before tokens are created. This improves reliability and reduces the risk of incorrect access behavior while keeping the changes limited to affected apps.
Original PR description
Changes related to odoo/odoo#33928 not linked directly to TOTP but linked to ancillary changes.