Monday, April 12, 2021
1 change · master
Security fixes and vulnerability patches
This change restores the previous access behavior for private projects, so simply following a project's discussion no longer grants visibility into related timesheets or planning information. It helps ensure sensitive project work data is only available to users with the appropriate project access.
Original PR description
This commit reverts functionality or business logic linked to the reverted community commit : https://github.com/odoo/odoo/commit/7059b177ee3108afe951dc279d3db4054eba4115 PR affected by the modification : - https://github.com/odoo/enterprise/pull/15025 : The user only have to subscribe the mail thread to see the timesheets. - odoo/enterprise#9359 : Replace allowed user by message partners PR community: odoo/odoo#65367 PR upgrade: odoo/upgrade#2128 task-2439329