Tuesday, February 1, 2022
2 changes · master
New functionality added to Odoo
This change adds a command-line option to neutralize copied databases before investigation, helping prevent accidental emails, payments, external service calls, or tax reporting submissions. It also updates several business modules so their sensitive external integrations are disabled during this irreversible neutralization process.
Original PR description
When debugging a database, it's sometimes desirable to neutralize it to avoid undesired side effects like sending emails. This PR adds a generic method on models to neutralize the current database. This method have to be overridden by modules models. The neutralize operation cannot be reversed should only be used on a database copy.
Businesses can now require users to confirm logins with a code sent by email when they have not set up an authenticator app. Administrators can enforce this extra login protection for employees only or for all users, including portal users.
Original PR description
Add the possibility to force the two-factor authentication for all users, using a two-factor authentication by email when the 2FA using an Authenticator app is not configured for the user. Two possibilities: - Force the 2FA only for employee users using the system parameter `auth_totp.policy=employee_required` - Force the 2FA for all users, employees and portals, using the system parameter `auth_totp.policy=all_required`