Odoo Changelog — 2022-03-08

Tuesday, March 8, 2022

3 changes · master

Improvements(3)

Enhancements to existing features

[IMP] documents_project: add security test on upload_document

Enterprisemasterdocuments_project

A new automated test verifies that document uploads linked to projects continue to respect existing access checks. This helps catch future changes that could accidentally weaken protection around uploaded project documents.

Original PR description

Since aaf0ec2531ee0c50a370f97593adbfa346cb7179 it is possible to pass
res_id and res_model to the upload_document route. This is not a
security issue at this time as the check method is called on ir.attachment.

The purpose of this commit is to ensure that we get warned if this check
is no more performed / by-passed for any reason.

task-2710539

#security#testing#documents#projects

[IMP] sign: show one line header while signing

PR #23771

EnterprisemastersignMEDIUM

The signing screen now uses a compact one-line header so users have more room to review and complete documents. It also streamlines signing actions and improves signer status display, especially across different screen sizes.

Original PR description

[IMP] sign: show one line header while signing One line header logic show/hide priority: Company Log >> current_signer[signature] >> other_signers >> Odoo Logo Large: Company Logo Odoo Logo…

[IMP] sign: show one line header while signing

One line header logic
show/hide priority: Company Log >> current_signer[signature] >> other_signers >> Odoo Logo

Large:  Company Logo            Odoo Logo               current_signer[signature], waiting_signers, canceled_signers, refused_signers, completed_signers[signature]
medium: Company Logo            current_signer[signature], waiting_signers, canceled_signers, refused_signers, completed_signers[signature]
small:  Company Logo            current_signer[signature]

In when the width of the window is smaller than a fixed number, all [signatures] will be hidden for the sake of the class mobile-hide

Details:
remove `Sign Document` button and reuse `Validate & Send Completed Document` button when there is no sign item in the document.
for backend signers, move `Ctrl + Left click to add a field` to the right of action buttons of the control panel
for backend signers, move signer status info to the pager of the control panel

Notes:
In order to keep the maximum responsiveness,
this implementation requires current_signer[signature] to be the first one in the signer list, which is different compared with the past.
(old behavior: is_signing_signer, waiting_signers, canceled_signers, refused_signers, completed_signers[signature])
Restore it if you can:)

Before this commit:
While signing, signers will see multiple-line header which occupies too much space of the signing PDF(document)
It is better to show only one line header

taskid:2735852

#signing#documents#responsive-ui

[IMP] sign: adds email signature when sending document

PR #23241

Enterprisemastersign

Signature request emails now include the sender's usual email signature, matching the behavior users expect from other Odoo apps. This makes outgoing signing requests look more complete, consistent, and professional for recipients.

Original PR description

In many modules the signature of the user is sent together with the emails
they send. For sign, it wasn't the case when requesting signatures. This PR
adds the signature in the body of the email when sending sign.requests.

task-2688134

#email#signature#documents

Since aaf0ec2531ee0c50a370f97593adbfa346cb7179 it is possible to pass res_id and res_model to the upload_document route. This is not a security issue at this time as the check method is called on ir.attachment. The purpose of this commit is to ensure that we get warned if this check is no more performed / by-passed for any reason. task-2710539

[IMP] sign: show one line header while signing One line header logic show/hide priority: Company Log >> current_signer[signature] >> other_signers >> Odoo Logo Large: Company Logo Odoo Logo current_signer[signature], waiting_signers, canceled_signers, refused_signers, completed_signers[signature] medium: Company Logo current_signer[signature], waiting_signers, canceled_signers, refused_signers, completed_signers[signature] small: Company Logo current_signer[signature] In when the width of the window is smaller than a fixed number, all [signatures] will be hidden for the sake of the class mobile-hide Details: remove `Sign Document` button and reuse `Validate & Send Completed Document` button when there is no sign item in the document. for backend signers, move `Ctrl + Left click to add a field` to the right of action buttons of the control panel for backend signers, move signer status info to the pager of the control panel Notes: In order to keep the maximum responsiveness, this implementation requires current_signer[signature] to be the first one in the signer list, which is different compared with the past. (old behavior: is_signing_signer, waiting_signers, canceled_signers, refused_signers, completed_signers[signature]) Restore it if you can:) Before this commit: While signing, signers will see multiple-line header which occupies too much space of the signing PDF(document) It is better to show only one line header taskid:2735852

In many modules the signature of the user is sent together with the emails they send. For sign, it wasn't the case when requesting signatures. This PR adds the signature in the body of the email when sending sign.requests. task-2688134