Friday, February 17, 2023
1 change · master
Security fixes and vulnerability patches
Payment token access is now handled more consistently, so users can normally only see their own saved payment methods. Access is relaxed only when a specific payment flow requires it, improving privacy and reducing unnecessary exposure of payment data.
Original PR description
Until this point the access to tokens was somehow arbitrary and illogical. After this commit we will uniformize the tokens access rule where by default an user can only access its own tokens by default and in function of the use case then relax the rules. Task - 2832561 --- I confirm I have signed the CLA and read the PR guidelines at www.odoo.com/submit-pr