Daily updates from Odoo
Saturday, January 20, 2024
1 change · 17.0
Resolved issues and error corrections
This update fixes a security issue where users could create partner records through autocomplete suggestions even when they didn't have permission to do so. The system now properly respects the "no_create" restriction on partner fields, preventing unauthorized record creation and eliminating errors that occurred in partner portal fields.
Original PR description
Before this commit auto complete suggestion were showing on partner field even though there is no_create attribute on partner field and because of that user can create partner record from that field even though user is not allow to create record from it and also it gives trackback in partner portal field because of access_token. This commit prevent auto complete suggestion when partner field has no_create attribute set on them to avoid unnecessary partner creation from that field. task-3690532 Forward-Port-Of: odoo/odoo#150106