Daily updates from Odoo
Wednesday, June 12, 2024
1 change · 17.0
Security fixes and vulnerability patches
This update adds access controls to prevent unauthorized users from removing the 281.50 tax tag on partner records. Only users with Bookkeeper or Accountant permissions can now modify this tag, preventing accidental accounting errors that could occur when non-accounting staff inadvertently unset critical tax classification tags.
Original PR description
Anyone that has access to the partner form can currently unset the 281.50 tag on any partner, later causing accounting errors. This commit forbids unsetting this tag by users who do not have 'Bookkeeper' (or 'Accountant', implied from 'Bookkeeper') access group. task-3955109