Daily updates from Odoo
Wednesday, September 4, 2024
1 change · master
Security fixes and vulnerability patches
Appointment menus are now easier for users to find, while access is controlled by each user's permissions. Users can create and edit appointment share links from the list view, and security rules now better protect appointment types, share links, and calendar events.
Original PR description
Menu Items =========== Ensure that the menu items are visible to all user groups and their accessibility depends upon the access rights and rules. Access rule ============ For group_appointment_user: - They can edit only appointment types that are created by them. - They can only edit the share links that are created by them. For no_access: - They can only read the share link they have created or in which they are assigned as a staff user. - They can only edit the share links that are created by them. Earlier the form view of the calendar.event was not editable if the current user is not a part of the organizer or attendee. This pr addresses the issue now there is an exception for the appointment user to edit the events. Share Link ============= Earlier the creation and edition of the share link were not supported by its tree view. This pr adds the feature of creating and updating the shared link through the formviewdialog. Task-3905109