Thursday, September 5, 2024
1 change · 17.0
Resolved issues and error corrections
This fix corrects a security issue where the 'New Quotation' button was visible to users without sales permissions. The button now properly checks user access rights before displaying, ensuring only authorized users can create quotations from field service tasks.
Original PR description
Versions: ----------- 15.0 Steps to Reproduce -------------- - Install industry_fsm_sale - Create a new user with these access rights. Project -> user Field Service -> user Timesheets -> User: own timesheets only - Create a new task, and assign it to the created user. - Login as user - Open the task Issue ---------- - The 'New quotation' button is visible even user has no sales access rights. Cause --------- - The user is getting access to the button from the field service group. Fix --------- - We remove the group from the button. - We only show 'New Quotation' button if user have sales access rights. task-3827319 Forward-Port-Of: odoo/enterprise#60536