Wednesday, November 13, 2024
1 change · 17.0
Security fixes and vulnerability patches
Leave allocations involving multiple employees are now only visible to users in another company when at least one employee on the allocation belongs to that company. This prevents unrelated companies from seeing allocation records they should not access, improving data separation in multi-company setups.
Original PR description
Steps to reproduce: 1. Have multiple companies 2. Create a multiple employee allocation 3. Connect to the other company: you should be able to find the allocation This commit further restricts multi-company access to allocations, so that it is accessible only when at least one of the employees on the allocation have the same company. task-4241723 --- I confirm I have signed the CLA and read the PR guidelines at www.odoo.com/submit-pr