Odoo Changelog — 2025-02-14

Friday, February 14, 2025

2 changes

Improvements(2)

Enhancements to existing features

[IMP] sign: adding cryptographic signature to signed document

EnterprisemastersignHIGH

Signed PDF documents can now include a cryptographic signature, making it possible to detect if a document is changed after signing. Companies configure the required certificate information in Sign settings, improving trust when signed files are shared externally.

Original PR description

## Purpose

Currently when we download a signed document, and send it by mail, we have no way to ensure that no change has been made on this pdf after the recipient signed. We would like to use some format that would keep track of all changes on the pdf.

## Specification

Once signed, the pdf should be converted in a format that allows tracking of subsequent changes.

## Technical details

In order to be able to add the cryptographic signature documents, the user must upload his private key and certificate files to the database from the settings. The user must also add the password used when creating the files. These settings are found under the sign catergory in the settings app.

**Note**:
The required files can be generated using the following command
```bash
openssl req -x509 -newkey rsa:4096 -keyout key.pem -out cert.pem -sha256 -days 365
```
### Known limitation
- The signer currently only supports SHA256-RSA signing keys

Task: 4331729

#electronic-signature#document-integrity#pdf#certificate

[IMP] hr_expense: Bye Bye reports

PR #75507

Enterprisemasterhr_expensedocuments_accountdocuments_hr_expensehr_expense_extracthr_expense_predict_producthr_payroll_expenseHIGH

Employees can now submit most expenses directly without creating a separate expense report, reducing extra steps and friction. If an employee has no expense manager assigned, submitted expenses are automatically approved, making reimbursement processing faster.

Original PR description

Most of the time, expenses are created as "standalone"s and forcing
the use of an expense report is adding frustrating unnecessary steps.

A simplification was decided and the model hr.expense.sheet is removed,
giving all of its remaining important logic to the `hr.expense`.

In addition, approval flow was simplified with the implementation of
an auto-validation process, where submitting an expense also approves it
when no expense manager is set on the employee.

See task for more details.

task-id: 4481615

#expenses#approval#automation#simplification

## Purpose Currently when we download a signed document, and send it by mail, we have no way to ensure that no change has been made on this pdf after the recipient signed. We would like to use some format that would keep track of all changes on the pdf. ## Specification Once signed, the pdf should be converted in a format that allows tracking of subsequent changes. ## Technical details In order to be able to add the cryptographic signature documents, the user must upload his private key and certificate files to the database from the settings. The user must also add the password used when creating the files. These settings are found under the sign catergory in the settings app. **Note**: The required files can be generated using the following command ```bash openssl req -x509 -newkey rsa:4096 -keyout key.pem -out cert.pem -sha256 -days 365 ``` ### Known limitation - The signer currently only supports SHA256-RSA signing keys Task: 4331729

Most of the time, expenses are created as "standalone"s and forcing the use of an expense report is adding frustrating unnecessary steps. A simplification was decided and the model hr.expense.sheet is removed, giving all of its remaining important logic to the `hr.expense`. In addition, approval flow was simplified with the implementation of an auto-validation process, where submitting an expense also approves it when no expense manager is set on the employee. See task for more details. task-id: 4481615