Odoo Changelog — 2025-04-10

Thursday, April 10, 2025

1 change · 18.0

Security(1)

Security fixes and vulnerability patches

[FIX] hr_attendance_gantt: restrict employee visibility to manager

Enterprise18.0hr_attendance_ganttSECURITY

The Attendance Gantt view no longer shows employee names that a user is not allowed to access. This prevents misleading schedule displays and helps protect employee information from unauthorized visibility.

Original PR description

### Issue:
- In the Attendance Gantt view, users can see all employees in the company, including those they are not allowed to manage or view. -While access rules prevent users from seeing attendance records for these employees, the employees' names still appear in the Gantt view. -This creates a misleading user experience and potentially exposes restricted information (employee names).

### Steps To Reproduce:
1. Log in as Marc Demo.
2. Open the attendance App.
3. Observe that all employees are shown as group headers.

### Solution:
   - this PR adds a test to check that the Gantt view only shows employees that the user has access to.

community fix: https://github.com/odoo/odoo/pull/205031
opw-4570867

#attendance#gantt#employee-privacy#access-control