Odoo Changelog — 2025-05-02

Friday, May 2, 2025

1 change

Security(1)

Security fixes and vulnerability patches

[FIX] hr: restrict access to 'HR Settings' & proper permissions in 'My Profile'

Enterprisemastertimesheet_gridSECURITY

Access to HR Settings in employee profiles is now limited to users with the right HR manager permissions. Employees can edit permitted profile sections only when self-editing is enabled, while approver fields are correctly available where allowed.

Original PR description

Steps:
- Go to 'My Profile'.
- Check the 'HR Settings' tab and other sections ('Resume', 'Work Information' and 'Private Information').

Issues:
- Users could edit 'HR Settings' without proper HR permissions.
- Approver fields were not editable even though self edit setting was on.

Fix:
- Restricted HR Settings edits to users with HR manager rights.
- Ensured all the fields in 'Resume', 'Work Information' and 'Private Information' are editable only with hr_employee_self_edit enabled.
- Approver related fields are now editable in 'Work Information' section.

Task-4319956

#hr#permissions#my-profile#employee-self-edit