Monday, July 28, 2025
1 change · saas-18.4
Security fixes and vulnerability patches
The Point of Sale now correctly hides product cost and margin details based on the margin display setting and cashier permissions. This protects sensitive profitability information from employees who should not see it while preserving access for authorized cashier roles when enabled.
Original PR description
Before this commit, the "Show margins & costs" setting did not correctly enforce visibility. When enabled, cost and margin information was displayed to all users, regardless of their cashier rights. Furthermore, even when this setting was disabled, this sensitive information was still visible to cashiers with advanced and minimal rights. This commit modifies the behavior: - If "Show margins & costs" is enabled, cost and margin details are visible in the PoS UI only for employees with 'basic' and 'advanced' cashier rights, and hidden from those with 'minimal' rights. - If "Show margins & costs" is not checked, this information is hidden from all users in the PoS UI. opw-4899231 --- I confirm I have signed the CLA and read the PR guidelines at www.odoo.com/submit-pr Forward-Port-Of: odoo/odoo#218649