Daily updates from Odoo
Tuesday, September 2, 2025
1 change
Security fixes and vulnerability patches
Access to two Belgian payroll information fields was corrected so they are only visible to payroll users. This protects sensitive payroll-related employee data and restores the expected validation test behavior.
Original PR description
**Issue** The test test_payroll_fields_are_hidden_to_non_payroll_users_in_employee_form_view failed due to missing payroll group protection on fields inside the Payroll Information tab of the hr.employee form view. **Reason** - The fields acerta_code and prisma_code were assigned only to hr.group_hr_user. - The test enforces that any field under the Payroll tab must either: - Be restricted with payroll groups (hr.group_hr_manager or hr_payroll.group_hr_payroll_user), or - Belong to the whitelist of allowed generic HR fields. - Since these two fields did not meet either condition, the test flagged them as missing payroll group protection. **Fix** - Updated acerta_code and prisma_code to be restricted with payroll groups (hr_payroll.group_hr_payroll_user). - This ensures only payroll-related users can access them, keeping the Payroll tab consistent with the intended security model. - After the fix, the test passes successfully. build_error-231302