Daily updates from Odoo
Thursday, September 4, 2025
2 changes
Security fixes and vulnerability patches
The VoIP country code lookup is no longer available to anonymous visitors and now requires a logged-in user. This reduces unnecessary public exposure of an internal VoIP service without changing normal use for authenticated users.
Original PR description
Change the authentication method of the /voip/get_country_code route from public to user.
Adds Australian Single Touch Payroll reporting through the ATO Super Choice API, including employer registration, report submission and retrieval, and super contribution integration. It also introduces audit logging and stronger access controls to meet payroll compliance requirements, with related fixes to payroll data and termination reporting.
Original PR description
This module adds single-touch payroll integrations with the ATO using the Super Choice API. The IAP server is used in the middle to ensure security and prevent unauthorised access to the ATO's API. It includes the following features: - Employer registration for STP - STP submission and retrieval of STP reports - Super Choice API integration for super contributions (Compliance Requirement) Add audit logging for Australian Payroll. A mixin that logs the selected field changes in the l10n_au.audit.log model. This is later synced to the IAP server. Add security constraints for STP compliance. Other misc fixes Tasks: 4201473 4201471 4076629