Odoo Changelog — 2025-09-05

Friday, September 5, 2025

1 change

Security(1)

Security fixes and vulnerability patches

[WIP][IMP] hr: Assign minimal user rights on creation from employee

Enterprisemasterfrontdeskhr_referralplanningSECURITY

Creating a user from an employee now gives the new account only minimal access rights instead of full administrator permissions. This reduces the risk of accidental over-permissioning and helps keep default access aligned with safer business practices.

Original PR description

Previously, when creating a user from an existing employee record (via the "Create User" button), the system would assign the new user full admin rights by default which is a security concern.

This improvement introduces a method to assign minimal access rights to the user instead, ensuring appropriate and safe default permissions.

Task: 4824894

#employee access#user permissions#security