Daily updates from Odoo
Tuesday, September 30, 2025
2 changes
1 change
Security fixes and vulnerability patches
AI tools are now limited to system users because they rely on server actions that regular users should not access. This helps prevent unintended use of privileged automation while keeping normal AI features safer for everyday users.
Original PR description
Tools are server actions to which normal users don't have access. (runbot.build.error/231672) Forward-Port-Of: odoo/enterprise#95534
1 change
Security fixes and vulnerability patches
A Turkish payroll employee field is now only visible to authorized HR/payroll users. This prevents access errors for regular internal users and keeps employee payroll information properly restricted.
Original PR description
The test test_employee_fields_groups crashed with: AccessError: The fields “l10n_tr_is_net_to_gross”, which you are trying to read, are not available for employee public profiles. This field exist without HR group restriction as a result, a non-HR internal user calling .read([]) triggered the AccessError. This commit adds groups="hr.group_hr_user" to this field so it is only accessible to HR users, resolving the error. [RB-231736](https://runbot.odoo.com/odoo/error/231736)