Daily updates from Odoo
Thursday, October 2, 2025
1 change
Security fixes and vulnerability patches
This fix prevents Helpdesk tickets from being linked to a customer belonging to a different company. It protects multi-company access rules so users only see and open tickets they are allowed to access.
Original PR description
**Issue**: It is possible to associate a partner that belongs to a different company than the ticket’s company. As a result, some users could see tickets in the list view that they should not have access to. When attempting to open those tickets, an error was raised. Even worse, in some cases (see the associated ticket), certain users were still able to access them. **Steps to reproduce**: - Create two companies (A and B) - Switch to company A - Open the Helpdesk application - Create and open a ticket - Select both companies A and B - Assign a partner linked to company B to the ticket - Save it opw-4926497