Daily updates from Odoo
Friday, October 3, 2025
1 change · master
Security fixes and vulnerability patches
Sensitive Saudi payroll fields are now only visible to authorized payroll users. This helps protect employee compensation-related information and restores the expected access controls.
Original PR description
Some payroll-related fields in the Saudi HR localization (hr.version form view) were missing group restrictions. As a result, non-payroll users could see sensitive fields such as: - l10n_sa_iqama_annual_amount - l10n_sa_medical_insurance_annual_amount - l10n_sa_work_permit_annual_amount This broke the payroll access test (test_payroll_fields_access), which ensures sensitive payroll information is only visible to users in the Payroll group. We add the missing groups="hr_payroll.group_hr_payroll_user" restriction on these fields in the form view so that only authorized users can access them. build_error-231290