Daily updates from Odoo
Monday, October 6, 2025
5 changes
1 change
Security fixes and vulnerability patches
Helpdesk tickets now only allow customers that belong to the same company as the ticket. This prevents users from seeing or accessing tickets linked to customers from another company, improving data separation and reducing access errors.
Original PR description
**Issue**: It is possible to associate a partner that belongs to a different company than the ticket’s company. As a result, some users could see tickets in the list view that they should not have access to. When attempting to open those tickets, an error was raised. Even worse, in some cases (see the associated ticket), certain users were still able to access them. **Steps to reproduce**: - Create two companies (A and B) - Switch to company A - Open the Helpdesk application - Create and open a ticket - Select both companies A and B - Assign a partner linked to company B to the ticket - Save it opw-4926497 Forward-Port-Of: odoo/enterprise#96193 Forward-Port-Of: odoo/enterprise#93201
1 change
Security fixes and vulnerability patches
Helpdesk tickets now prevent assigning a customer/contact from a different company than the ticket itself. This avoids cross-company visibility problems, prevents access errors, and helps ensure users only see support tickets they are allowed to access.
Original PR description
**Issue**: It is possible to associate a partner that belongs to a different company than the ticket’s company. As a result, some users could see tickets in the list view that they should not have access to. When attempting to open those tickets, an error was raised. Even worse, in some cases (see the associated ticket), certain users were still able to access them. **Steps to reproduce**: - Create two companies (A and B) - Switch to company A - Open the Helpdesk application - Create and open a ticket - Select both companies A and B - Assign a partner linked to company B to the ticket - Save it opw-4926497 Forward-Port-Of: odoo/enterprise#96193 Forward-Port-Of: odoo/enterprise#93201
1 change
Security fixes and vulnerability patches
Helpdesk now prevents tickets from being linked to a customer from a different company. This helps ensure users only see and access tickets appropriate to their company, avoiding access errors and reducing data exposure risk.
Original PR description
**Issue**: It is possible to associate a partner that belongs to a different company than the ticket’s company. As a result, some users could see tickets in the list view that they should not have access to. When attempting to open those tickets, an error was raised. Even worse, in some cases (see the associated ticket), certain users were still able to access them. **Steps to reproduce**: - Create two companies (A and B) - Switch to company A - Open the Helpdesk application - Create and open a ticket - Select both companies A and B - Assign a partner linked to company B to the ticket - Save it opw-4926497 Forward-Port-Of: odoo/enterprise#96193 Forward-Port-Of: odoo/enterprise#93201
2 changes
Security fixes and vulnerability patches
This fix prevents Helpdesk tickets from being linked to a customer contact belonging to a different company than the ticket. It helps ensure users only see and access tickets for the companies they are allowed to work with, avoiding access errors and potential unauthorized visibility.
Original PR description
**Issue**: It is possible to associate a partner that belongs to a different company than the ticket’s company. As a result, some users could see tickets in the list view that they should not have access to. When attempting to open those tickets, an error was raised. Even worse, in some cases (see the associated ticket), certain users were still able to access them. **Steps to reproduce**: - Create two companies (A and B) - Switch to company A - Open the Helpdesk application - Create and open a ticket - Select both companies A and B - Assign a partner linked to company B to the ticket - Save it opw-4926497 Forward-Port-Of: odoo/enterprise#96193 Forward-Port-Of: odoo/enterprise#93201
Resolved issues and error corrections
The analytic distribution widget now filters analytic accounts by the document's company. This prevents users from seeing or choosing accounts from other companies, supporting proper multi-company data separation.
Original PR description
**Description of the issue/feature this PR addresses:** When creating or editing an analytic distribution, the analytic account selection does not respect the company context. This allows users to…
**Description of the issue/feature this PR addresses:** When creating or editing an analytic distribution, the analytic account selection does not respect the company context. This allows users to see and select analytic accounts from other companies, which violates the multi-company record rules. <img width="669" height="333" alt="2025-09-08_09-28" src="https://github.com/user-attachments/assets/488eb4b1-fdfa-49ca-a57e-8f46a264107d" /> **Current behavior before PR:** The analytic account dropdown in the analytic distribution widget shows analytic accounts from all companies, instead of being restricted to the current company. **Desired behavior after PR is merged:** The analytic account selection in the analytic distribution widget is filtered by company. Only analytic accounts belonging to the document company will be displayed, ensuring compliance with multi-company record rules. --- I confirm I have signed the CLA and read the PR guidelines at www.odoo.com/submit-pr Forward-Port-Of: odoo/odoo#228935 Forward-Port-Of: odoo/odoo#225835