Thursday, October 16, 2025
1 change · saas-18.4
Security fixes and vulnerability patches
Point of Sale now only lets an employee return to the backend when that employee is linked to the currently connected user. This reduces unintended backend access while still allowing managers to close POS sessions when needed.
Original PR description
Task: [5154178](https://www.odoo.com/odoo/project/1737/tasks/5154178) --- Previously, any employee with the role `manager` could go to the backend. Now, the only employees that can go back to the backend are those binded to the user connected. Managers can still close the session. Forward-Port-Of: odoo/odoo#231063 Forward-Port-Of: odoo/odoo#230756