Tuesday, January 20, 2026
1 change · 17.0
Resolved issues and error corrections
This update fixes a security vulnerability in Odoo 17.0 where users could access Verifactu certificates for all companies, regardless of their permissions. The change restricts access to certificates based on company affiliation, ensuring data security and compliance. This prevents unauthorized access to sensitive business documents.
Original PR description
**PROBLEM** In 17.0, you can access the verifactu certificate of all companies. **STEP TO REPRODUCE** - Have 2 companies. - Create a certificate for each of them. - Setup Marc Demo with the Accountant role for the invoicing/accounting app. - Remove him from the ES company. - When accessing the verifactu certificate view, he will still have access to the ES company certificate. opw-5354383