Daily updates from Odoo
Tuesday, February 10, 2026
1 change · master
Security fixes and vulnerability patches
This update resolves security issues related to copying spreadsheets and dashboards. It simplifies the copying process by removing unnecessary security checks, allowing users to copy documents without requiring excessive permissions. This enhances usability and reduces potential security risks.
Original PR description
In order to be able to copy a spreadsheet or a dashboard on which the user has access to, without requiring a bunch of extra security rights, this fix removes the need to - when copying a dashboard, the copy of the field 'main_data_model_ids' that is only used on standard dashboards, would require the read right on ir_model for no good reasons - when copying any spreadsheety document (spreadsheet, dashboard, etc.) the remove the field spreadsheet_revision_ids from the data sent by the client, so the field security won't be triggered on an empty field Forward-Port-Of: odoo/enterprise#106348 Forward-Port-Of: odoo/enterprise#99931