Tuesday, February 10, 2026
1 change · saas-19.1
Security fixes and vulnerability patches
This update resolves security issues related to copying spreadsheets and dashboards within the Enterprise edition. By removing unnecessary security checks, users can now copy these documents without requiring elevated permissions, streamlining the process and improving usability.
Original PR description
In order to be able to copy a spreadsheet or a dashboard on which the user has access to, without requiring a bunch of extra security rights, this fix removes the need to - when copying a dashboard, the copy of the field 'main_data_model_ids' that is only used on standard dashboards, would require the read right on ir_model for no good reasons - when copying any spreadsheety document (spreadsheet, dashboard, etc.) the remove the field spreadsheet_revision_ids from the data sent by the client, so the field security won't be triggered on an empty field Forward-Port-Of: odoo/enterprise#99931