Monday, March 30, 2026
1 change · saas-18.4
Security fixes and vulnerability patches
This change removes an overly broad permission that allowed inventory users to modify stock locations. It helps protect warehouse setup data while keeping normal inventory tasks like quantity updates and inventory adjustments working as expected.
Original PR description
During the development of the task of the PR https://github.com/odoo/odoo/pull/149149, this permission was added as a possible way to fix some found problems, but that's not the way to fix them, as allowing inventory users to modify locations is something very dangerous and out of scope of what an inventory user should do. Reverting the permission, and doing manual tests with an inventory user for doing a "update quantity" or a "inventory adjustment", there's no problem, so maybe that permission was needed in a past codebase. @Tecnativa Forward-Port-Of: odoo/odoo#243085