Daily updates from Odoo
Monday, May 11, 2026
1 change
Resolved issues and error corrections
This update addresses a security vulnerability where users without proper access could view sensitive financial data during expense creation. The change restricts access to key financial fields within the reinvoicing process, ensuring only authorized sales, accounting, and invoicing users can see this information. This improves data protection and compliance.
Original PR description
Some financial data were visible to users with no access rights through the customer to reinvoice advanced search when creating an expense. This commit ensures that these fields are invisible if the user doesn't have sales nor accounting nor invoicing access rights. task-5993099