Odoo Changelog — 2026-05-21

Thursday, May 21, 2026

1 change · saas-19.3

Refactoring(1)

Code cleanup and technical improvements

[REF] account: extract review_state access helpers to avoid duplication

Coresaas-19.3account

This update streamlines the process of checking user access rights within review workflows. By creating helper functions, the system now more efficiently determines if a user has the necessary permissions to modify records based on their review state (supervised, reviewed, etc.), improving reliability and reducing code duplication.

Original PR description

Introduce two small helpers on `AccountMove`:

* `_get_review_state_access_groups()` – returns the
  `(is_user_able_to_review, is_user_able_to_supervise)` booleans so the
  two `has_group` calls are not repeated across methods.

* `_check_review_state_access(review_state)` – raises an `AccessError`
  with a state-specific message when the current user lacks the required
  role to modify a record in the given `review_state`:
  - `'supervised'` → requires `account.group_account_manager`
  - `'reviewed'` / `'no_review'` /falsy → requires `account.group_account_user`
  - `'todo'`, `'anomaly'` → unrestricted

opw-6128792


Forward-Port-Of: odoo/odoo#262531

#access control#review#permissions