Daily updates from Odoo
Wednesday, July 1, 2026
2 changes
Enhancements to existing features
This update records device information when a login appears from a device that does not match the one currently associated with the user session. It helps teams spot suspicious access patterns sooner and strengthens account monitoring without changing the normal login experience.
Original PR description
Log device information if fingerprint doesn't match the one currently being used for the current session. Task-6340963 Forward-Port-Of: odoo/odoo#272413
Resolved issues and error corrections
This update makes sure users can only access detailed accounting move lines if they belong to the correct accounting groups. It reduces the risk of showing sensitive accounting data to users who should only have limited access, such as portal users.
Original PR description
Using check_access on the model alone is not enough, as some groups (like portal) could have access to the model itself but rely on record rules (which we now bypass) for filtering access to actual records. This check is there for extra-safety (the access rules to account.report should anyway prevent access) ; we fix it by explicitly checking the user has the proper accounting groups. Forward-Port-Of: odoo/enterprise#120749