Daily updates from Odoo
Friday, July 10, 2026
1 change · master
Security fixes and vulnerability patches
The Sign app now blocks unsafe or invalid bulk use of the auto-write feature, reducing the risk of unintended changes to related records. It also improves logging and test coverage so administrators get clearer feedback when automatic updates cannot be safely applied.
Original PR description
Fix scenarios where the auto-write feature could fail or be unsafe: - Prevent unsafe mass updates: Users could enable auto-write in bulk without proper awareness, leading to unintended behavior. Additionally, the field could be manually exposed even when no linked model/field is set. we add safeguards and constraints to prevent enabling it in invalid cases. - Improve test coverage: Update test cases to ensure correct behavior when users have access to partner records but must not be allowed to update sensitive fields (e.g., email) of other users through those records. task-6147410 Forward-Port-Of: odoo/enterprise#115118