Daily updates from Odoo
Friday, July 24, 2026
3 changes
1 change
Security fixes and vulnerability patches
Employee payroll information for Switzerland, Indonesia, and Turkey is now limited to users with payroll access. This helps prevent non-payroll staff from viewing sensitive payroll-related fields in employee records.
Original PR description
This commit adds `groups="hr_payroll.group_hr_payroll_user"` to all fields displayed inside payroll tab in the form view of employee to make sure those fields are only accessible to payroll users. runbot-error-234071 Forward-Port-Of: odoo/enterprise#124828 Forward-Port-Of: odoo/enterprise#122293
1 change
Security fixes and vulnerability patches
This fix ensures employee point-of-sale clock-in and clock-out records follow the proper HR access restrictions. It helps prevent unauthorized visibility of sensitive employee attendance information and restores the expected automated test behavior.
Original PR description
Test `test_employee_fields_groups` failed because of the absence of HR group restrictions on the `pos_clock_in_out_ids` field. ----- runbot-938852
1 change
Security fixes and vulnerability patches
This fix ensures Belgian POS Blackbox employee clock-in and clock-out records are only visible to users with the appropriate HR permissions. It resolves a failing access-rights test and helps keep employee attendance-related information protected.
Original PR description
Test `test_employee_fields_groups` failed because of the absence of HR group restrictions on the `pos_clock_in_out_ids` field. ----- runbot-938852