Daily updates from Odoo
Wednesday, August 19, 2026
1 change
Security fixes and vulnerability patches
Payroll-related updates, such as wage or yearly cost changes, are now hidden from employee chatter for users who do not have payroll access. This helps prevent sensitive compensation information from being exposed to people who should not see it.
Original PR description
[IMP] hr_payroll: restrict access on version change messages Backport of https://github.com/odoo-dev/enterprise/commit/081177657696826be69e8f4756ae7af51994f2b8 https://github.com/odoo/enterprise/pull/119350 Tracking messages on hr.employee (e.g. wage/yearly cost changes) were visible in the chatter to any user with access to the employee, even without payroll rights. Payroll-sensitive tracking values are now posted under a dedicated subtype, hidden from the chatter for users outside hr_payroll.group_hr_payroll_user. Task-6460201