Thursday, August 20, 2026
1 change · saas-19.1
Security fixes and vulnerability patches
This update prevents interviewers from changing or deleting referral applicants unless they are assigned to interview them. It protects candidate records from unintended edits while keeping interviewers focused on the applicants they are responsible for.
Original PR description
Steps to reproduce: - Create user A with interviewer role - A is referring a candidate B for a job - Go to referral and click on the number "1" - Group the view by stages - Drag & drop B between stages Current behavior: Interviewer can write/unlink on his referee aplicant Expected behavior: Interviewer has only rights on assigned interviewee applicant task-id: 6452353 Forward-Port-Of: odoo/enterprise#128131