Saturday, August 22, 2026
1 change · master
Security fixes and vulnerability patches
Interviewers can no longer edit or delete referral applicants simply because they referred them. This keeps applicant records protected so interviewers only manage candidates they are actually assigned to interview.
Original PR description
Steps to reproduce: - Create user A with interviewer role - A is referring a candidate B for a job - Go to referral and click on the number "1" - Group the view by stages - Drag & drop B between stages Current behavior: Interviewer can write/unlink on his referee aplicant Expected behavior: Interviewer has only rights on assigned interviewee applicant task-id: 6452353 Forward-Port-Of: odoo/enterprise#128615 Forward-Port-Of: odoo/enterprise#128131