odoo/odoo#81474
Created by William Braeckman (wbr)
Merged
at b5b105eabd90419a5856e8279e277743c5915fc9
Statuses:
- legal/cla: Contributor License Agreement check
- ci/runbot: Odoo Test Suite
- ci/upgrade_enterprise: Test upgrades for enterprise master
- ci/template: Contact runbot team for help in case of failure.
- ci/style: Optional style check. Ignore it only if strictly necessary.
- ci/security: Required security check. Can only be ignored by security team.
- label
- odoo-dev:15.0-fix-my-profile-edit-wbr
- head
- bf3b4d2304d1050e4c4112b7f766a8514b36c00e
- merged
- 4 years ago by Kevin Baptiste
| odoo/odoo | |
|---|---|
| 15.0 | #81474 |
| saas-15.1 | #81608 |
| 16.0 | |
| 17.0 | |
| 18.0 | |
| saas-18.2 | |
| saas-18.3 | |
| saas-18.4 | |
| 19.0 | |
| master | #81612 |
15.0 fix my profile edit wbr
Before this commit users were not able to edit their settings if they
had a linked employee for a company that was not currently active for
them.
This is due to the fact that since the employee_ids field is considered
safe to read/write by your own user the fields were loaded in sudo and
thus bypassed the security rules that were meant to prevent that issue.
The security rule is now enforced as a domain on the employee_ids.