Victor Feyens
38e02bcb7f
The route used by the sale portal to update an option qty didn't check that the modified SOline was effectively an option. On the portal, only the optional lines were editable through the interface, but through xmlrpc, a portal user could be able to remove/update the qty of non optional lines from a quotation. This is not a true security failure since only the quantity could be modified through this route, but it makes sense to add a check to ensure this kind of modification cannot happen. closes odoo/odoo#88366 Signed-off-by: Victor Feyens (vfe) <vfe@odoo.com>
Odoo
Odoo is a suite of web based open source business apps.
The main Odoo Apps include an Open Source CRM, Website Builder, eCommerce, Warehouse Management, Project Management, Billing & Accounting, Point of Sale, Human Resources, Marketing, Manufacturing, ...
Odoo Apps can be used as stand-alone applications, but they also integrate seamlessly so you get a full-featured Open Source ERP when you install several Apps.
Getting started with Odoo
For a standard installation please follow the Setup instructions from the documentation.
To learn the software, we recommend the Odoo eLearning, or Scale-up, the business game. Developers can start with the developer tutorials