odoo_source

Files

T

Thomas Lefebvre (thle) 8029b467da [FIX] hr_timesheet: prevent user to see other employee's timesheets

Steps to reproduce:
- for a user, define Timesheets access rights to "User: own timesheets only";
- go to Reporting tab in Timesheets application with this user;
- go to pivot view "By Project" or "By Task".

Issue:
It is possible to see timesheets that do not belong to the user.

Solution:
Add rules which force de domain for the `timesheets.analysis.report` model.

opw-3088745

closes odoo/odoo#108553

X-original-commit: 07c9a3687511c2feaf9b6558da8c7f4d93470e64
Signed-off-by: Xavier Bol (xbo) <xbo@odoo.com>
Signed-off-by: Lefebvre Thomas (thle) <thle@odoo.com>

2022-12-23 07:44:44 +01:00

controllers

[IMP] project,*: improve user experience

2022-09-07 23:10:37 +02:00

data

[REF] *: Analytic Apocalypse

2022-09-20 12:36:01 +02:00

i18n

[FIX] {sale_}project,hr_timesheet: translate various messages

2022-11-08 23:14:51 +01:00

models

[FIX] web, *: multi-db /web/session/authenticate