search

OCA / server-backend

GNU Affero General Public License v3.0
96 stars 263 forks source link

[FIX] Secure Odoo multi company, by only showing roles for non-compan… #278

Closed rconjour closed 1 week ago

rconjour commented 6 months ago

We noted that when multiple companies are selected, you will have all the roles, of those companies combined. For that reason, i extended the code that if there are multiple companies selected, you only have the roles that are not linked to any specific company.

rconjour commented 6 months ago

What if the user has the same role for each company?

@amh-mw if you configure that correctly, you'll leave the "company" field empty, and then this role is applied on every company, like this: image

The role "dev" applies to all companies the user has access to, but sales manager, purchasing and ceo only to one specific defiened company.

github-actions[bot] commented 1 month ago

There hasn't been any activity on this pull request in the past 4 months, so it has been marked as stale and it will be closed automatically if no further activity occurs in the next 30 days. If you want this PR to never become stale, please ask a PSC member to apply the "no stale" label.