Skip to Content
Menu
This question has been flagged
2 Replies
1715 Views

I found a bug in odoo that a normal user who has access to the contacts can edit company information by just going to partner select his won name then there is a link to the company of partner form click on that and edit. If the user changes the address then it will reflect on quotation/so/invoice.

Could anyone suggest how to get rid of this bug?

Avatar
Discard

Not get what you have stated clearly if you feel it as a bug, then report it at: https://github.com/odoo/odoo/issues

Best Answer

Hi,

The address for company details(res.company) is computed from its many2one field partner. So basically anyone with edit access to full partner list will be able to edit company address.

If you want to change this you can create a record rule(Settings/ Technical/ Security/ Record rules) for model res.partner so only certain user group can edit company details.

Avatar
Discard