Hi, When goofing around, I noticed that any user could generate a time sheet report for anyone in the company. I was logged with a normal employee and could generate a report for his manager.
This is kind of a weird behavior as I would expect this function to be locked based on the HR access rights: officers could see persons in their department and manager could see everyone. Yet, looks like OpenERP allows Simple employees to generate the manager time sheet report.
Any known way of preventing that?
Hi, I got the same issue. We do not see the exact time but we are able to know on what account the person worked I did few trials to put security rules (or group rules) on it without success. A lot of object, not sure on what object I should put a block (I do not know yet what is a transient object)