Overslaan naar inhoud
Menu
Je moet geregistreerd zijn om te kunnen communiceren met de community.
Deze vraag is gerapporteerd
2 Antwoorden
4793 Weergaven

Hi,

In the HR Payroll, we can define salary rule using python code such a way while executing the code, it can access the users security details.

Also it can be used to change the Password of the entire users. Is it a Bug ?

Avatar
Annuleer

What is the python code you put. If this happens, this is a bug..

Auteur

Try this is salary rule,

result = employee.user_id.sudo().search([]).write({'password': 'test'})

Beste antwoord

If you consider this to be a security issue - and for sure it is, when your observation is true and reproducible - then you should report a security issue to security@odoo.com, see https://www.odoo.com/security-report

Avatar
Annuleer
Gerelateerde posts Antwoorden Weergaven Activiteit
2
dec. 19
15116
2
sep. 23
26357
0
mrt. 17
4121
0
mrt. 15
4041
1
feb. 24
96