İçereği Atla
Menü
Bu soru işaretlendi
2 Cevaplar
1934 Görünümler

I found a bug in odoo that a normal user who has access to the contacts can edit company information by just going to partner select his won name then there is a link to the company of partner form click on that and edit. If the user changes the address then it will reflect on quotation/so/invoice.

Could anyone suggest how to get rid of this bug?

Avatar
Vazgeç

Not get what you have stated clearly if you feel it as a bug, then report it at: https://github.com/odoo/odoo/issues

En İyi Yanıt

Hi,

The address for company details(res.company) is computed from its many2one field partner. So basically anyone with edit access to full partner list will be able to edit company address.

If you want to change this you can create a record rule(Settings/ Technical/ Security/ Record rules) for model res.partner so only certain user group can edit company details.

Avatar
Vazgeç