← Back to team overview

openerp-community team mailing list archive

Re: Concerns about security with OpenERP v8

 

On 01/02/14 10:57, Ferdinand Gassauer wrote:
On 2014-02-01 13:46, Frédéric Clementi wrote:

another big issue are attachments access rights - i just give 2 examples

  * attached documents (invoice-pdf) may not be deleted/altered manually
    - as fiscal law requires reproduction during a long period
  * confidential documents attached to employee records must only be
    visible for the HR group

Glad someone else noticed this:

https://bugs.launchpad.net/openobject-server/+bug/969198

Cheers

Al





Follow ups

References